
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
File: iV5rynpcNtnzBEctDScTpILJ2yU.mft (raw, json)
Hash identifier: proHsQpuQvIpUjcqrXFXUexat5MDH0xiVLOIjMbGltQ=
Subject key identifier: 83:17:67:4C:A1:FB:A6:A8:E2:42:47:B6:0C:37:80:DB:F2:EF:3C:4B
Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
Certificate issuer: /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Certificate serial: 0D52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
Manifest number: 0D46
Signing time: Tue 06 Oct 2026 18:15:53 +0000
Manifest this update: Tue 06 Oct 2026 18:15:52 +0000
Manifest next update: Tue 13 Oct 2026 18:15:52 +0000
Files and hashes: 1: iV5rynpcNtnzBEctDScTpILJ2yU.crl (hash: b1N/DdO+TpYZi4pKg1JQXcX2fhqlrDCCNribKpRg7tI=)
2: 37759456617811ECBB095A62C4F9AE02.roa (hash: +R4LaSdSdI4rptj9gcyqC1YCWuipohsg4zPzzR0FvRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Validity
Not Before: Oct 6 18:15:52 2026 GMT
Not After : Oct 13 18:15:52 2026 GMT
Subject: CN=6ac53ad9-b7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:2e:b3:46:ea:38:c7:e1:da:64:f9:bf:70:
b8:d3:ad:cf:99:07:09:3e:76:bc:a7:e4:8b:78:27:
81:0b:b6:55:b5:54:a4:95:67:da:48:4b:aa:8d:c4:
88:58:c4:47:ab:7e:4f:1a:d7:48:df:07:04:a9:b2:
63:b6:84:67:fc:a3:96:e7:f3:a3:00:b9:43:ff:9a:
74:43:8c:6c:de:bb:b8:d2:fa:37:a4:ee:68:ea:3d:
74:66:02:38:61:e9:8f:88:35:9c:06:09:b8:e9:e3:
d4:aa:cd:b1:e2:a7:2d:83:30:a7:6a:c1:da:c4:45:
11:4a:b3:46:8c:9c:a7:cf:4f:36:32:b4:62:e1:dc:
42:23:6b:c9:73:ef:d9:2d:6a:0f:01:61:d0:53:3c:
75:3d:44:22:1b:52:d4:40:09:63:4f:bf:0a:f9:48:
fc:dd:e2:a1:79:49:55:f0:ed:0f:60:ed:30:03:9a:
fd:32:87:82:d5:0e:39:96:26:93:29:a2:f5:27:9e:
8c:4e:fa:41:eb:b5:65:4f:b9:d7:f2:d4:8a:89:db:
d7:1b:62:f2:dc:d0:5a:8f:3d:de:e1:d3:ae:d7:ed:
8b:72:12:bb:8d:91:47:16:8f:fb:fd:ec:71:24:62:
c0:e1:a7:b9:87:06:75:0d:0e:54:51:86:70:98:a8:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:67:4C:A1:FB:A6:A8:E2:42:47:B6:0C:37:80:DB:F2:EF:3C:4B
X509v3 Authority Key Identifier:
keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2e:6f:6a:f7:01:81:2e:b9:1d:0b:f1:dc:9c:3e:3c:a0:0c:
4c:29:e8:41:67:51:b9:aa:d7:79:f4:53:f3:7f:83:dd:99:e4:
d4:e8:ca:3f:f5:98:63:e2:f5:c0:54:e5:85:1c:57:25:94:74:
b1:a8:36:86:20:ba:1a:14:9f:79:e4:10:2a:c0:8b:e8:04:b6:
11:37:be:93:a4:2f:ba:8a:68:f8:df:9a:b7:29:78:ab:c0:e8:
9d:65:03:fb:2e:0c:13:b1:3a:43:44:4f:3c:37:21:56:5b:e8:
1d:88:c8:3e:44:05:4d:1c:f0:2d:ee:3c:8d:81:67:a7:26:bf:
de:a7:cf:de:90:7e:34:4a:8d:38:92:7a:5d:79:ea:ca:e2:1a:
31:23:66:aa:ae:45:9d:5c:a6:df:d9:7b:9b:2d:b2:d4:00:82:
81:3e:c3:97:17:26:9b:21:18:38:29:81:85:67:76:7f:af:5e:
7a:72:2d:c3:74:b8:20:55:6c:f7:6c:04:a1:fc:54:99:b2:3e:
c3:34:d2:42:8f:ea:0a:27:f1:53:50:cb:a5:6a:c0:c7:a6:e1:
8e:09:a3:22:66:57:46:38:b0:48:8d:25:4e:bf:bf:ef:a9:c0:
21:0a:81:85:8a:2f:0f:17:08:57:7d:2d:cd:ef:a0:5a:da:a2:
88:56:45:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:15:16 2026 by rpki-client