
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json)
Hash identifier: 7QfHNoL/qXu5z5FEQbB6jVMcRwOmEx7n5+v/KpE/Iy4=
Subject key identifier: 68:FE:98:0E:A8:6C:16:8E:40:AC:2A:6A:4F:9B:8A:EB:04:EC:BA:E8
Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Certificate serial: 069C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
Manifest number: 0694
Signing time: Thu 22 Oct 2026 22:33:34 +0000
Manifest this update: Thu 22 Oct 2026 22:33:34 +0000
Manifest next update: Thu 29 Oct 2026 22:33:34 +0000
Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: VCik5wQjhAj8RehglW2DfMbAhS5fgJYIuKpI7qr9h3A=)
2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 7ciUUzLJ+kZgShwA8i58YsGujRYv/UGV/4XGImsbT2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 22:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1692 (0x69c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288
Validity
Not Before: Oct 22 22:33:34 2026 GMT
Not After : Oct 29 22:33:34 2026 GMT
Subject: CN=6ada8f3e-179e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:a9:91:62:8f:d9:a9:c5:24:cf:72:74:fc:
b4:e7:19:43:a4:b9:e6:21:76:ca:da:3a:b1:5b:76:
6d:98:2b:05:1e:ac:91:ac:d2:85:77:60:6b:1e:68:
ef:f7:bb:66:14:d9:52:22:90:61:3f:0b:6a:70:dc:
de:34:30:4b:52:1a:fa:b5:93:fa:25:c3:1a:3b:52:
20:8f:0b:1b:00:e6:be:7d:c3:9c:5e:99:91:db:24:
d5:9e:e1:80:8b:b3:40:7b:28:24:2e:e5:95:05:99:
64:7c:b9:0d:39:dd:51:ab:be:a0:5f:9c:25:a4:2d:
1f:02:b1:db:e6:cb:ee:4a:94:9b:e6:7a:23:3b:ba:
6d:d8:10:09:16:c7:35:1c:fe:9c:5a:64:ea:f8:04:
78:d4:10:18:44:b1:4f:19:93:42:ab:4b:1d:8f:81:
18:fd:09:69:20:69:64:cc:01:13:36:53:8b:2a:96:
26:74:5b:57:88:e2:15:d0:c3:41:3a:18:b3:ba:ad:
f7:b3:42:93:5e:bf:be:5a:b9:f4:8e:9e:59:85:4b:
9e:48:6a:8f:9f:d8:35:72:e1:21:f1:73:81:e1:52:
5c:c2:d3:49:50:9f:16:d1:45:5a:4e:b3:e2:74:b2:
ff:62:56:38:78:fd:36:e4:09:a8:3f:24:83:36:7a:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FE:98:0E:A8:6C:16:8E:40:AC:2A:6A:4F:9B:8A:EB:04:EC:BA:E8
X509v3 Authority Key Identifier:
keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:93:d3:d0:fa:a5:ae:59:8c:76:e6:b7:8f:fb:d9:54:31:41:
e7:34:dc:da:4b:d2:63:b6:fd:9c:97:68:85:70:81:55:01:57:
39:67:8a:de:0b:87:64:99:97:4f:a7:0c:00:88:24:28:62:80:
b5:6a:9d:46:09:f4:6d:f9:55:6b:cb:28:cc:61:f4:b2:07:1d:
e4:61:3b:29:30:bf:c3:7b:61:a7:a5:ac:4f:bc:59:19:67:5e:
cf:28:bc:74:82:b1:0c:59:0a:ed:08:e3:c9:ff:ea:41:8a:c6:
ab:80:f2:2a:89:da:65:cd:dc:63:f3:ce:4c:69:94:92:9c:6d:
c5:cf:06:03:34:7d:62:c9:fd:7c:67:3f:ff:8e:18:88:d4:d9:
14:ae:1e:7d:9c:a0:eb:47:17:d0:26:ca:9c:95:d5:0d:f5:a6:
83:26:2d:3d:77:ba:2b:3e:4e:b2:cd:eb:cf:c3:d4:49:a1:eb:
d8:a7:8c:77:cd:03:40:62:24:94:ab:f8:f4:84:19:c0:29:b6:
45:3e:2b:81:9c:58:de:fe:70:5c:62:88:5d:0f:d9:28:85:fa:
0d:8b:5b:c6:59:82:a7:e4:1b:1b:59:8f:39:c0:3c:1f:b9:f7:
48:1b:4e:19:39:b2:4a:12:37:4e:9c:bb:d8:23:50:c6:8f:33:
30:a6:ae:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkyOUYxMTAvBgNVBAUTKDhCNTdERDE2QkQ5N0ZCNUJGQzIxRDlDQ0E5RTJCODZE
NTUwMkUyODgwHhcNMjYxMDIyMjIzMzM0WhcNMjYxMDI5MjIzMzM0WjAYMRYwFAYD
VQQDEw02YWRhOGYzZS0xNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LmpkWKP2anFJM9ydPy05xlDpLnmIXbK2jqxW3ZtmCsFHqyRrNKFd2BrHmjv
97tmFNlSIpBhPwtqcNzeNDBLUhr6tZP6JcMaO1IgjwsbAOa+fcOcXpmR2yTVnuGA
i7NAeygkLuWVBZlkfLkNOd1Rq76gX5wlpC0fArHb5svuSpSb5nojO7pt2BAJFsc1
HP6cWmTq+AR41BAYRLFPGZNCq0sdj4EY/QlpIGlkzAETNlOLKpYmdFtXiOIV0MNB
Ohizuq33s0KTXr++Wrn0jp5ZhUueSGqPn9g1cuEh8XOB4VJcwtNJUJ8W0UVaTrPi
dLL/YlY4eP025AmoPySDNnpRIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGj+mA6o
bBaOQKwqak+biusE7LroMB8GA1UdIwQYMBaAFItX3Ra9l/tb/CHZzKniuG1VAuKI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5Ri8zQkU1NDlDRUQ2
NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0xdjhJZG5NcWVLNGJWVUM0
b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kxZmRGcjJYLTF2OElkbk1xZUs0YlZVQzRvZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTI5Ri8zQkU1NDlDRUQ2NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0x
djhJZG5NcWVLNGJWVUM0b2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJZPT0PqlrlmMdua3j/vZVDFB5zTc2kvSY7b9nJdohXCBVQFXOWeK3guHZJmX
T6cMAIgkKGKAtWqdRgn0bflVa8sozGH0sgcd5GE7KTC/w3thp6WsT7xZGWdezyi8
dIKxDFkK7Qjjyf/qQYrGq4DyKonaZc3cY/POTGmUkpxtxc8GAzR9Ysn9fGc//44Y
iNTZFK4efZyg60cX0CbKnJXVDfWmgyYtPXe6Kz5Oss3rz8PUSaHr2KeMd80DQGIk
lKv49IQZwCm2RT4rgZxY3v5wXGKIXQ/ZKIX6DYtbxlmCp+QbG1mPOcA8H7n3SBtO
GTmyShI3Tpy72CNQxo8zMKau8w==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:09:18 2026 by rpki-client