
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json)
Hash identifier: +6CTQgnWX+Y6suoWkQ3EAlZfgXpY4Qdl5DIk7iOiwVg=
Subject key identifier: DB:B2:B9:49:9A:F8:03:F5:D7:F8:58:44:FE:00:AE:B3:BD:08:DA:4A
Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Certificate serial: 047E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
Manifest number: 0465
Signing time: Wed 07 Oct 2026 00:17:46 +0000
Manifest this update: Wed 07 Oct 2026 00:17:46 +0000
Manifest next update: Wed 14 Oct 2026 00:17:46 +0000
Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: RcQQ3dUz2GpBNen6bmiKE8uHNQjcMMNkbgW/gE5kL5E=)
2: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: awz0vyeOEa2wzssGTfI+LM2VIBRt25P6nvMYDO9Rc9w=)
3: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: HbDsx8wK6DOfRunn3fkb89gQPdtEbiGqu2/NfV9cVcw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Validity
Not Before: Oct 7 00:17:46 2026 GMT
Not After : Oct 14 00:17:46 2026 GMT
Subject: CN=6ac58faa-67a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:98:2e:95:a3:af:bc:81:56:78:7c:37:f0:
2f:1e:70:93:b4:5a:d8:4e:2a:95:ee:50:50:47:67:
82:77:b3:2e:77:04:4f:eb:10:df:33:90:8a:92:4b:
b3:1f:d9:c5:14:c0:1b:36:71:c0:dc:58:c0:b0:0a:
53:87:f2:76:40:51:24:60:5b:4c:99:e9:ec:41:c5:
30:ad:5e:cd:91:57:ff:cc:76:8a:16:80:ec:dc:f6:
05:15:f3:73:33:4c:78:d1:08:84:66:55:b4:8f:5c:
e9:07:f2:88:21:9a:b7:ac:21:cd:80:76:c6:ec:3c:
f9:10:31:09:ee:ff:73:61:e8:2e:98:49:87:94:1f:
79:dd:22:f3:ea:0e:c2:c6:3b:69:cf:b3:fd:77:40:
3d:73:96:5b:da:26:92:17:22:9b:2b:d8:57:a7:e2:
11:84:b9:f6:3c:f3:5a:b9:b4:62:b8:9d:70:a8:20:
24:80:bc:37:ae:d6:e7:86:63:26:41:57:41:77:6c:
96:cb:f8:bd:70:c6:f1:e4:e2:27:df:0e:21:f4:50:
1a:a6:76:24:97:35:62:df:42:2e:52:dd:3a:86:d2:
12:c0:b1:9e:a4:88:cc:af:85:f5:c1:9b:9e:eb:2a:
82:ac:b1:49:74:99:06:4f:c3:5e:eb:1c:4f:80:cc:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:B9:49:9A:F8:03:F5:D7:F8:58:44:FE:00:AE:B3:BD:08:DA:4A
X509v3 Authority Key Identifier:
keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:73:2d:fd:4c:e1:2f:7a:ad:98:9d:0d:b0:45:38:17:2e:91:
4d:08:dc:f6:77:05:9d:f3:3d:ab:a0:1f:fe:28:c5:7f:9a:28:
24:96:71:2a:b1:1b:33:69:d9:29:2d:cc:7f:94:7c:d5:63:ee:
7f:5d:9a:73:12:ca:3c:e1:b9:13:89:10:2e:5e:6d:75:35:34:
2c:cc:25:4f:a7:2c:5e:53:be:85:3d:49:f2:e5:50:21:38:0b:
2a:8f:68:d0:40:63:8f:ce:16:07:03:32:a3:33:74:04:3c:f0:
da:11:3b:76:67:6a:f8:f1:15:86:10:6f:f1:84:ef:37:b7:26:
74:4c:42:db:58:b7:76:a1:45:b1:71:2e:c4:b1:2a:ce:4b:c9:
b2:e7:bc:d6:ee:9a:e8:ee:5e:c9:7b:70:2c:7d:bf:7d:d9:a2:
fa:52:40:e0:66:76:a2:39:97:4f:b0:19:fa:29:89:b7:77:1f:
a2:05:af:14:80:e9:d1:17:72:81:11:86:c4:66:46:82:c1:00:
16:45:b9:4f:d3:e1:fd:01:67:8f:5a:f3:32:44:10:f2:88:a7:
69:2f:dc:b7:a6:36:d7:c4:14:32:19:42:a3:f1:f5:2a:c9:d5:
97:9b:13:dc:6a:6d:3e:1e:b3:27:48:ed:c8:09:84:3b:c9:45:
e6:ee:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:13 2026 by rpki-client