
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
File: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft (raw, json)
Hash identifier: i0x2RLe3O50aj4sJCk2LgNVWQ+af3+/sew+6bIpDmuM=
Subject key identifier: C0:3D:21:AA:57:F4:6D:BE:94:19:79:95:87:FB:0D:23:69:FD:B7:D7
Authority key identifier: 3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
Certificate issuer: /CN=A91BB100/serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Certificate serial: 053D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
Manifest number: 0531
Signing time: Thu 08 Oct 2026 23:44:13 +0000
Manifest this update: Thu 08 Oct 2026 23:44:13 +0000
Manifest next update: Thu 15 Oct 2026 23:44:13 +0000
Files and hashes: 1: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl (hash: 84cEQpJc9MgxzIVrj/SJqxF3f8B5IDvLUVBy+gBITlI=)
2: FE761E84630511EC86F9726BC4F9AE02.roa (hash: rgJw06hmsB9fncZWEsFDb5n/GUpL32l6BWCvyNuaqQg=)
3: D94FB378415811F196DB41B8CB833773.roa (hash: gXPdtCnPPAjwnP0Rk/2BzP0izBu2JHp7rkBkmk8m4yU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl
rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1341 (0x53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB100, serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Validity
Not Before: Oct 8 23:44:13 2026 GMT
Not After : Oct 15 23:44:13 2026 GMT
Subject: CN=6ac82acd-f63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:c3:b2:a6:90:27:d3:3c:5f:23:41:dc:5a:
a5:74:e5:4a:55:22:56:20:3a:fe:e7:e6:2e:25:7d:
b8:e1:18:8c:f2:aa:ef:d3:ae:f3:aa:26:bb:0a:7b:
41:31:3c:be:18:73:a4:cb:ef:87:a1:b2:92:c2:46:
e0:93:cf:61:ad:fd:46:dc:a3:30:13:1e:de:1e:9e:
ee:41:a2:c0:7c:0f:69:90:4f:e9:0b:8f:39:94:b0:
25:8b:36:5d:0a:08:ba:f6:bd:f3:fc:f6:72:be:ec:
59:c0:06:c3:1a:15:35:14:3e:5b:a8:af:7f:2c:df:
d2:74:44:67:b7:72:a2:02:8a:89:1c:2a:c5:87:12:
5e:36:a5:72:00:5d:f4:58:1d:0e:a4:3a:63:73:f9:
02:bd:35:ff:e1:ff:37:1c:85:3c:fd:02:76:95:c6:
ca:45:32:1c:52:a3:8d:d9:7f:22:49:c2:b1:74:a0:
f5:f2:0e:60:1d:16:d8:2e:0f:67:70:e3:63:ce:25:
b9:e4:b4:61:41:79:4d:03:f7:21:2c:f2:69:4e:af:
b1:c7:42:22:cc:10:26:b3:38:67:a5:af:ce:ea:ae:
0d:a2:55:ca:be:51:b0:99:8d:e0:e7:6f:3a:f7:7f:
1d:14:94:9a:84:16:41:fd:63:c7:ba:87:2c:ba:3b:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3D:21:AA:57:F4:6D:BE:94:19:79:95:87:FB:0D:23:69:FD:B7:D7
X509v3 Authority Key Identifier:
keyid:3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:1e:a9:02:61:ec:d4:2e:9d:64:fe:b4:d5:1e:50:4d:af:26:
32:a1:9a:66:64:70:f1:46:14:cd:9f:95:f6:e1:86:3d:d1:38:
ce:d1:bd:2e:c7:fd:5f:61:c7:61:26:1e:a4:bf:4b:c4:03:6c:
7f:18:59:8e:a5:c4:79:1f:04:cb:8b:fd:83:d0:57:bf:f5:3b:
11:e4:54:c1:c6:9b:ca:38:b4:5c:fe:78:ed:91:b2:9e:9f:6f:
a2:00:ae:c8:64:a1:da:8e:53:eb:0b:8a:4d:d3:06:5a:c9:aa:
8a:d3:20:0d:ed:df:43:1c:be:06:87:b4:1c:3b:3c:b6:74:2b:
90:aa:ae:95:ea:5a:f8:3c:6b:bc:6f:1c:5e:19:dc:1a:2f:f9:
64:db:7b:6b:fc:91:54:43:3b:57:39:a0:f9:c5:fe:f4:8a:48:
1f:58:c1:ff:cc:5a:f5:8d:bf:ed:97:3d:2f:70:bc:ac:c6:26:
6c:dc:0e:4d:cd:cb:b7:54:a5:29:6d:24:1e:6d:7a:b9:20:30:
b9:ef:d6:14:a6:10:81:a9:36:d8:e2:d6:15:60:34:ea:94:fb:
5e:c0:82:e3:5e:54:d5:c7:6d:5b:44:cd:52:8c:fc:fa:9d:58:
50:57:5e:9a:d2:c3:bc:36:75:ee:55:0e:07:68:ea:26:55:98:
1c:0a:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:24:54 2026 by rpki-client