
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: Btm5PrOZk3JpacGs0iKO4wi2iJEM3MEdt+aojVx3h0U=
Subject key identifier: 0E:6F:30:73:9F:6A:B3:9A:7B:13:90:73:22:BA:22:59:53:85:B8:EC
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 1531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 14B0
Signing time: Mon 02 Nov 2026 16:56:12 +0000
Manifest this update: Mon 02 Nov 2026 16:56:12 +0000
Manifest next update: Mon 09 Nov 2026 16:56:12 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: +EHTKwcQ3HoYKKm4i5KbBJa8EMVmjVgwHassP/LjDBs=)
2: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: zm1MqNXGifHHQw7D7+UZg2rP++jcV8vgRKdJt+1OETM=)
3: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: dt+5NsmG0LsiiIAJ/456zoXI0G21LcrsXLB6GoxpBf0=)
4: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: wQgJwMWmYSnASInIXk6rHMXTmoXzc8kZ+3skGypDfXw=)
5: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: nONjSL7Nk+Smo1BGPeYTD0NMaDI03tcEC5fOZQRT56g=)
6: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: VG1NZxg6fA3jj9fqTkd/RDf+9mk9xzcBu6dLOJSoifs=)
7: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: qub/Bpna3CT6iPHposhLx/CxezHnGAPtzAyRQsAogRo=)
8: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: ojTPEYFv2UCv6Hj4B8GAB1i8kg1ryqJgTi7BI6aOcAQ=)
9: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: hCR5yBhqk7XvhlBkQhbAwT17ArQVZaJB27Ff6QbF6GU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 16:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5425 (0x1531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Nov 2 16:56:12 2026 GMT
Not After : Nov 9 16:56:12 2026 GMT
Subject: CN=6ae8c0ac-4c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:12:1d:65:0a:25:16:93:bd:42:cc:d5:c0:
04:18:b8:f9:44:42:9b:94:4c:c2:50:53:01:13:00:
42:01:77:91:0e:c6:89:a5:c3:a5:4c:46:d5:90:41:
99:b2:5a:16:5c:0e:c7:0e:a7:8a:17:99:1d:a2:5b:
0e:34:74:1b:6b:57:50:2a:8f:18:78:81:06:1a:71:
48:2f:ab:44:ea:ec:74:5c:71:5a:e6:c6:0a:75:74:
70:8e:61:e1:8f:47:f3:01:d5:3a:46:15:c5:05:e2:
74:9b:a7:fd:07:b4:7c:d6:75:78:4b:39:2b:23:66:
f5:3e:ad:60:e0:02:fa:53:f3:4e:01:fc:cb:cf:63:
20:fb:e4:63:64:f5:6b:02:68:d9:79:25:a1:bb:a4:
78:15:4f:df:e0:1d:67:ad:41:1c:8d:63:eb:00:d5:
6b:b3:ff:93:a9:c5:7f:1c:e1:08:2f:04:26:9b:9d:
cd:bf:79:41:8e:5f:ee:cc:96:86:6d:f0:b8:59:35:
29:1f:cf:e3:93:9c:aa:be:fa:42:83:cc:72:d8:cb:
60:7f:2d:2b:ea:53:06:48:8b:23:44:92:70:40:ba:
c4:c4:71:2a:4f:10:aa:87:79:e0:54:c0:04:fe:73:
74:91:cb:af:bd:59:d6:9c:44:4a:f2:54:3a:90:f8:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6F:30:73:9F:6A:B3:9A:7B:13:90:73:22:BA:22:59:53:85:B8:EC
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:22:5f:73:d0:b3:49:51:5c:9d:5c:ab:78:74:df:e3:9c:fe:
96:0f:32:0a:7b:c1:ae:35:bb:89:93:cb:7b:97:5b:30:46:ff:
ee:7d:71:58:2e:19:77:e2:34:b4:c4:cd:6b:5b:ec:10:90:7f:
49:e5:04:35:30:96:cf:59:6b:69:ce:5b:19:40:d2:6a:e8:f1:
68:e4:3b:69:f7:c5:fa:32:5f:2f:fd:0e:12:8e:bc:eb:70:5b:
a4:dc:f9:f1:f1:12:c3:a9:70:3a:b5:87:c6:c2:b5:64:36:77:
ce:df:87:5d:2a:3d:aa:75:aa:da:be:28:04:62:e4:c4:09:4c:
ed:6a:bc:e9:12:de:d5:86:59:08:17:98:28:db:f9:76:05:fc:
ab:34:dd:66:22:01:f9:5b:00:e2:e3:be:12:ec:e5:f3:0b:66:
82:5e:be:b5:e9:50:9d:16:e9:90:f1:7a:52:bf:02:67:64:c1:
bb:30:62:6a:fc:ab:26:47:97:6e:71:cc:df:b4:4f:a2:fe:cc:
87:3c:c0:7f:33:54:7f:8a:4c:d8:f7:13:b4:a0:c2:b6:7a:e0:
48:68:e3:b7:73:cc:6f:ad:37:8c:1b:4b:f0:70:67:34:c4:42:
e4:18:98:8f:6b:6e:65:57:54:ea:05:a4:6a:e1:1c:3b:3a:0a:
fc:d7:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:59:10 2026 by rpki-client