
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier: jYoCGbxXZPm3Zv9wjuI1RAMKszG4ynNqSdMs6fAlwXY=
Subject key identifier: 4A:10:75:24:3D:0B:AC:FE:F1:4C:31:B4:D8:10:38:43:7A:8D:A4:BC
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial: 1C51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number: 1C45
Signing time: Thu 08 Oct 2026 16:14:50 +0000
Manifest this update: Thu 08 Oct 2026 16:14:50 +0000
Manifest next update: Thu 15 Oct 2026 16:14:50 +0000
Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: qgZEztfXqwelHa0+prj7b3c2LhoGGcqLO6vYF9y1ZK8=)
2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7249 (0x1c51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Validity
Not Before: Oct 8 16:14:50 2026 GMT
Not After : Oct 15 16:14:50 2026 GMT
Subject: CN=6ac7c17a-748a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:81:28:11:4e:47:57:2f:64:83:35:73:ea:ce:
65:c1:c2:e6:da:4e:59:cc:d1:0a:0b:a4:f1:04:ed:
5d:78:46:03:f4:0d:f9:e2:08:4f:05:70:de:f7:a0:
70:33:83:92:22:59:5d:65:5d:46:d5:ef:d7:71:11:
98:97:36:81:c8:4c:6b:f2:b5:9c:b7:d2:9c:6a:2f:
3c:5f:f0:77:d9:33:b2:71:4c:90:84:22:db:84:0a:
0e:b0:dd:41:ef:ea:95:82:32:8a:1c:fe:0a:27:77:
87:90:44:ba:da:26:08:bd:3d:d3:64:47:12:fa:ed:
4e:0f:19:28:c2:9e:37:39:91:16:68:46:fa:e9:6c:
ad:06:4e:35:47:68:33:c9:75:a0:9c:53:66:8f:4a:
51:9f:94:05:b4:7d:15:68:9f:39:da:35:39:28:ca:
2e:5b:d9:4c:76:90:0d:e8:bb:27:74:04:17:ed:17:
40:19:55:c7:8d:63:d2:e0:54:eb:5d:6a:74:21:5b:
30:fd:1e:2f:bc:4b:1b:7b:b8:c3:b6:5d:b3:c4:ae:
e5:e4:99:dc:a8:56:ae:16:7f:16:c6:1a:be:34:9f:
b2:d0:f0:9f:ef:d3:77:ad:8a:bf:4b:32:d1:7b:1a:
ac:61:17:12:96:2a:1f:76:a8:9d:81:12:c9:c5:9b:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:10:75:24:3D:0B:AC:FE:F1:4C:31:B4:D8:10:38:43:7A:8D:A4:BC
X509v3 Authority Key Identifier:
keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a8:8a:d4:1a:a2:ef:35:92:36:52:50:3d:f3:57:4a:de:9b:
fd:ee:72:5d:30:e2:9c:58:b1:e1:67:b0:62:1d:bb:f4:1d:b4:
ca:3b:7d:eb:1d:8b:16:75:87:85:1f:4c:46:a2:78:2a:82:d2:
7b:dd:b6:ff:ee:c5:2a:d2:00:88:2f:fa:ce:47:7b:20:92:9f:
b1:a5:59:8c:48:c5:22:7f:8b:15:de:4a:c2:fb:07:00:6c:77:
7e:e3:14:ac:7e:a3:81:03:a9:44:b8:91:b7:00:a4:ef:1e:3d:
20:11:54:b2:3e:91:4f:c8:6c:7f:47:0d:9f:6f:14:66:be:76:
3f:27:cf:1f:ce:90:28:b0:2e:64:43:22:8a:9e:dd:09:66:38:
a6:bf:48:53:b7:0f:f8:fb:7d:cf:f2:2f:ab:a6:72:84:cd:82:
ca:86:f3:dd:52:37:99:71:2c:1f:44:ba:94:88:ea:ab:aa:39:
b9:60:4a:f5:f6:89:2f:98:fd:45:b1:00:01:9c:4e:2c:94:1f:
72:21:65:82:dc:f2:4a:e7:05:39:6b:0d:9d:89:65:0b:05:e2:
06:77:7d:5d:fc:c7:d4:5c:85:26:8d:b1:48:13:22:29:7d:5f:
02:90:22:74:07:ea:c0:b5:f6:7e:83:34:16:b0:ea:fe:2e:1a:
29:c5:23:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:42:43 2026 by rpki-client