
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File: AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier: ebdrkxFvmsW448OvT5WSOY7xNuqklNqCUk6DVj4ko/8=
Subject key identifier: 1A:C2:A6:61:C3:0C:EB:2D:DA:89:BA:4A:36:07:AA:93:BD:74:C4:43
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer: /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial: 084C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number: 0827
Signing time: Tue 06 Oct 2026 21:20:10 +0000
Manifest this update: Tue 06 Oct 2026 21:20:10 +0000
Manifest next update: Tue 13 Oct 2026 21:20:10 +0000
Files and hashes: 1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: V5pgQLmlaHQER/x4wTJrfnoWEJxXNjTpAko4C9H4qwc=)
2: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: T/CKAwe8N408GvjfoSl3NP/W24L3kVYXhNzRByIXSbo=)
3: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: ZuhRcUdP5wWWKIGm+OsKBc5cm+WWrvev341G/9NcVBk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Validity
Not Before: Oct 6 21:20:10 2026 GMT
Not After : Oct 13 21:20:10 2026 GMT
Subject: CN=6ac5660a-1a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:6e:1b:37:d7:ac:1e:91:f3:45:83:67:a1:
81:ce:9f:63:c5:a4:b3:36:df:77:0f:c4:6a:a2:f3:
91:db:f9:43:cb:1d:d3:1e:4f:ce:52:4f:19:46:0d:
b9:24:33:08:2f:fc:06:f5:90:78:da:3b:00:b5:3b:
8f:7e:9e:8d:b7:bf:b8:dd:4b:56:1b:94:1c:e8:68:
f9:2a:ec:c4:11:7a:a9:9b:34:44:17:98:90:d8:e4:
37:e4:bc:d4:02:3a:00:d8:63:60:16:0c:c6:b6:de:
05:a5:58:84:9b:7f:f1:6f:90:93:b6:38:90:25:91:
62:10:a5:da:d4:7a:71:83:42:9c:7f:3a:ed:e8:89:
6c:52:74:47:2e:d5:34:31:0f:9f:bb:73:fb:25:ac:
88:98:95:7a:e8:24:c8:2d:a1:5d:7c:a5:85:7d:88:
35:25:24:4a:f5:70:e2:db:30:64:bf:30:fd:50:a6:
6b:17:49:dc:5b:c6:af:02:17:17:e3:41:78:89:ac:
68:fc:c8:21:83:7a:b9:40:4c:1a:6d:93:50:4a:28:
45:9a:82:c6:1e:80:99:66:00:0a:55:af:42:3d:3c:
c8:86:7e:b7:df:ce:d8:4f:8c:cf:3c:3a:12:4a:e6:
ef:c9:b1:eb:24:0b:ff:30:92:10:d2:27:66:b2:57:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:A6:61:C3:0C:EB:2D:DA:89:BA:4A:36:07:AA:93:BD:74:C4:43
X509v3 Authority Key Identifier:
keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2e:82:44:67:80:04:e4:c8:79:c7:90:51:07:32:b5:11:d9:
c1:3d:ff:f0:95:4c:8f:69:6b:8e:7d:99:a7:a5:2c:80:38:07:
0c:36:ff:da:10:9a:eb:9e:20:ad:af:87:d7:ba:80:95:3c:37:
71:6b:5f:1d:49:15:c1:5c:9d:20:4d:95:e8:6e:bd:d5:4a:0e:
fc:49:64:a8:1c:d0:73:36:3f:81:a3:1c:31:e7:01:30:2e:53:
db:55:a4:30:65:22:46:68:0e:14:d2:60:2d:9c:f5:43:60:95:
a1:4d:c7:20:1d:4b:26:7e:f8:a8:54:b9:1b:4f:ef:09:6e:18:
a8:9a:7e:98:bd:bc:97:3e:f6:34:2b:c2:dc:bb:5c:c6:05:05:
c3:25:ad:94:e0:50:c1:d3:30:cf:7c:50:9a:66:1c:f4:15:27:
b5:62:9f:89:11:10:43:1f:71:49:61:71:74:9d:ee:ef:a5:97:
4d:b4:5b:81:2d:68:e6:7a:98:e4:03:47:4d:aa:7c:03:e2:6b:
34:92:0a:de:5c:42:51:b7:0d:ab:e8:06:70:5f:54:72:eb:75:
eb:b1:ba:a1:ea:ec:95:ad:fb:eb:61:8b:0e:8f:bc:c6:fa:3d:
d1:7f:ec:05:e8:73:ab:56:2d:7f:08:7a:5c:69:36:ad:2e:85:
66:0b:22:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:57:05 2026 by rpki-client