
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json)
Hash identifier: 5noKtxh0y8DVkpiD8gv4a/LkRHMHqkjBLHRtriv85V0=
Subject key identifier: 3B:66:A1:B5:12:20:F7:4F:0A:09:AB:C4:A2:BB:7D:0E:13:1B:5E:E2
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial: 05A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
Manifest number: 0597
Signing time: Wed 28 Oct 2026 23:25:49 +0000
Manifest this update: Wed 28 Oct 2026 23:25:49 +0000
Manifest next update: Wed 04 Nov 2026 23:25:49 +0000
Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: bb8wgL8hvYhMIl78X5uBzCGDqCkSXxFxGsX1nEf6cLU=)
2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: PITcK7XRyy+LMYXHuylhY3+Q/YKqPcRjVZDoGb15cIU=)
3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: GZLAqFDcKyRRvVvDeTXr2Kcx2FQWYyo5VaaW0SZn3+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1449 (0x5a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Validity
Not Before: Oct 28 23:25:49 2026 GMT
Not After : Nov 4 23:25:49 2026 GMT
Subject: CN=6ae2847d-2b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:4a:81:11:39:7e:1b:3d:1a:ab:f7:86:51:
ad:3f:7f:a0:e0:52:0e:4b:62:28:2e:e8:f7:aa:b4:
31:cb:35:d7:15:11:94:83:bb:68:86:64:39:c7:e4:
f6:43:7a:53:26:3d:dc:4e:08:5b:77:4d:e8:9f:83:
05:0f:d3:9e:65:54:cf:46:fa:89:ce:89:38:81:47:
e2:28:59:fc:ae:62:a4:eb:0c:98:90:fc:9a:be:00:
39:f9:49:9e:04:14:2c:59:bd:5d:40:29:33:0d:04:
aa:49:e1:9d:fd:8b:7d:4b:7f:60:d7:07:b3:73:e7:
84:77:c4:4a:31:f0:73:e6:ac:3a:4b:f5:c3:d7:50:
6b:24:f0:dd:14:07:11:ef:63:94:0e:b0:96:e3:5c:
f3:ff:0a:54:ed:71:cb:ea:22:50:be:72:f5:b6:a0:
8c:51:87:14:d9:48:2f:1b:0f:ef:e4:2c:10:01:12:
8f:a4:24:36:b5:c7:09:cd:7e:99:f2:97:92:bc:d6:
e1:e4:d4:d5:1b:bf:d5:80:1a:91:db:b4:45:b4:4f:
3c:19:fe:26:00:40:90:48:13:73:e2:75:45:09:5f:
e0:73:db:0a:16:da:62:e9:b0:2c:36:2c:bd:c6:bb:
aa:a9:54:cb:8f:7d:38:80:27:e2:d8:c8:ea:82:7b:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:66:A1:B5:12:20:F7:4F:0A:09:AB:C4:A2:BB:7D:0E:13:1B:5E:E2
X509v3 Authority Key Identifier:
keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:61:7c:0f:32:d2:92:e5:da:e8:d8:0c:5b:b7:3d:85:5c:73:
8a:e3:a0:93:b1:8c:1b:cc:4f:7c:fb:4e:d1:13:52:a6:fb:a1:
bc:e7:b8:22:28:d1:ad:0f:7b:2c:92:f6:c8:d7:f3:78:52:0d:
9a:6d:99:42:c2:27:30:3d:c1:7a:80:55:14:31:1c:be:a6:a2:
9e:48:f2:8e:be:93:43:76:59:f9:8e:26:8a:a6:f3:98:1f:83:
ca:52:6e:2f:ea:2c:af:17:a4:cd:a1:e0:56:7b:4c:40:2d:b1:
2e:e3:03:92:a9:03:5e:ba:fb:b8:49:43:2e:cd:bd:74:d9:fc:
e9:5e:34:95:5b:57:66:1a:39:7d:15:a0:e4:c7:7f:1e:be:5c:
d5:06:cd:04:d6:56:a5:2e:99:88:1e:c9:9d:a8:68:2a:7e:8c:
ef:dc:64:ff:3e:6e:cb:b2:eb:4d:93:c8:c3:2b:26:e2:57:dc:
ea:70:ed:04:70:56:b3:de:9a:5a:ff:95:f1:2d:f5:2f:2a:28:
77:68:fd:af:2a:fe:75:1f:6d:8d:3d:9c:bf:6c:62:a0:6d:71:
e3:9a:c0:2a:54:dd:6a:37:be:b5:27:4e:58:4b:ef:d6:a6:c1:
2c:77:ff:e0:02:5e:3c:2f:41:6a:dc:cd:36:ec:c5:2f:56:70:
73:e1:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:41:29 2026 by rpki-client