
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
File: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft (raw, json)
Hash identifier: 8mq+QPP6Sg368IQsz/Iiof9KJkfF5EbjI/qikW0tazI=
Subject key identifier: 72:15:6E:D9:10:37:A0:DC:DE:89:5E:54:B3:90:66:4D:52:61:88:69
Authority key identifier: 68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
Certificate issuer: /CN=A91CE216/serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Certificate serial: 08C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
Manifest number: 08B5
Signing time: Tue 06 Oct 2026 20:41:50 +0000
Manifest this update: Tue 06 Oct 2026 20:41:49 +0000
Manifest next update: Tue 13 Oct 2026 20:41:49 +0000
Files and hashes: 1: aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl (hash: HDXkLmdhs8S7tF2jdo1GzYOeQMzE4GjTOrbYHNdrsYQ=)
2: 7F2355F2FE2A11EA8A51B85AC4F9AE02.roa (hash: LxDrlJvtyaRL2wVNUjApHj5FEy/mIjNevhV6EDdmD1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 20:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE216, serialNumber=68A4FC812D0191363E1C4A13099F53B027376579
Validity
Not Before: Oct 6 20:41:49 2026 GMT
Not After : Oct 13 20:41:49 2026 GMT
Subject: CN=6ac55d0e-a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:34:85:01:79:9a:63:ca:76:07:db:7f:1e:5f:
54:4c:7f:86:89:f8:5d:2b:f0:32:61:33:8e:e3:a6:
df:6a:d6:0d:c3:a2:45:c4:7a:70:3f:e2:c3:9b:bb:
3f:6d:51:5a:72:26:63:a1:ac:36:d5:a2:56:2d:cb:
94:27:63:b9:6e:c4:21:00:03:6b:ea:f4:ac:4c:00:
d4:c2:c0:38:37:44:ed:4c:a3:5d:4a:dc:ca:32:8f:
f2:61:51:c8:34:8d:15:8d:94:b2:6f:1f:b8:42:9b:
20:0d:b7:9e:65:4a:bb:a4:2f:0c:10:cd:44:d5:05:
50:05:04:fc:ac:fe:30:ac:37:ea:b0:2e:dd:fb:6f:
cb:ec:f8:83:a7:ee:84:b7:49:f6:7d:b6:64:cd:8e:
83:21:a2:e5:57:f8:12:13:b1:49:3f:88:e4:63:1c:
f3:24:e2:36:74:1e:3a:76:75:48:c7:34:03:c0:4d:
ca:81:a6:13:ba:6f:0c:53:83:31:50:de:2f:cc:88:
60:f7:8c:c3:f2:dd:2c:e6:e1:0e:05:de:99:27:aa:
0b:b0:7d:3c:cf:d9:db:43:ae:b1:64:ec:9a:c9:b3:
3d:d1:f4:81:f4:39:e3:c1:e4:3b:88:b2:0a:95:e1:
5b:12:82:f2:14:a2:f2:17:f2:cb:a4:f0:06:ea:c2:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:15:6E:D9:10:37:A0:DC:DE:89:5E:54:B3:90:66:4D:52:61:88:69
X509v3 Authority Key Identifier:
keyid:68:A4:FC:81:2D:01:91:36:3E:1C:4A:13:09:9F:53:B0:27:37:65:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE216/AF57B6FCFE2811EAA7350158C4F9AE02/aKT8gS0BkTY-HEoTCZ9TsCc3ZXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:55:54:68:23:7e:d0:98:54:1e:12:3a:0e:60:a3:ed:51:33:
10:4a:24:2e:58:97:7f:a3:ef:1c:d2:7f:dd:39:41:31:a0:27:
69:da:a5:70:26:3e:be:85:c0:dd:3c:18:d1:b6:d4:22:ee:e8:
e9:10:d1:e5:c9:98:19:20:56:05:a7:d9:c8:f6:19:e7:b1:70:
6e:e5:b4:78:5c:20:63:25:6d:6b:d2:e8:21:c3:74:61:3b:2a:
43:ea:03:4b:b5:f6:e2:71:bc:b2:0f:43:06:35:4a:f6:e2:ec:
36:a6:54:23:8f:5e:84:2b:e7:2a:24:89:4e:93:59:fb:48:dc:
1c:24:d6:65:e6:58:03:0a:2e:4b:6b:48:27:3e:39:e7:9e:a4:
37:54:f6:bc:44:83:47:5c:95:67:7f:ad:c7:bd:93:fd:4c:b8:
80:0c:44:81:18:75:77:8f:53:88:ea:ba:ae:ac:62:e3:ff:fd:
8b:d4:7c:18:83:aa:fb:3e:20:dd:11:4c:67:ea:75:65:52:40:
a3:37:47:89:9f:a0:ea:2c:59:7e:4d:07:23:3d:69:50:bb:4a:
0f:74:4b:c1:e4:a9:a3:dd:94:af:1a:61:09:0b:4e:d4:47:11:
57:0b:3f:e8:00:33:f5:fb:02:21:67:f6:af:3b:38:04:73:ad:
4c:59:f0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:37:32 2026 by rpki-client