
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
File: AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json)
Hash identifier: UqnbhDk+/vMWPoSHlttaN5ZCf59NX6gBgZ4WqcVBZGQ=
Subject key identifier: 07:63:1C:48:3C:9D:34:91:F9:40:0D:25:FB:C8:86:EB:FA:4B:9A:F2
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Certificate issuer: /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
Manifest number: 01C1
Signing time: Mon 05 Oct 2026 05:25:54 +0000
Manifest this update: Mon 05 Oct 2026 05:25:53 +0000
Manifest next update: Mon 12 Oct 2026 05:25:53 +0000
Files and hashes: 1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: ScpnRW3dQCrf7nMFmVdj2GE5Cbg0laB0MV82qYPcbOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Validity
Not Before: Oct 5 05:25:53 2026 GMT
Not After : Oct 12 05:25:53 2026 GMT
Subject: CN=6ac334e1-b204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:fb:64:cb:22:55:61:74:a5:52:12:2f:05:
73:e3:0a:eb:cf:1a:f4:91:b0:d7:1d:e0:ed:c2:34:
42:7f:db:cf:ce:5e:a4:e8:0c:13:55:29:78:6e:95:
41:5c:8c:e4:37:f0:aa:d9:9e:2c:d5:a4:b3:62:4a:
ec:4e:55:f6:0f:c3:22:53:43:ac:93:c4:36:ee:01:
3d:e4:5d:bc:a1:df:82:33:23:e7:b3:c5:92:01:84:
ec:a7:08:98:3a:0e:8a:fd:7f:4a:6a:eb:ad:23:87:
9a:53:e6:a6:b9:49:35:3f:2b:38:8d:e6:15:44:1c:
e4:af:60:95:a6:b3:ef:62:ea:ef:04:a3:89:ce:42:
1e:be:a6:a2:65:3e:a2:7f:bf:97:6c:67:73:11:f9:
22:f6:10:02:80:f1:20:2a:0e:01:5a:fd:90:45:8a:
2b:02:fe:78:7b:57:3e:f3:ae:30:1f:77:b6:61:87:
62:f8:10:b1:4d:e6:d2:71:ed:06:f3:74:ca:d4:52:
40:ba:34:ff:1a:54:2d:e3:20:16:e1:d9:e6:31:aa:
4c:5d:4a:0a:87:94:4c:4f:f1:d3:12:89:50:fa:8e:
bf:ab:42:bc:b2:fd:35:b4:7f:78:58:1a:5d:55:ae:
2a:45:4a:9b:03:30:b6:88:f6:bc:58:1d:52:63:b7:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:1C:48:3C:9D:34:91:F9:40:0D:25:FB:C8:86:EB:FA:4B:9A:F2
X509v3 Authority Key Identifier:
keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6f:2b:83:ea:be:cf:ec:b0:ba:4d:f4:06:fd:73:e0:b6:cc:
b8:20:f6:14:a2:10:d2:93:35:ae:52:e5:3e:c1:2c:93:e9:3b:
ce:53:f8:25:9c:49:66:68:68:64:7d:3f:16:96:05:2f:bc:04:
63:0e:45:37:6d:9f:83:97:1b:bd:4c:39:bf:48:2b:3b:b0:13:
5f:5e:4a:88:24:69:f3:6a:5b:8c:ff:ce:d6:eb:f3:cf:9d:5b:
3e:a3:7f:ce:cb:c7:23:5e:7f:2f:02:59:9d:86:8b:4d:5b:62:
33:d4:a5:e6:eb:93:58:ba:03:6c:cc:c9:3e:ff:73:6b:75:37:
9a:98:63:80:81:6f:9c:9a:cf:93:8a:55:93:f1:f4:b6:46:e3:
83:e2:22:b1:4f:11:a8:0b:40:57:ad:7a:ed:cc:51:69:16:fd:
ec:ba:41:a3:1e:c7:bb:a6:07:47:41:ab:2d:22:18:8f:4b:df:
88:cf:8a:d0:87:17:88:14:9d:53:c1:a8:42:7e:7e:e9:05:26:
30:2d:06:a8:a5:80:24:3d:5d:b3:22:2e:2a:d4:78:45:38:f7:
fe:20:0e:5a:4e:ce:ea:b7:59:26:60:5f:1c:61:4b:3f:d4:a4:
6d:9d:3a:53:cd:f7:5c:db:aa:ca:45:d4:c5:98:db:cb:af:9f:
0a:26:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:47:10 2026 by rpki-client