
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
File: A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json)
Hash identifier: rKiWSMViixTKp5voDO7bRo2gWI9aJ85ILifvK7xfjoE=
Subject key identifier: FC:90:1C:D8:A3:4A:FB:97:2C:C3:14:BF:81:29:9B:E4:8F:4A:9C:79
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial: 128B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
Manifest number: 1031
Signing time: Sat 24 Oct 2026 17:51:34 +0000
Manifest this update: Sat 24 Oct 2026 17:51:33 +0000
Manifest next update: Sat 31 Oct 2026 17:51:33 +0000
Files and hashes: 1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: PAm1iEIXMPjSVNsBDqeel9H6xGXIdwXNPgUSiuIWoN0=)
2: A25B6E909E0311F18E1FD92A4A11F970.roa (hash: 0qfS4Tulhh74VpatYXS3ztYz0ycVKBZwgb1B/JbsnRg=)
3: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: kccLJAAJUftI3LLIsTKo7BiUv/BhOLEvY3/TqmL54Ss=)
4: BD60B6F059A211F183AF6F31B8833773.roa (hash: cNwv63/9s+kMtXt+Cr4yAjM1fI/LlZbgaRJaSG3g5nA=)
5: 55D1A87064CC11F18E187B1B6847A888.roa (hash: 7Z2NciEgokUCo5EnpCBiXza/5v3JJ7UnsmlRE5tDajQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 17:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4747 (0x128b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Validity
Not Before: Oct 24 17:51:33 2026 GMT
Not After : Oct 31 17:51:33 2026 GMT
Subject: CN=6adcf025-5922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:15:28:7c:2a:85:2a:c8:01:f5:e8:20:a6:
73:0b:1a:41:44:ed:24:db:41:44:06:e2:3f:4e:8d:
80:61:24:fe:e5:67:b3:f1:02:be:44:5f:ab:13:a5:
7f:a6:f9:32:81:e8:02:eb:6c:57:9c:8f:d3:47:68:
86:2e:96:14:6a:5d:53:91:0d:11:c2:fb:30:11:8e:
d3:26:04:66:4e:64:34:f7:3e:52:e7:a9:8f:0d:c0:
5d:d1:3b:15:f0:3c:ae:de:0f:ea:e5:68:04:53:6c:
ae:8d:c3:89:50:87:ac:e3:84:26:5c:e8:f6:cb:09:
d4:f2:40:19:b1:fe:56:b3:36:86:2a:17:69:5a:98:
21:e0:c3:00:1b:36:2b:dd:20:fb:3f:e7:af:10:a7:
e5:be:ae:51:c7:fe:37:a6:48:f8:5b:47:81:38:a2:
57:bf:06:cd:e3:6d:e1:bd:a4:7e:af:91:86:6d:53:
42:ab:6f:df:33:cc:64:c2:aa:3e:9d:f3:27:75:db:
06:49:4b:6c:c4:ab:bb:44:31:15:1e:a4:fa:14:92:
7e:23:57:7e:0f:7e:84:14:9a:4b:7c:fd:94:20:3e:
b2:e4:c0:43:c0:e5:1e:4d:18:38:92:1b:ba:de:e6:
4c:37:6d:f5:c7:bd:bf:6c:e5:cb:40:ff:e8:09:f9:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:1C:D8:A3:4A:FB:97:2C:C3:14:BF:81:29:9B:E4:8F:4A:9C:79
X509v3 Authority Key Identifier:
keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:52:63:00:8c:6a:32:11:86:bd:bc:96:69:3b:9a:4b:22:35:
d7:87:76:dc:e0:a8:ca:0a:95:c7:80:cd:97:48:92:5a:d5:04:
68:e6:ae:89:4a:b2:78:8d:c8:8a:76:68:cd:f6:05:40:41:d6:
8f:ab:24:a5:84:df:30:a0:02:a5:68:70:0d:27:35:7f:35:55:
47:cd:08:73:bd:16:14:c5:76:11:86:1f:03:fe:c5:7a:18:89:
54:21:2f:6b:88:6d:b6:e2:71:1c:fc:6d:fb:98:8b:65:83:c8:
a8:f1:d2:f1:4e:f5:a4:2e:7d:13:5e:9a:7d:61:45:29:59:10:
e6:f2:4f:9b:8d:e1:7c:04:4b:6e:84:6c:91:9f:57:1a:1c:06:
21:e7:ca:b8:6d:04:0c:f0:ab:1b:ca:06:6c:41:1b:df:f3:47:
61:7a:b6:74:df:72:10:33:a2:c7:fd:03:a8:f9:c1:53:2d:1c:
5e:88:c0:00:a4:7b:bc:37:f7:81:97:0d:7b:3a:93:f4:95:4f:
35:75:c8:88:77:03:61:f6:c3:47:80:8d:1c:89:6f:99:ad:99:
18:8b:d1:99:22:f6:9f:f7:78:ad:7d:06:05:c6:cb:e3:1d:d3:
0b:1d:8a:95:66:f8:2d:eb:54:df:3b:00:d3:ae:17:24:50:50:
f8:5e:a7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:21:04 2026 by rpki-client