
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json)
Hash identifier: 4yHDHWCW6mu3XpHZpzqvwyuhy2P9flZvtPTbNUTQPEQ=
Subject key identifier: 2A:86:4D:6B:9A:B0:28:C6:DB:E1:61:B2:CA:07:3A:22:12:79:08:5C
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
Manifest number: 0157
Signing time: Wed 07 Oct 2026 05:42:28 +0000
Manifest this update: Wed 07 Oct 2026 05:42:28 +0000
Manifest next update: Wed 14 Oct 2026 05:42:28 +0000
Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: o8i+a7ur3oZjzDYgCeY0PPTK9Pvc3X4DFzyvsyk3tM4=)
2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Validity
Not Before: Oct 7 05:42:28 2026 GMT
Not After : Oct 14 05:42:28 2026 GMT
Subject: CN=6ac5dbc4-4520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:13:2a:a1:b7:2c:29:1f:f6:01:ca:1d:9e:
73:1f:83:3a:5c:26:2a:81:69:9f:3a:13:4d:76:3f:
85:b0:16:ab:8d:d4:7f:ab:d7:b0:bc:61:c9:8c:b6:
be:02:ed:c7:a9:be:40:dd:2c:75:f3:1d:47:66:1f:
dc:b7:76:7b:0a:87:2e:f5:b8:a2:22:d1:08:bd:f9:
26:54:e2:d3:64:25:0b:d8:34:6e:a9:90:42:ac:51:
92:58:dc:73:73:f4:7b:ae:ee:3c:a5:d7:66:09:fa:
46:13:3c:e0:56:e1:8c:45:c5:11:be:0a:e8:d4:5e:
cf:46:0d:ed:f7:49:c7:14:63:58:dd:35:ee:62:ee:
5a:39:cc:b1:9e:f5:a4:cc:d1:a9:12:43:81:3e:40:
12:e0:82:10:93:a7:9b:3a:31:ae:61:7a:04:18:0c:
ec:d8:62:08:e5:5c:86:41:20:28:4c:6f:08:19:13:
95:e9:12:b3:6a:ea:d4:36:5b:ea:b9:8f:7a:8e:a7:
98:04:34:d4:cd:d2:ee:99:ca:37:df:19:13:66:cd:
ba:e5:ce:f4:e8:c4:b1:a8:63:3d:c1:5d:6f:dc:d1:
be:41:bf:95:3e:f4:65:a4:27:d1:88:68:c1:a2:ff:
e2:a1:26:c0:46:4c:21:2c:3e:2e:e3:5f:37:95:54:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:86:4D:6B:9A:B0:28:C6:DB:E1:61:B2:CA:07:3A:22:12:79:08:5C
X509v3 Authority Key Identifier:
keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:e6:91:d6:f2:14:57:b9:1c:a4:3e:ba:e7:5c:31:a9:ad:96:
b6:88:23:c0:56:97:44:43:a1:97:0d:38:55:8d:df:9c:4f:04:
8b:47:c6:f7:a3:ba:06:cc:25:0d:3b:e7:5d:e9:5d:ed:3a:60:
e1:c1:0f:fd:e3:82:32:1e:47:f0:52:20:fe:5b:f7:78:a0:c4:
17:34:be:e2:cd:c8:a6:f5:4e:c1:32:a2:99:cb:24:1e:1f:ee:
ed:e3:5d:76:69:0f:b4:63:d2:ca:6f:96:e9:a6:c8:51:91:3b:
32:92:da:d6:1a:5c:0f:b4:47:de:98:fb:47:15:9c:42:a5:58:
df:8d:aa:b1:d6:f9:f0:39:e0:90:84:27:2a:fd:d6:cc:58:76:
b0:72:3a:f0:ba:91:7c:23:2b:9a:26:eb:93:77:dc:43:45:2a:
ac:2e:05:28:fd:28:38:d1:b6:da:6c:8d:cf:bd:b8:fd:bf:53:
b6:7f:d3:5c:4a:bb:1d:77:5d:a9:4b:99:67:74:3a:2a:69:0e:
84:54:f2:05:5e:b1:61:25:60:91:fa:28:ef:96:2f:44:46:3c:
8c:e4:78:6b:b1:e9:38:66:15:b4:bc:57:fa:b8:6d:d1:c1:84:
79:41:b0:7e:5f:85:f4:ed:b2:fa:93:9c:ca:af:2c:65:1b:8a:
62:f9:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:30 2026 by rpki-client