
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json)
Hash identifier: DOlC0QQN8dCvUy5Y9YN8KAZ59EXKvklUsS4cVU0GWD8=
Subject key identifier: F2:71:4A:28:6A:46:C0:BE:A3:B2:4F:7A:D5:C4:BB:C0:54:97:96:F1
Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
Manifest number: 0135
Signing time: Tue 03 Nov 2026 06:34:43 +0000
Manifest this update: Tue 03 Nov 2026 06:34:42 +0000
Manifest next update: Tue 10 Nov 2026 06:34:42 +0000
Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: U3TV5ONq7D6s69VKMC0zmHjd0610iEnZaI5BHANucZs=)
2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: G7QqbuS3t/iTX6LomgThshVcOQtAVpBN0imWLjN0zDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 06:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Validity
Not Before: Nov 3 06:34:42 2026 GMT
Not After : Nov 10 06:34:42 2026 GMT
Subject: CN=6ae98083-4361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:56:f3:5e:39:a1:c6:4c:1e:00:0d:fa:a0:
5b:12:6b:02:63:24:fe:96:7e:a0:fe:a0:ff:f5:b3:
c4:6e:97:ea:41:43:d7:5f:a9:34:86:51:ad:b2:b0:
21:7f:c4:90:0d:86:ab:75:20:68:a9:88:51:97:10:
22:9f:70:ef:ed:bf:24:71:a0:a2:52:88:4c:7e:9d:
19:92:9a:75:4e:63:bf:94:b2:eb:86:83:ef:3f:49:
24:1c:bf:6a:05:36:a5:9e:1a:94:bc:08:a6:8a:d5:
f1:8c:3d:48:e3:a5:0f:0d:34:3d:e4:bf:d7:e5:aa:
79:0b:69:e8:a9:59:98:f3:b0:1a:d1:0f:0b:ee:09:
f7:34:34:ea:19:78:4b:84:59:9b:9b:f5:ac:39:9e:
f4:65:c1:9e:97:de:71:87:cc:7d:ac:78:0d:5c:95:
c6:a0:b8:44:68:e3:5a:3d:6a:ea:f6:ec:0b:61:37:
9a:0b:4b:0d:58:15:51:4b:3f:8f:d5:6e:8e:3f:6d:
96:6f:23:23:68:42:df:04:b7:fb:35:de:ab:a6:94:
05:93:47:8e:f0:2d:42:9d:73:0e:f2:c9:8e:a0:73:
bc:6b:ce:36:e8:66:ed:11:66:fc:11:9c:da:06:dd:
46:5d:0d:91:3c:2a:64:34:0e:6d:60:03:b7:f4:2d:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:71:4A:28:6A:46:C0:BE:A3:B2:4F:7A:D5:C4:BB:C0:54:97:96:F1
X509v3 Authority Key Identifier:
keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:0c:3a:9e:8a:00:99:84:50:2c:76:6c:2c:4d:26:87:19:e7:
fb:23:88:08:67:ca:71:2c:4c:56:21:1a:26:f7:ea:77:8f:b7:
9b:8c:11:0e:b8:e5:2e:0f:77:ca:ef:4a:21:42:28:f6:cc:ff:
92:5a:08:43:d6:4d:ed:a9:b8:fd:82:b4:20:60:f3:3e:81:39:
5b:42:70:ac:8c:29:90:21:88:73:77:74:c5:1c:a0:b5:3c:45:
9f:c5:28:30:1c:7d:f7:39:9b:1c:1e:a9:ed:9a:16:b1:44:de:
a6:0b:54:e5:2b:b1:04:05:cb:55:94:3b:63:f8:a4:9a:5b:87:
66:88:4b:86:20:0f:70:c8:17:92:26:bf:0a:9f:84:86:53:b3:
e8:c9:20:96:27:fb:94:fd:41:c5:dc:b3:c0:79:bf:19:91:7b:
5e:85:d4:01:7a:84:db:bd:91:9b:c0:34:80:99:e4:ac:60:e0:
f9:db:86:a7:11:21:b8:f2:5f:b1:5c:e7:37:86:77:b4:a3:c7:
d6:dc:55:9e:18:c8:eb:37:62:83:b7:ee:69:77:ed:70:c7:28:
c9:ae:32:c3:dd:a3:3a:ef:b2:d2:f6:cd:11:cc:44:1e:ab:cb:
7d:e9:c7:24:a3:17:34:a0:8c:6d:0c:b5:52:32:97:1d:4e:a1:
2c:84:40:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:11:25 2026 by rpki-client