
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json)
Hash identifier: 4MfqLlAcHo2pqWL0qrTpDdEk7YHHNICTe6Slm3kDhH8=
Subject key identifier: 81:B5:62:A2:F1:96:49:84:CB:10:0A:B1:3C:7D:C5:7C:20:FF:69:4A
Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
Manifest number: 0173
Signing time: Sun 25 Oct 2026 05:13:48 +0000
Manifest this update: Sun 25 Oct 2026 05:13:48 +0000
Manifest next update: Sun 01 Nov 2026 05:13:48 +0000
Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: xb7UnlqG5VpqDwfGhh1/C2Pj9OPGtEuyAUQVRDzX//k=)
2: A307890685C511F1A02C345065A30FBC.roa (hash: iX1TSjip7UcDcI/gVPlIQ6zzLn0TAe/kPZKYdvmNb6k=)
3: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: qMPRgrgLny92y+u26wGr54Urgeg7Km6YGkgoUSViYNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 05:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Validity
Not Before: Oct 25 05:13:48 2026 GMT
Not After : Nov 1 05:13:48 2026 GMT
Subject: CN=6add900c-53ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:38:aa:37:e5:76:f9:88:27:44:87:7f:99:
34:65:57:93:db:02:7e:bf:e3:bc:b7:22:d6:cb:6c:
aa:2c:02:db:e3:fa:3c:9f:7b:32:79:0f:2a:3e:fc:
e0:a7:f2:83:71:79:96:fe:5e:5c:c4:40:2a:67:50:
3d:e9:7e:e8:ac:4f:ec:b8:29:40:d2:45:ec:d3:d5:
e6:4b:21:0f:79:64:7d:0c:5a:71:ac:d2:36:f1:59:
5d:2c:2e:8e:d8:19:4f:23:6a:44:17:87:b3:04:8f:
6c:07:a9:d5:ba:d6:96:37:4a:b5:af:9d:f0:d0:41:
ee:81:62:b2:18:6c:64:63:d6:db:70:68:10:21:29:
94:34:fa:54:4f:25:05:37:a3:ca:af:9d:ba:ad:86:
24:f0:d9:d4:f7:3d:64:26:99:18:99:b4:cb:42:ae:
18:60:6b:eb:07:6f:3b:4a:ed:94:4e:17:2e:2b:3e:
a6:d6:6a:3b:14:7c:0b:ba:18:69:b7:de:84:17:6f:
13:a8:e9:65:e5:e6:87:70:37:ed:d8:e0:5e:9e:27:
eb:2e:dc:17:31:79:63:c1:37:d2:1d:4b:ae:e9:f4:
ea:79:c5:85:b5:b1:f0:53:8f:e9:72:90:61:7a:80:
bd:bb:cd:bf:11:3b:c8:a8:31:8b:2d:9f:db:31:c4:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B5:62:A2:F1:96:49:84:CB:10:0A:B1:3C:7D:C5:7C:20:FF:69:4A
X509v3 Authority Key Identifier:
keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:cd:14:94:ad:a7:0c:e9:c8:4d:08:fd:c3:de:4d:fb:45:4e:
d9:17:7b:48:00:b4:35:c0:b7:10:2c:93:7a:71:e9:8b:07:51:
3a:0d:2f:3b:e0:8e:d4:dc:91:4c:68:44:e0:4a:02:df:32:dd:
bd:24:c5:ff:80:ae:c5:40:40:1d:3f:fa:96:57:7c:57:bc:74:
27:c7:1c:c2:39:91:5c:60:29:4f:4b:d2:a4:c7:d6:4b:1b:82:
66:64:bd:fd:7e:f4:bd:e4:76:92:1f:8f:03:4b:55:2d:eb:a0:
39:4f:66:2a:32:a0:ca:a6:38:5a:8c:90:a3:35:13:6e:ca:6a:
6e:ec:f7:46:22:e1:dd:22:02:04:71:8c:a7:a6:13:41:87:ab:
9b:da:60:c6:ec:66:4a:e4:a9:e6:fd:85:ce:7c:51:cf:47:5b:
9d:ad:7f:52:e0:e0:4a:e2:bc:9f:7a:f1:27:93:d2:3f:9f:7b:
8c:4b:f2:8e:47:dd:01:1e:a4:16:b2:73:88:a9:57:44:4c:f2:
9c:5a:db:ca:71:a3:aa:dd:1d:eb:66:49:c4:97:79:68:5d:86:
da:ce:ca:61:1f:85:52:80:ed:15:c2:61:bd:41:05:c5:74:67:
30:54:ff:ff:87:34:fc:f4:db:89:40:ca:11:6c:93:3d:1c:d5:
f6:0d:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:27:47 2026 by rpki-client