
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json)
Hash identifier: BSEPomuLreMpH9wZOlu+WrTUGlM2p95li4mgrA6EBsA=
Subject key identifier: 45:D8:4F:51:D2:26:0C:73:E4:17:7B:DD:E0:8E:AF:61:72:94:EC:71
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial: 23B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
Manifest number: 23A3
Signing time: Sat 31 Oct 2026 14:40:31 +0000
Manifest this update: Sat 31 Oct 2026 14:40:31 +0000
Manifest next update: Sat 07 Nov 2026 14:40:31 +0000
Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: UzhV2AtXDU6DnSFTPunL8DqQWxKEbkznTQ93+0QI9I4=)
2: FD36E81421D811F1A613849C243D8C67.roa (hash: AyanIH2owi9XoktXnpN++SsbX7s2ltEtD5dPgBcoQVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 14:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9141 (0x23b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Validity
Not Before: Oct 31 14:40:31 2026 GMT
Not After : Nov 7 14:40:31 2026 GMT
Subject: CN=6ae5fddf-a14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:79:d5:87:2e:46:4e:7d:56:36:b0:6d:11:
b0:f0:b7:e0:03:75:75:7d:fe:65:fd:d7:49:b0:ef:
39:ec:90:d4:4a:12:6f:f5:2e:18:2b:e8:48:70:81:
76:23:69:2a:93:51:f9:4c:29:b4:3e:be:15:85:57:
cb:fc:8b:52:c3:aa:1d:b9:61:63:28:ea:36:f9:d0:
98:d3:14:f1:62:d8:ec:56:83:f5:7a:e9:21:40:af:
95:5b:8b:ff:6a:86:6d:ec:0e:03:c1:2c:91:7a:16:
b7:3c:7a:c5:67:6f:e7:57:95:0f:58:5e:1f:9f:13:
a9:ff:35:ba:09:78:58:77:96:11:92:a1:1b:af:90:
98:9c:c6:23:4c:44:2a:64:9b:fa:60:91:b3:80:c0:
b8:23:a9:1d:67:0d:5c:77:41:39:d9:b6:f2:48:6c:
2d:0e:a0:85:aa:b5:a6:3b:31:7e:c7:65:71:89:44:
d6:a0:f4:0e:50:be:d0:b8:18:91:29:9c:27:68:09:
36:4d:22:f6:4e:63:a4:66:a0:ff:b0:48:7f:4a:9d:
55:95:02:8a:01:98:4f:29:d3:3b:8b:6b:23:c0:f2:
d8:ea:14:8d:d8:f8:0c:ba:a2:a7:4a:de:ab:34:12:
84:b2:a0:b9:61:fe:19:80:1f:cb:39:8d:a8:f7:5d:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D8:4F:51:D2:26:0C:73:E4:17:7B:DD:E0:8E:AF:61:72:94:EC:71
X509v3 Authority Key Identifier:
keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4b:a8:14:44:5f:b5:64:eb:84:eb:8d:0c:7f:73:76:92:8e:
72:56:0d:cf:04:e2:d9:e1:cc:20:54:96:ba:7b:6b:69:08:d3:
38:b4:cb:94:cc:cd:28:4f:af:25:97:82:48:bb:ba:be:f6:a5:
0f:0b:dd:05:dc:3c:e4:b5:73:86:3a:bd:22:ad:f3:c5:1e:5a:
9b:c8:a5:48:65:59:3c:bd:45:1c:dc:ef:11:5a:17:5c:eb:1c:
04:47:2c:56:91:d7:b2:63:4b:07:21:4f:66:9b:66:ca:43:bc:
43:15:ef:5c:30:76:c1:fa:a6:32:92:af:a5:f5:1d:46:93:d9:
a7:11:48:9e:42:46:84:7d:92:45:d9:99:9a:55:1f:02:8b:3b:
a7:83:57:ea:24:0f:3f:21:07:ae:5b:24:72:1d:6f:e9:6a:43:
b5:ec:3c:e2:c6:db:f2:a2:36:f7:83:b7:ad:aa:cc:ef:b0:3b:
ef:bc:77:bd:ec:f6:00:cb:dc:6d:74:f2:f4:42:4a:a1:a2:0a:
8f:d8:c0:2d:a8:6e:a1:d2:54:99:86:69:ad:83:ad:ab:fe:23:
02:ee:3a:4a:1d:d7:32:fa:18:07:fe:67:e4:6d:ef:ca:95:8b:
7d:98:0d:9d:68:16:8c:40:11:94:31:39:eb:cb:29:fe:f6:8a:
6f:3e:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:24:37 2026 by rpki-client