
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json)
Hash identifier: kE8aMqKFDaclXdHKt/yzG4m9vJYkAUTEuvCnjCi/MPY=
Subject key identifier: 8B:A0:66:BF:52:87:EC:D8:92:BB:94:57:45:9B:63:0A:29:D4:4A:F0
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 35A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
Manifest number: 359F
Signing time: Mon 26 Oct 2026 14:36:16 +0000
Manifest this update: Mon 26 Oct 2026 14:36:16 +0000
Manifest next update: Mon 02 Nov 2026 14:36:16 +0000
Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: +qx229WR5jmeB+bZAvzOccyh6xJWDyqqUkxM/2A4NH0=)
2: 5D29E322C22C11F1A2BDA9D25811F970.roa (hash: CcuByy2zu2oJapdcBXBGZ+9IEPqgt4pabSfb5wUYUv4=)
3: 3C9DB4069A1F11F18861FC0A5611F970.roa (hash: YQ/3HkWX3IYx0gktWpIgYaC1fFmNnkiNCPwIxya95iI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13737 (0x35a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Oct 26 14:36:16 2026 GMT
Not After : Nov 2 14:36:16 2026 GMT
Subject: CN=6adf6560-e276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:3a:aa:86:9a:47:b7:ef:05:ef:28:00:db:
62:2c:c6:7d:87:a2:3b:a8:b9:22:04:f2:4e:9f:58:
81:08:54:dc:3d:e4:ce:2f:dd:26:46:7e:fc:bf:be:
e6:90:c4:28:53:f2:f3:47:b1:5a:e1:5b:af:6a:14:
97:fe:25:ae:f3:de:41:05:78:36:1c:de:9c:0e:14:
90:72:03:ea:b8:6a:36:18:f3:6d:24:f4:e0:65:58:
ee:81:a0:72:b0:af:87:e7:a5:12:16:90:06:7c:81:
51:ef:6a:b7:b5:28:e3:c3:9d:56:24:4e:ab:65:67:
78:22:de:b0:25:be:df:f5:1a:cb:75:30:34:c9:9c:
8a:75:92:7b:0a:af:de:d8:6d:2b:d7:a7:7b:4d:d0:
0f:58:45:be:63:8e:78:b5:9c:38:d6:7e:a2:79:bc:
1a:99:ab:4c:7f:58:56:db:70:f2:8e:3b:cc:c7:77:
57:d7:d4:9c:71:40:a6:b3:e8:96:f2:64:a4:04:28:
bc:ba:9f:22:d5:73:2f:32:f8:e5:0e:21:fc:fd:ae:
73:a4:68:a5:ac:cc:ed:d4:b8:35:c4:09:d1:9f:99:
9f:18:f5:23:84:a2:7e:0a:0d:99:6a:58:02:f9:41:
6d:f1:2f:de:70:91:ba:65:35:13:1e:19:cd:63:46:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:66:BF:52:87:EC:D8:92:BB:94:57:45:9B:63:0A:29:D4:4A:F0
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2a:55:49:60:34:cd:3f:28:66:bf:c9:f7:1f:3e:0e:8a:3e:
fd:21:a9:0e:1a:62:23:ec:1b:1a:a6:aa:21:f4:51:4f:bf:52:
5d:85:82:40:96:44:8b:4c:dc:bd:88:cd:4d:d0:73:9b:ab:14:
2f:48:49:ef:b6:20:6c:2a:23:d3:72:95:f3:df:ab:ed:77:4a:
53:a5:7d:6c:22:ee:af:46:c6:54:1c:c8:76:c3:44:c3:71:ae:
67:c3:a6:43:0b:04:90:39:db:b9:ec:8a:40:16:8a:14:9c:de:
b2:96:76:4c:20:ba:76:53:be:a6:22:8b:1b:7a:ef:95:2f:72:
b5:34:1a:8e:68:f7:d9:72:58:bc:44:6d:2d:b3:04:ef:03:7d:
bf:d7:50:f1:30:32:2c:08:b5:5c:b0:59:14:78:f2:10:b5:7c:
f1:7f:e0:4e:37:df:8c:0f:cc:3c:d6:65:99:5d:9d:63:51:e2:
87:70:aa:43:06:f7:48:72:c6:52:db:23:b1:12:6c:c2:2e:9d:
3b:0d:51:5e:6b:5c:6d:76:2e:98:90:47:e9:c7:9b:88:cc:20:
a5:20:55:83:d5:01:82:ba:40:bb:10:79:74:0c:c7:d3:2e:03:
14:c9:cc:91:90:ed:94:27:dd:3d:81:e1:83:3a:73:20:80:0f:
29:99:10:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:33:17 2026 by rpki-client