
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json)
Hash identifier: SHqqtAfsJNVa7f8qTercKs7YntgH22XeyIzTI1EG+Qg=
Subject key identifier: EA:CF:C3:9E:34:C3:70:7B:8C:F7:BA:83:CC:3F:88:20:F2:AA:A5:6E
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
Manifest number: 01DD
Signing time: Sat 17 Oct 2026 04:20:11 +0000
Manifest this update: Sat 17 Oct 2026 04:20:10 +0000
Manifest next update: Sat 24 Oct 2026 04:20:10 +0000
Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: zF2WzYf8rwIbcU1tN+OMGdl5I/WbsbaDdpnVB57tJDA=)
2: 84379068C1E611F1993DB6794311F970.roa (hash: uQXNcCVAMQkeoh/rRRGb7nsF0vdQP0xsvLHBlukdM1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 04:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Validity
Not Before: Oct 17 04:20:10 2026 GMT
Not After : Oct 24 04:20:10 2026 GMT
Subject: CN=6ad2f77b-c38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:3f:0b:6f:59:fa:12:89:72:fe:3f:57:e4:
6c:58:d9:57:70:93:81:32:76:ff:82:95:a4:fe:e5:
c8:91:5f:66:60:e1:92:5d:34:45:4e:2a:eb:d2:25:
b8:67:93:af:56:bf:d7:34:74:d6:31:d1:96:a2:1b:
b4:9d:5c:b6:7c:6d:88:9c:b6:e6:30:ef:34:c4:5f:
16:1f:d1:24:93:70:6f:19:cb:4e:62:dc:78:cd:cd:
a5:b2:7c:ec:ca:5d:f1:17:ea:1e:9e:3d:42:52:a3:
91:8f:18:bd:e4:e2:62:98:1e:a7:a3:3f:fd:e4:f8:
3d:55:76:63:75:ce:d5:32:b0:b4:10:4c:f6:8f:ab:
e5:57:89:c8:7b:75:3d:a9:43:e8:49:73:60:cb:e2:
93:8e:cf:83:ed:41:fe:5d:cb:93:f2:3b:8b:54:54:
ce:f2:f9:29:62:a4:cc:a1:3c:8f:0f:af:36:d9:26:
43:b6:dc:37:05:f5:0d:e8:f1:c0:dc:31:a7:8e:e3:
90:f0:f0:9d:a2:ef:5c:c2:dc:57:6d:a4:34:a0:7b:
17:d6:d3:15:ff:71:9a:17:3b:5c:18:43:60:14:d1:
a3:37:0d:56:3e:72:22:a3:c5:6f:40:54:7b:ce:45:
84:a6:d7:7e:8e:33:5f:57:30:b1:5b:74:d8:08:9c:
15:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CF:C3:9E:34:C3:70:7B:8C:F7:BA:83:CC:3F:88:20:F2:AA:A5:6E
X509v3 Authority Key Identifier:
keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:fd:91:04:e5:60:9a:8e:94:6e:57:29:a3:1f:17:ed:51:02:
da:af:b1:b6:f8:20:f5:8e:55:ce:e5:9a:01:d6:f3:0c:57:02:
d3:91:40:ae:75:51:8b:42:bc:88:45:1e:fe:d0:e9:1a:f9:5e:
28:8a:3e:cc:c7:b3:a8:b4:73:bc:df:76:98:aa:d3:f6:a2:ef:
a6:63:a9:b9:8f:0c:22:e7:2a:54:c5:07:e2:07:f9:42:3d:f9:
9e:49:0e:60:df:21:b0:37:81:2f:fe:b5:fe:2b:b8:20:bb:a3:
17:22:30:52:fd:f3:a7:53:03:90:d0:bb:d2:9e:de:63:de:06:
d7:c4:99:b9:a8:02:45:91:0c:78:5f:9e:ae:81:4f:9f:a3:ca:
fc:a8:a2:62:77:2e:18:2f:32:7b:8f:d2:47:5d:36:7f:60:d0:
56:91:a8:47:59:d9:b3:62:34:cc:13:1c:4b:67:0b:fa:54:76:
63:10:7c:3e:0d:d1:a7:4d:5c:2c:13:ce:08:28:4b:f8:ae:bd:
2d:fa:b3:ed:87:2d:25:f4:27:85:33:df:dd:4a:99:11:59:52:
cb:c3:27:6a:2a:41:ef:cb:6b:8c:24:d5:09:5d:f5:62:00:9c:
64:45:39:83:63:ce:43:f8:7d:43:8e:e2:3d:b8:60:40:e5:01:
0f:95:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:48:32 2026 by rpki-client