
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
File: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft (raw, json)
Hash identifier: yuO7dcDB7VUwlAvU1gnIvHXKWNiAqauOfaqy8Vf0jA8=
Subject key identifier: 69:FC:EB:3C:C9:72:BB:DB:39:27:B8:52:6C:38:45:02:57:B2:E0:6E
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Certificate issuer: /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial: 159C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
Manifest number: 1585
Signing time: Sat 14 Nov 2026 16:44:03 +0000
Manifest this update: Sat 14 Nov 2026 16:44:02 +0000
Manifest next update: Sat 21 Nov 2026 16:44:02 +0000
Files and hashes: 1: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl (hash: CvmvUIzvymEhU0yRWAyISy6TnqG3KtWt8pD5OufRRzg=)
2: F693F2689CB811EB97F77E14C4F9AE02.roa (hash: YMv0r7cgJCxpk4HSp8I/SfGyxuRnawMQX2mraCd5KmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 16:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5532 (0x159c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Validity
Not Before: Nov 14 16:44:02 2026 GMT
Not After : Nov 21 16:44:02 2026 GMT
Subject: CN=6af88fd3-fced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:a5:c9:9c:ee:2d:78:b9:36:6d:08:99:5c:
36:31:b7:6a:52:2d:d9:67:be:02:6f:e5:0e:c4:1a:
f9:da:49:ca:4a:bf:f6:ac:aa:9d:62:9e:ed:9e:87:
29:26:2f:de:94:79:97:ff:62:b5:b7:c4:50:26:c2:
31:26:50:18:85:c3:76:21:e6:38:90:bb:cb:ad:25:
c0:fb:84:04:0e:76:f2:13:97:a4:b4:78:15:5c:9a:
fd:4a:c9:da:f1:86:d0:d1:3a:f6:7f:f4:3d:04:ce:
65:2e:81:12:85:e4:42:22:7f:2c:22:cc:88:ef:4c:
70:9e:02:5c:51:d9:ec:7b:58:4c:ba:79:01:f8:89:
6a:c4:91:3d:2b:40:08:dc:ea:ac:ef:17:f6:95:f2:
64:bb:c1:57:a7:81:1c:68:cb:85:e3:72:8d:3b:ec:
8e:e4:5b:70:ab:aa:5c:ed:b3:10:7a:13:fd:63:8b:
53:08:47:9a:04:d3:aa:17:38:54:ed:7e:f5:05:f4:
9b:e6:ed:f0:ca:05:33:47:07:4b:a6:d0:a2:89:c9:
a0:7a:1a:5a:41:76:38:0f:88:c9:a3:23:c4:4e:aa:
1e:42:83:76:54:ad:92:5d:ef:a7:84:da:6b:29:f2:
ff:e0:6e:62:32:e5:fd:95:81:02:89:51:3c:a8:ad:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FC:EB:3C:C9:72:BB:DB:39:27:B8:52:6C:38:45:02:57:B2:E0:6E
X509v3 Authority Key Identifier:
keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8c:3b:ad:ea:9a:0d:bf:2d:ca:3f:ff:0d:b5:c1:33:3a:1e:
1f:c5:25:d8:63:9e:9a:89:01:fb:5d:e2:35:6f:6c:ed:dd:70:
f3:49:f3:d5:98:9a:f2:46:50:c5:a8:4f:e3:64:af:19:71:ed:
d0:1e:22:d8:15:2c:db:82:ad:db:fd:c5:68:cf:a1:b7:8b:bf:
e6:f0:55:3d:59:c3:81:6b:e4:fd:81:7b:76:91:e5:05:f2:4e:
27:95:f5:62:91:05:8a:30:ea:9d:a3:9c:0b:e5:5b:e5:6b:5e:
03:7e:56:e0:22:78:fb:a4:82:10:1c:51:3f:b1:f0:ed:ba:7a:
01:cd:b9:a1:b1:37:a5:f6:f5:b8:12:2a:bb:fc:8d:dd:a8:35:
a7:8c:9c:af:6f:8a:42:d1:ef:c8:c4:40:6b:1c:31:aa:96:e7:
3a:8d:2a:a7:30:d8:49:9a:b0:74:c4:da:49:e8:63:57:a7:9f:
e0:6c:f5:49:76:ec:73:31:03:44:4f:1b:1a:4c:90:64:8f:7a:
54:fe:5c:27:be:30:f4:c1:5e:00:0f:7e:1e:49:a2:bf:e8:d3:
11:f0:36:b5:b1:be:d8:c7:ce:4c:2d:8e:9f:f6:ad:51:0c:43:
fa:fa:f4:e1:7f:26:91:c4:fe:07:1b:ca:51:f4:21:02:a0:49:
61:c3:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:30:58 2026 by rpki-client