
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File: rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier: EaEEIrWai8Nt63UHIHgCDwDtd5+5vpnK7cpritOtSZ0=
Subject key identifier: B6:21:BB:6C:5D:AF:98:E5:4E:72:46:81:CB:39:84:67:75:4F:F9:D7
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer: /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial: 065C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number: 0655
Signing time: Tue 06 Oct 2026 22:46:06 +0000
Manifest this update: Tue 06 Oct 2026 22:46:05 +0000
Manifest next update: Tue 13 Oct 2026 22:46:05 +0000
Files and hashes: 1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: bMaSdNgO6r1/bPdVnyR7YEP4V/xV8dQzSetHmnhdv/I=)
2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: 2LEeC0ds34ZlqZh+4UqIEhPYTAfwPzvZKKs/N3w5rAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Validity
Not Before: Oct 6 22:46:05 2026 GMT
Not After : Oct 13 22:46:05 2026 GMT
Subject: CN=6ac57a2d-e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:63:aa:65:51:a1:d1:6b:84:d7:d2:d2:1f:
8e:81:fb:d7:8a:92:7a:6c:22:d9:1d:76:33:c3:5b:
57:5d:cb:3b:9a:00:0a:d7:11:31:4b:78:ed:aa:8e:
91:f5:55:25:26:6e:00:b6:40:2d:f8:8d:47:f0:39:
89:4a:a0:2d:17:b1:67:7e:75:d9:6c:9b:c3:41:10:
84:ee:db:b4:81:af:e9:ac:4a:88:39:19:4d:06:43:
e8:f1:ea:17:de:c1:03:58:7e:93:ed:0f:8f:9f:49:
88:99:69:95:d7:2b:5b:c6:1c:f4:a2:72:ed:8d:5c:
43:5a:e4:b4:3f:db:2b:b2:d1:ae:ee:1c:f2:26:7a:
c8:20:53:ef:ad:6b:37:74:90:59:50:35:05:7a:27:
2b:f2:41:d1:2d:f4:8c:0f:24:ce:20:7c:fb:57:2f:
da:65:b7:13:78:b7:99:21:31:55:95:6e:7e:ee:d9:
2a:2b:d0:c5:b5:3f:cb:65:b8:bc:06:91:a1:b7:93:
34:de:ac:0d:50:d2:c7:08:e1:11:d8:2a:19:e4:ca:
02:af:91:e1:f4:00:3b:93:5f:15:a7:f6:d4:a3:b6:
2e:40:95:6b:86:de:7d:e4:53:21:74:6f:5d:81:74:
e0:32:fb:6b:11:0b:22:ab:22:fa:b8:7c:11:60:8c:
0c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:21:BB:6C:5D:AF:98:E5:4E:72:46:81:CB:39:84:67:75:4F:F9:D7
X509v3 Authority Key Identifier:
keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:cf:2c:24:72:bd:6d:7a:01:93:25:4c:8d:64:2d:38:1e:01:
c7:21:62:68:79:59:44:a1:f6:28:a8:8f:db:24:ec:e6:3a:c9:
ff:fb:3b:a8:6e:cf:f0:59:54:01:f3:3a:f2:28:fd:b3:74:b4:
7b:33:8d:c1:60:61:b1:34:cb:46:38:2e:10:e6:e3:7d:26:f8:
6e:99:6d:c3:06:20:66:1b:5c:d0:ef:02:7e:fa:a9:89:bf:74:
91:dc:a0:e3:5f:64:35:fd:ab:67:31:eb:df:2c:d8:5c:2f:59:
f9:f3:74:fe:9e:15:85:63:bd:a5:2a:e3:3a:54:23:e9:05:62:
38:a7:fe:e6:f9:44:6c:42:58:bf:6b:cf:42:56:b4:7a:ac:41:
35:02:35:2d:8d:4b:12:75:5f:73:f0:32:cd:01:88:56:74:5d:
92:80:f0:ca:4b:98:f5:e9:73:eb:9c:b3:58:af:0e:0a:77:c4:
4d:d9:f5:63:51:a6:cc:76:f0:f5:ba:21:96:79:ae:e3:81:24:
90:11:49:0d:df:aa:e8:f1:77:08:6b:b2:d8:22:86:70:c2:9e:
39:9e:4c:f5:70:ca:e6:ce:9c:64:a6:c5:29:e2:18:b2:14:ad:
99:1d:05:97:09:47:28:2f:ed:e9:a8:f6:a2:5f:10:99:73:60:
55:bd:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:59:54 2026 by rpki-client