
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
File: MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json)
Hash identifier: qWgLHMQ3bnx13MYwX+mktH58KkhWHEMdcqUhhLttktA=
Subject key identifier: 54:00:8E:04:07:AD:D5:45:BD:A1:A3:77:50:C1:E0:B5:1E:3D:96:70
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 0845
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
Manifest number: 0815
Signing time: Wed 28 Oct 2026 21:28:31 +0000
Manifest this update: Wed 28 Oct 2026 21:28:30 +0000
Manifest next update: Wed 04 Nov 2026 21:28:30 +0000
Files and hashes: 1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: R4Rs451m3aLkSiYqrxRf3zgQIkclatNOvqc0kvzLqog=)
2: C4B2F4D26E2D11F1AAE9D25878A30FBC.roa (hash: y2Yu7DNBwQ1F41IXGGxGYif7p6j6eyoOWPgPCGsAZSA=)
3: B791EB5251A811F08D434B5BC4F9AE02.roa (hash: Yv4gel1CvyBk9MP04CS6oXlyji+0CdFjC5TBaKzGRfE=)
4: E161A3488C1011F1894C66674411F970.roa (hash: sNCIqYmO7ulkNeNHiKsIe17aES3moAaS+f0C+4E5JSU=)
5: 446CB34270E711F083707432C4F9AE02.roa (hash: kZy79YthAxUXnqeeWJ0YITudamfKZP7o+VZk50JTteM=)
6: 62884F1AB6CC11EF84CBC45FC4F9AE02.roa (hash: AXDH2N6IFT5Fud9AQTkuO+onQ48n5ZtmHoBIWEhfafk=)
7: 7CA749FCF63E11F080BDB1B6646F56BC.roa (hash: u2rDocooyxiz9s72SCuMZgdQBeeYVSQpawmphR3YaZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 21:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Oct 28 21:28:30 2026 GMT
Not After : Nov 4 21:28:30 2026 GMT
Subject: CN=6ae268fe-d277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:f5:18:16:e1:66:a9:a0:43:16:82:a4:46:
69:1a:64:1b:76:89:91:b4:a2:45:11:26:6e:a9:8b:
3e:7d:0c:6e:94:e0:4e:c8:17:5a:8a:c8:6d:75:a3:
9a:2d:39:45:2b:30:b1:6b:5c:a0:d6:67:5b:44:cc:
e5:71:33:f0:c3:e4:16:99:3b:2a:b0:40:f7:d2:8e:
e8:58:b2:28:43:59:16:3e:61:a3:3a:d7:ce:d0:68:
5f:93:93:b2:d8:6c:77:5a:62:1d:99:44:b7:e8:dd:
fe:ab:14:f4:a4:b3:0a:48:a3:50:f1:2f:e1:be:6b:
5c:e1:9f:8f:67:0b:dd:7d:e2:9b:80:53:a4:a0:70:
e2:64:fa:df:6c:22:1e:69:0a:7e:24:07:3a:b7:3f:
5c:62:e3:eb:ef:c0:f8:af:ac:1a:61:4a:05:ca:ba:
ae:6f:c0:da:19:04:eb:35:67:c7:23:3f:ed:36:ea:
62:99:38:82:4f:3c:36:78:93:5c:2d:95:c8:33:2a:
2d:ad:03:f8:5f:ec:18:b6:34:07:c0:6c:c6:dc:de:
ba:08:c9:a2:c5:3f:60:80:df:de:ba:2e:3d:b3:fd:
bf:9c:9c:4f:5e:14:9a:96:2b:77:94:95:1b:c9:20:
e6:16:94:dd:69:b9:7b:6b:9b:6d:5b:e8:e3:77:fa:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:8E:04:07:AD:D5:45:BD:A1:A3:77:50:C1:E0:B5:1E:3D:96:70
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:72:f0:82:be:76:f8:7e:e9:e6:ce:d7:8c:b7:91:ed:c9:ed:
ce:8b:fa:65:5f:5b:64:56:4f:a5:fd:46:4d:38:15:ca:81:d4:
fe:4f:2f:21:50:be:0b:3b:a1:15:f1:e8:d7:b9:75:2b:41:71:
2d:82:d7:9d:1e:80:a8:d7:d7:40:80:6e:97:be:0d:42:31:b2:
55:25:bb:2e:7a:61:0d:3c:8a:38:00:2b:bc:6a:07:2a:66:fb:
a6:8d:39:fd:64:b2:fb:e7:4f:bc:34:41:5d:e6:5e:c1:34:35:
34:44:db:5b:f6:9a:08:6e:ce:29:e1:ca:35:96:e8:ed:10:75:
00:7b:71:41:2c:86:7b:d8:58:14:12:98:85:2a:29:46:84:fe:
71:2d:30:79:37:dd:dc:48:89:da:fb:41:f0:d8:a3:de:23:33:
a2:bf:0d:33:20:66:fd:70:01:5c:41:2a:ae:8d:14:d4:b0:3c:
fb:89:80:99:9a:b1:33:f0:1d:53:5a:5b:5f:75:90:7d:e6:f1:
da:e0:3d:32:5c:fc:58:ad:9c:7e:ae:a4:2c:a6:a0:42:02:4d:
5f:67:95:12:34:a4:9a:ce:09:30:1e:dd:7e:50:2d:e4:b3:3a:
f4:95:d4:29:db:70:4c:de:8d:c1:6b:ad:28:d8:6c:0c:a0:33:
ad:3d:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:22 2026 by rpki-client