
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json)
Hash identifier: NyhhLrwyHwq/qWNwk9WXt79pUUJcx6BDYe9OnfHg8Kg=
Subject key identifier: 05:D1:42:D8:99:20:19:99:77:C5:8C:B5:B3:94:B8:0B:D1:90:10:AE
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial: 2397
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
Manifest number: 2384
Signing time: Tue 18 Aug 2026 15:54:40 +0000
Manifest this update: Tue 18 Aug 2026 15:54:39 +0000
Manifest next update: Tue 25 Aug 2026 15:54:39 +0000
Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: kE7rm6XbDFEAX9FXrea9+GCnesrkFbWgNXVvCZBEpt4=)
2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: s8TTg9P3l8A2JinlhgnrgySiNnwBKzYcLgd2CwnP9lU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9111 (0x2397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Validity
Not Before: Aug 18 15:54:39 2026 GMT
Not After : Aug 25 15:54:39 2026 GMT
Subject: CN=6a848040-1ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:42:5e:61:a8:94:ca:eb:da:d6:99:6b:f4:
68:bc:a1:78:20:7a:05:1a:e9:37:8f:81:e6:76:cf:
c8:77:41:2e:0c:e1:1f:a0:fd:7c:2e:d0:a9:c9:fe:
19:b1:58:73:07:09:d8:37:2a:ff:48:89:e1:c7:76:
23:cc:c0:b9:8e:aa:75:3d:af:66:2a:a6:96:cf:d6:
2d:d0:d3:ec:fe:df:66:50:04:68:41:9a:ff:9d:90:
ff:b7:7e:7f:67:bf:0b:dd:81:6a:da:24:00:b7:44:
f9:eb:39:5c:91:13:40:96:ae:58:02:37:a9:ce:c2:
be:c9:16:61:4d:62:04:eb:4b:c3:1d:16:0e:e1:96:
81:69:e9:c6:ab:59:e8:bf:a6:9a:4f:a7:4f:40:bb:
de:d3:b2:5e:ab:39:f8:ce:09:2d:42:10:74:30:41:
92:62:2e:5f:33:2b:66:7c:c7:37:8d:e4:0f:8c:44:
2e:0c:63:9a:d3:85:2d:5c:6a:f7:8e:7d:d9:17:7d:
87:80:b4:3e:cb:25:36:4d:ae:98:96:db:b2:2d:8b:
1a:f5:f0:81:23:70:92:02:db:f3:78:4a:7b:02:13:
cc:0f:43:f7:0a:29:66:06:95:c3:5f:ed:91:01:90:
89:77:7f:93:29:2a:ef:d0:75:2c:03:d8:79:95:fc:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:42:D8:99:20:19:99:77:C5:8C:B5:B3:94:B8:0B:D1:90:10:AE
X509v3 Authority Key Identifier:
keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:0e:54:36:c4:4f:74:3e:5d:ed:ec:39:22:aa:8c:e5:45:8e:
f2:7a:8d:30:cd:f9:a0:86:8c:28:d3:df:09:9a:a8:52:e9:db:
5b:f4:1b:95:1b:33:52:c1:76:d1:a4:da:fa:91:5f:0a:cc:de:
21:d9:82:ab:70:ad:f3:72:ed:9e:f4:32:c0:89:7e:ab:88:b8:
37:fc:4b:4c:57:9d:41:18:3e:93:e1:fe:89:af:e2:57:70:46:
02:f1:e8:f6:3f:7b:82:3d:ed:5c:96:8a:0a:06:34:c5:14:f6:
98:40:b1:12:2b:fb:54:1c:0d:4f:66:c6:21:20:64:26:39:ea:
1c:63:dd:84:e1:02:8b:74:73:a6:d8:76:1b:56:c9:fe:e4:fc:
9f:31:f9:4d:31:30:2b:e2:75:fb:5b:87:02:e5:39:d1:22:1b:
16:a8:88:1d:cb:eb:f6:a9:a5:bf:4d:1e:39:89:63:21:6e:89:
14:fe:bb:b4:cc:f5:1d:5b:35:db:1a:f5:d7:73:62:12:76:a8:
4d:88:43:0c:86:29:08:59:2f:e1:36:8f:39:fd:94:52:85:1c:
45:e0:47:59:97:7d:07:9c:7c:98:9e:47:b3:b1:a4:04:0b:aa:
a5:29:b2:ad:e8:44:d2:db:83:84:d2:df:df:62:f0:37:d8:71:
b6:39:20:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE
RTI1MDFFNzEwHhcNMjYwODE4MTU1NDM5WhcNMjYwODI1MTU1NDM5WjAYMRYwFAYD
VQQDEw02YTg0ODA0MC0xYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjNCXmGolMrr2taZa/RovKF4IHoFGuk3j4Hmds/Id0EuDOEfoP18LtCpyf4Z
sVhzBwnYNyr/SInhx3YjzMC5jqp1Pa9mKqaWz9Yt0NPs/t9mUARoQZr/nZD/t35/
Z78L3YFq2iQAt0T56zlckRNAlq5YAjepzsK+yRZhTWIE60vDHRYO4ZaBaenGq1no
v6aaT6dPQLve07Jeqzn4zgktQhB0MEGSYi5fMytmfMc3jeQPjEQuDGOa04UtXGr3
jn3ZF32HgLQ+yyU2Ta6YltuyLYsa9fCBI3CSAtvzeEp7AhPMD0P3CilmBpXDX+2R
AZCJd3+TKSrv0HUsA9h5lfwopQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXRQtiZ
IBmZd8WMtbOUuAvRkBCuMB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0
ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzQzRC9FREIyOEU3RUE0ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4
Tm5tM0hGQVN1czNlSlFIbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGQ5UNsRPdD5d7ew5IqqM5UWO8nqNMM35oIaMKNPfCZqoUunbW/QblRszUsF2
0aTa+pFfCszeIdmCq3Ct83LtnvQywIl+q4i4N/xLTFedQRg+k+H+ia/iV3BGAvHo
9j97gj3tXJaKCgY0xRT2mECxEiv7VBwNT2bGISBkJjnqHGPdhOECi3Rzpth2G1bJ
/uT8nzH5TTEwK+J1+1uHAuU50SIbFqiIHcvr9qmlv00eOYljIW6JFP67tMz1HVs1
2xr113NiEnaoTYhDDIYpCFkv4TaPOf2UUoUcReBHWZd9B5x8mJ5Hs7GkBAuqpSmy
rehE0tuDhNLf32LwN9hxtjkghA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:52 2026 by rpki-client