
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
File: p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json)
Hash identifier: 1QLwF60Xo9Q7FJmnrqBkeEGQnNGTPO9BvcHUCcp7gRs=
Subject key identifier: F0:1F:4E:66:29:FB:2B:0B:98:77:6C:6A:CE:0F:E2:03:DF:DD:DA:83
Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
Certificate issuer: /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
Manifest number: BD
Signing time: Mon 19 Oct 2026 07:36:18 +0000
Manifest this update: Mon 19 Oct 2026 07:36:18 +0000
Manifest next update: Mon 26 Oct 2026 07:36:18 +0000
Files and hashes: 1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: obRgcAKMI1hXrmSVtcONZrH0kpY6gBdxopG4rmh0rFs=)
2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: KbzUtTPtGCQ3I/N5KWpd9MwtuQNamm+9Vruv3vtMr6A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 07:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Validity
Not Before: Oct 19 07:36:18 2026 GMT
Not After : Oct 26 07:36:18 2026 GMT
Subject: CN=6ad5c872-4e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:b3:33:49:a9:35:9d:ef:7d:2c:50:d7:45:
83:7f:9b:18:8d:d1:1f:0c:ff:3f:fc:0d:d2:17:60:
e0:a3:32:56:f1:43:ba:29:8e:5a:fb:bf:12:1f:55:
6b:de:a5:c8:d2:df:02:26:60:4a:c8:23:77:e1:34:
5c:bf:ae:51:c9:b0:a2:53:14:a5:f3:7e:ae:eb:75:
2f:6d:e7:09:a4:a8:cc:da:e5:58:4d:40:97:f0:c7:
7d:ee:9c:91:82:67:8c:b1:d1:4f:6c:55:3e:73:5a:
8e:6b:61:4c:ce:b2:a9:d8:e7:37:5e:5e:25:57:4f:
2a:79:f5:8d:a1:c2:b4:15:5e:92:f2:68:28:0a:05:
fe:32:cc:5e:0e:6a:97:29:22:4f:24:ca:7c:a8:73:
2b:8f:e0:71:0f:46:c8:e1:c0:76:82:5b:33:5c:bc:
ec:33:5b:0a:a9:f0:2d:cf:90:d5:9b:98:9d:5b:04:
a7:5c:fa:40:79:a1:38:0f:4a:ee:ad:4c:c1:8e:8f:
a3:38:b5:9b:b6:8b:95:d4:ba:71:ef:7c:3d:ad:c0:
7a:cc:5e:ef:d5:ee:d1:28:e5:94:01:a3:8d:74:8c:
e3:89:4f:ba:dc:85:b1:fc:2d:af:83:1c:d2:c7:d0:
90:1a:dc:c5:68:40:32:dc:79:cc:b4:18:26:8d:3b:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:4E:66:29:FB:2B:0B:98:77:6C:6A:CE:0F:E2:03:DF:DD:DA:83
X509v3 Authority Key Identifier:
keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:69:81:17:0d:65:b6:06:4e:0c:73:b2:eb:65:5d:58:06:72:
ee:dc:01:ec:4d:01:c1:55:8a:fc:9e:ad:75:25:2e:d9:d6:16:
ae:40:2c:92:f7:d4:27:ca:1a:0e:16:50:a1:68:5b:21:2a:cc:
f2:b7:15:29:08:ed:63:f2:ed:44:4a:41:1c:4f:78:53:67:47:
de:94:a0:6f:a9:e7:f3:28:4f:ac:a8:cb:cf:cc:6d:09:9e:e9:
c7:c7:72:1c:38:78:4a:ac:c9:35:7f:1b:6f:17:c4:9e:9e:cd:
7e:7f:d4:50:b1:f6:c1:6c:1e:81:a2:0b:bb:49:d8:04:13:cf:
c1:05:79:4e:91:0f:41:cc:34:24:c4:3f:e6:35:81:13:55:aa:
95:50:2c:71:0d:b1:6a:36:fb:5f:60:17:17:b3:ef:2b:ef:50:
eb:ed:70:1d:ba:3a:74:92:d7:ed:78:fe:40:1e:68:4f:75:6d:
df:0d:83:b8:c7:c0:fa:12:4e:03:e0:96:07:f3:ae:94:34:9a:
10:a1:2f:26:92:49:7f:65:1b:f8:ab:a4:d3:1b:1f:9f:81:77:
43:b5:f0:5a:ed:eb:2f:e0:f7:52:6b:0e:4f:c5:83:1b:8d:f6:
df:c6:6a:7c:b8:ed:b1:3d:c6:1b:c8:bd:56:6b:d0:4d:38:21:
0b:ac:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:28:38 2026 by rpki-client