
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json)
Hash identifier: i9Vkk7A+bD30EUBXQRehOZP2iKs5M58/f9UrVlri+C8=
Subject key identifier: 52:78:E2:CB:52:90:26:56:73:68:FD:AD:80:D8:89:1F:F2:54:30:A2
Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Certificate serial: 015F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
Manifest number: 015A
Signing time: Tue 22 Sep 2026 18:45:01 +0000
Manifest this update: Tue 22 Sep 2026 18:45:00 +0000
Manifest next update: Tue 29 Sep 2026 18:45:00 +0000
Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: RgEgduLtS+un1bSsEbcMfF65vZ19nvri6hgk684jiQw=)
2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: XIBVLN0QTNRfgKTP2te+4QcwWNVAHO7ezlqwT3o7bi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Validity
Not Before: Sep 22 18:45:00 2026 GMT
Not After : Sep 29 18:45:00 2026 GMT
Subject: CN=6ab2ccad-5a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:33:8c:91:5a:17:98:59:31:56:11:9d:25:
85:38:67:3c:f9:9b:09:6e:55:44:64:71:74:bc:e1:
65:90:97:94:ba:d8:83:fd:4b:d9:ac:77:54:51:97:
71:03:99:12:12:97:8c:4a:85:c9:de:59:98:ed:9b:
27:b3:ae:3d:84:36:4e:f5:00:f3:74:f3:b8:db:11:
08:63:ed:e0:35:16:48:7d:ab:de:7b:b2:ac:d5:c1:
8b:ac:5e:39:82:d9:18:86:cb:34:34:8b:19:15:1e:
cf:8c:10:db:93:85:d5:61:89:0e:f3:d3:0d:ee:1f:
27:be:37:c2:51:9c:0e:89:f6:bb:05:47:59:df:2d:
de:94:76:05:b3:16:b6:11:fe:41:63:87:37:55:04:
4c:8a:f5:9e:04:cb:e3:66:43:01:00:fe:2a:8e:db:
c4:49:d2:11:72:66:cb:e1:59:ab:e2:ba:1f:98:0b:
56:99:a5:1b:0e:73:cb:e0:d1:4e:3f:0b:6a:e0:ee:
c2:07:8d:07:85:98:19:00:a7:7f:60:5d:03:c5:32:
70:3e:64:f0:3a:95:b7:ba:07:a8:36:6a:5c:7a:d3:
f7:be:25:02:66:5f:c8:c0:08:2b:4d:14:c8:83:1a:
46:f4:a0:f8:07:5b:a3:d6:60:14:57:5a:40:42:9f:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:E2:CB:52:90:26:56:73:68:FD:AD:80:D8:89:1F:F2:54:30:A2
X509v3 Authority Key Identifier:
keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:22:02:f1:36:16:6b:89:f8:a5:41:85:af:75:4c:82:d2:39:
62:59:60:f9:15:28:16:b6:73:12:cc:fd:c2:9a:29:2c:ce:69:
83:a6:02:07:48:ce:43:03:96:cd:db:7f:01:37:71:c7:1e:8a:
2b:93:32:52:27:04:cc:15:68:ee:3f:e2:ac:1f:8a:47:ef:51:
cc:c5:45:ae:23:fc:b9:b6:08:48:e6:f8:12:64:59:bf:88:01:
05:cf:37:1b:34:b4:87:ce:9f:a5:54:76:fd:02:72:6c:68:ce:
e7:8a:32:c5:ce:eb:58:8e:3f:fb:b4:c1:98:2d:72:99:21:49:
a6:5a:31:52:8e:b1:0d:dc:5a:07:f6:53:20:08:ad:ea:0b:39:
68:c9:96:5f:bf:90:9e:1b:56:2c:29:d6:1f:b8:53:27:e7:75:
40:34:1f:b2:bd:24:3d:f6:4b:4d:d5:99:26:61:6f:3b:74:e5:
76:2c:6e:e5:56:ea:23:0f:10:6e:78:a2:b4:23:ff:82:a6:1d:
60:64:2d:0f:41:b3:11:5e:12:fc:a6:4f:3f:0e:d0:bc:0f:d6:
46:c0:aa:4f:70:ca:08:7b:bb:71:e2:4a:66:ff:a9:62:f1:57:
7f:ab:35:70:5d:d0:f8:19:a7:2c:46:e2:db:08:4f:9e:b7:e3:
bb:b9:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:21:59 2026 by rpki-client