
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
File: _KoIYibfAq-DlPqyLR-5bgt9Zd0.mft (raw, json)
Hash identifier: S/eYG3dWvYU9HSivqjlz9/14GD+/zAabocfQzj5SYsQ=
Subject key identifier: D9:9B:4D:17:77:E7:E8:68:21:1F:F3:F8:85:79:D8:CC:FE:B1:70:E4
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0D25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
Manifest number: 0CD5
Signing time: Tue 22 Sep 2026 18:30:21 +0000
Manifest this update: Tue 22 Sep 2026 18:30:20 +0000
Manifest next update: Tue 29 Sep 2026 18:30:20 +0000
Files and hashes: 1: _KoIYibfAq-DlPqyLR-5bgt9Zd0.crl (hash: hr5jZ1GeQsoyNSINROZshC3e4k1jqbagRGtNssFvfaE=)
2: 336E2134D0FF11F0904A3785C4F9AE02.roa (hash: 8ReXEY/ooZI9VWwdjyL+EpSnY0MpgK9LpTHh2PDG6Qw=)
3: 45DE9550BADF11F09B91D509C4F9AE02.roa (hash: p36IxgJSYxSVxDcgWekbNQXRkHJAnWyPDPHksjl233k=)
4: 16C56390B6FF11F096DEAA71C4F9AE02.roa (hash: BgUHPnvLwPxqiAYZUON/ST5O2jioUi7aR9uP+MPdncA=)
5: 75775B8A5E3C11F094FDCD71C4F9AE02.roa (hash: 71T3pzVhzyKgAZZGhNCVsYqKbfXYuUmjUcBl+S0PhoM=)
6: E2D5171C2F3211ED958A415DC4F9AE02.roa (hash: EKgPE59Um2mB3Cb/fDjzGAqBUuX41HjcK3tgwN7mb6g=)
7: 50229D303D6711F1A0848E61AE833773.roa (hash: reIxgqe05sEBUJKY+WscmjdUtjvd2Rhqu3ZL/1RHcqc=)
8: 78E949B8BA2B11F091659A18C4F9AE02.roa (hash: jySnNcQ/+odq2S87rB45bvuTiaw3wlS7bGHDCJXajj0=)
9: A28603BE3D5D11F19617582FAB833773.roa (hash: guX6EhbcTR6j/8h8tuHU18WPC5/CU3vKLdR4Gif3JRY=)
10: 9FC61D303F7A11F0BC711E7FC4F9AE02.roa (hash: gzcKTWUYCkW7/UycwF0pi+085wVbUmNYAwtTydE5q9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3365 (0xd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: Sep 22 18:30:20 2026 GMT
Not After : Sep 29 18:30:20 2026 GMT
Subject: CN=6ab2c93d-9010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:89:1c:d0:76:ea:9b:36:c0:e0:b7:96:ea:
7f:56:fa:75:c5:c8:b2:df:fa:ec:cf:7e:68:a7:e4:
68:8a:95:6e:60:ea:4d:ae:93:42:39:f4:3b:81:02:
be:8b:5f:e6:23:93:48:2d:6d:15:72:f0:d6:b5:01:
69:7d:2e:a3:92:14:24:7c:e1:a7:8b:a3:e7:dc:b8:
f1:c3:dc:d0:1d:04:d8:d4:e0:ca:85:1d:72:0f:4f:
54:b5:e3:09:11:2d:23:72:5b:9a:64:39:5d:d5:2e:
17:1b:60:57:fb:4b:ea:e3:a7:e1:25:58:26:19:5f:
f9:1c:38:96:27:61:a4:39:84:16:e2:2a:b7:2e:fb:
2e:b8:63:77:6e:f9:48:45:de:1c:38:68:13:7e:d1:
cc:e7:6f:de:17:2d:b9:68:96:cb:71:d8:0a:4d:58:
b4:e1:85:02:52:b0:ad:df:72:72:22:fe:1f:97:48:
c7:2d:65:f8:9f:4d:fa:76:a9:d8:c2:9d:a8:0f:87:
30:6e:80:9b:18:c1:1e:2b:d5:a2:17:db:d8:12:a1:
94:a4:72:1d:5b:ef:89:73:1a:39:6c:ec:f8:cf:e0:
b1:bd:67:67:94:41:3b:95:74:75:3b:b9:ad:4d:36:
d4:b5:fd:1a:65:12:08:65:87:6b:cf:a4:9d:61:fd:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:4D:17:77:E7:E8:68:21:1F:F3:F8:85:79:D8:CC:FE:B1:70:E4
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:06:bf:5f:b4:ac:62:9e:44:0a:ec:f1:15:68:50:f2:7c:5b:
4f:42:14:b2:85:c9:18:50:65:41:56:6d:b3:77:d8:77:2c:0b:
07:1d:f4:b7:8f:9e:fb:60:af:87:ba:7c:d5:7e:17:aa:49:30:
9f:d4:fc:64:dd:3c:79:e0:1a:a2:4e:f8:6b:b4:09:d4:41:44:
3f:05:cc:c5:36:4a:f5:bb:7e:54:51:4c:82:a5:cd:74:c0:1f:
ec:56:70:70:b8:6a:42:be:bf:8a:31:17:e4:41:2c:5c:85:5e:
a7:44:37:fb:b9:ae:8a:04:4d:5f:2d:ba:3e:a1:38:63:65:6f:
3c:eb:6e:b2:0d:cb:47:f9:8a:2c:b5:14:2e:4d:f2:fb:cd:18:
f8:85:e5:0c:24:70:30:62:2e:b5:10:27:d7:bd:e8:85:cb:de:
7f:e4:37:71:55:8a:e8:92:ef:db:c5:86:a5:c0:47:1a:3d:31:
ca:19:0b:8e:32:46:57:af:b5:fb:a0:09:8b:fc:59:d4:5f:26:
d3:5d:69:87:b1:e3:95:6c:fa:61:53:d8:6b:bb:7c:0d:5c:6a:
7b:61:aa:c6:17:92:ac:54:63:5e:5c:db:5a:7f:66:9a:ef:42:
96:fc:0e:25:07:c9:a0:95:ae:76:0d:57:4a:4d:19:37:cd:2b:
08:65:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:16:54 2026 by rpki-client