
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File: k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier: f0I9zUGM4p1OB7tWXWjiC4w/SkrHwQR+vVhgRstKUPQ=
Subject key identifier: E5:5C:C8:58:ED:14:1A:26:CE:E7:29:25:44:BD:43:85:16:20:53:41
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer: /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number: A4
Signing time: Fri 25 Sep 2026 07:17:01 +0000
Manifest this update: Fri 25 Sep 2026 07:17:00 +0000
Manifest next update: Fri 02 Oct 2026 07:17:00 +0000
Files and hashes: 1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: tD7f/O68p/FxMHMORHEKGnMeauyVREhjKMd4VoVEwM0=)
2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: W13G9UJDUOXNhE35H+xQmcCjaFGO3pjeXgy05QF6k+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Validity
Not Before: Sep 25 07:17:00 2026 GMT
Not After : Oct 2 07:17:00 2026 GMT
Subject: CN=6ab61fed-5aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:19:d7:ef:0e:db:6d:46:c7:43:03:8f:19:
6f:80:65:2b:59:d0:3d:18:fb:01:ad:f6:e8:8e:36:
58:8f:7c:95:67:a2:89:ef:e6:1a:14:41:a2:18:35:
47:13:fa:73:98:54:20:e4:d0:38:6b:d9:06:e5:ee:
c3:6c:70:14:dc:73:d4:71:96:98:ed:74:db:ab:12:
15:e1:fa:f9:4f:de:e4:58:58:77:e8:da:63:af:52:
5f:57:f6:4f:37:32:86:34:7c:6f:41:55:dd:e3:d7:
e2:c9:09:02:6d:06:bc:48:7e:82:03:93:aa:b7:e8:
9f:31:d4:29:f5:d3:6c:fc:53:b0:38:e7:74:9a:32:
5b:df:ee:cc:20:be:ac:c7:de:97:52:be:17:90:ca:
ea:c1:2d:14:9b:e6:03:01:12:16:8a:81:3f:0e:9d:
63:bb:db:9f:3f:07:e2:08:1a:5d:eb:c1:1d:1d:c2:
8f:21:31:c4:35:0a:13:e0:63:cd:e2:0c:5e:96:6e:
7e:6d:9c:28:41:19:97:08:06:3e:f7:41:cd:ab:17:
8e:a3:2c:64:38:0c:f1:07:97:1d:8d:7f:72:72:62:
76:6e:ae:e0:3f:3e:58:54:97:ff:52:3c:04:16:83:
27:8e:6c:f9:fc:31:76:7e:cd:c3:b6:97:2c:6c:df:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:C8:58:ED:14:1A:26:CE:E7:29:25:44:BD:43:85:16:20:53:41
X509v3 Authority Key Identifier:
keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f8:3f:62:de:f7:03:c8:77:25:c2:80:80:9b:ef:63:15:5a:4a:
ed:21:53:ed:24:ee:3a:8c:47:bb:d0:4d:e2:e0:5d:b8:79:33:
16:59:91:e3:1d:7b:2f:34:94:3e:79:7e:16:22:cd:f9:ba:fa:
0a:07:f0:94:50:d8:98:ed:23:5f:2a:2c:b6:00:53:37:8e:ba:
ef:7c:56:c7:bf:69:46:4d:aa:f7:cb:ce:4a:58:c6:fd:34:a3:
4b:5f:0a:c2:1f:bc:f7:d7:09:cc:d5:ef:93:8c:72:aa:38:4e:
49:f0:6d:36:e2:8a:f2:d1:ac:13:a1:19:e9:4e:c4:6e:49:d2:
69:96:96:b3:da:63:7f:96:57:05:8a:14:ca:52:e3:ac:58:f7:
3b:1c:d8:27:9f:fb:cf:1f:76:ce:c9:53:cd:e3:3b:dd:ed:3f:
a8:eb:44:72:9c:05:14:d4:44:ec:4e:84:1a:11:8e:43:3a:5e:
4f:bc:ac:ae:b2:3f:2c:1c:c3:ad:59:a0:39:71:33:f0:ec:49:
2f:96:ab:23:96:5b:ec:38:63:73:de:39:b4:84:92:51:44:d8:
1d:01:45:2d:7d:6e:5b:06:57:f5:94:e0:c0:c9:24:54:42:ef:
fd:6a:f9:4a:6d:9e:66:2a:a5:0a:25:ba:65:76:97:c5:08:ad:
3f:53:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:19 2026 by rpki-client