
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File: 0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier: EAUK9BKrszRhwvm5RShP2HNOusfrMjPyxsTGRRrtI0U=
Subject key identifier: 64:E7:F1:DB:9E:43:E0:75:03:B3:AE:8F:E2:08:E9:15:04:B5:D5:5E
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer: /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial: 080C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number: 07F0
Signing time: Sat 14 Nov 2026 21:14:20 +0000
Manifest this update: Sat 14 Nov 2026 21:14:19 +0000
Manifest next update: Sat 21 Nov 2026 21:14:19 +0000
Files and hashes: 1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: HopGDIk//I5XT0VOqu/qILVYRMycUiVwlgQVLDZyJy4=)
2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: a0yVbOyKmzsc8MOg+dTg0w6gn2yodW2h3rxYL00GULI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Validity
Not Before: Nov 14 21:14:19 2026 GMT
Not After : Nov 21 21:14:19 2026 GMT
Subject: CN=6af8cf2c-d11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:db:df:f5:0a:ff:04:9d:f4:d9:7c:55:0e:
3f:65:b0:bb:5e:5e:77:4d:3b:18:03:a5:8e:3b:7b:
c0:2d:7b:85:8b:f0:f0:7e:f8:a2:fa:a3:23:a1:d3:
be:f8:82:58:c6:04:4b:83:8c:75:02:68:81:3f:9f:
68:fd:75:1c:af:5f:8d:25:dc:52:0c:64:c4:4f:08:
31:e3:16:63:b9:66:70:67:42:c5:fc:23:7c:4b:e5:
e1:97:f3:ed:57:a0:c2:82:65:9d:02:df:29:d1:8e:
90:cf:b4:32:db:b4:44:05:70:72:1e:10:c5:bc:05:
7c:ad:43:94:1f:16:3b:b2:46:e2:b2:6f:18:f8:19:
a1:f0:d8:ab:64:dd:6d:4c:b2:90:d7:e0:bc:d5:ea:
23:52:49:64:c9:e9:bf:a7:a3:f6:ee:39:ae:6c:56:
48:b9:03:5a:de:c0:b2:c7:cb:26:4d:d3:5a:df:5e:
4c:f0:25:c5:75:1e:b2:a2:5c:a2:8e:63:c4:59:1b:
21:d6:39:a5:e5:c2:a1:30:a2:c6:1a:36:92:1d:11:
dd:3f:ee:74:6e:f8:ba:d9:92:82:04:9b:7d:b7:ea:
49:09:7d:d0:4f:89:82:36:89:2f:03:3f:62:4d:aa:
33:80:03:80:63:87:20:2f:1b:10:75:4f:d3:6d:4a:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E7:F1:DB:9E:43:E0:75:03:B3:AE:8F:E2:08:E9:15:04:B5:D5:5E
X509v3 Authority Key Identifier:
keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ee:73:b6:98:9b:18:5e:15:b3:97:22:13:fe:0d:d5:88:00:
09:4c:d0:30:0d:8e:c6:59:55:61:81:f9:36:2c:1d:a1:13:aa:
47:7a:d4:e5:e4:e2:32:3c:72:12:8a:31:0d:00:1c:c5:ff:06:
63:b1:2d:a8:ab:fd:90:39:7b:bf:32:1b:87:d7:56:f5:75:75:
d0:04:fb:a3:84:b9:cb:6b:90:87:aa:6c:94:60:89:b5:42:11:
c9:3a:18:e7:66:b2:96:bd:b9:c0:94:64:b7:6a:f4:8d:da:07:
1b:25:21:b7:cf:f8:38:22:e3:42:01:48:6e:73:ec:7e:3c:8b:
a9:c6:95:83:7b:df:0d:2d:b3:32:c5:fa:46:db:3f:f1:d2:75:
56:99:92:83:9c:20:c9:d1:47:77:f9:41:aa:e4:de:20:1e:52:
ea:90:3d:e3:f4:4a:0b:0a:df:42:8d:ff:63:0a:04:72:da:14:
86:7f:8c:9c:5a:f5:cb:fa:c0:e4:bc:97:c0:eb:cc:51:53:29:
64:28:8a:0f:ee:bb:ef:49:c7:b0:92:f6:35:98:7a:d1:33:8e:
78:6b:dd:b9:23:d0:58:e9:ea:06:f5:9d:bb:c6:72:52:5a:56:
c7:a2:78:43:a7:85:5f:1e:07:da:03:3d:34:86:5e:e3:5f:2b:
7e:81:7b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:35:24 2026 by rpki-client