
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
File: ApdxaY8oNwXUpN4S5XOVhcvrjww.mft (raw, json)
Hash identifier: rkz0y/3fVEGho8b7qHmmZNdKnd03uN/9/PLuAtjlPKE=
Subject key identifier: 79:B7:61:D9:82:2F:40:F5:BF:99:D1:1B:2C:5A:08:72:B2:41:95:E2
Authority key identifier: 02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
Certificate issuer: /CN=A91772FA/serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
Manifest number: 79
Signing time: Tue 22 Sep 2026 23:58:24 +0000
Manifest this update: Tue 22 Sep 2026 23:58:23 +0000
Manifest next update: Tue 29 Sep 2026 23:58:23 +0000
Files and hashes: 1: ApdxaY8oNwXUpN4S5XOVhcvrjww.crl (hash: fjhxBqP8icVA4/jO9jjmoQ1JVYon2wFJj68aVdqJ1mY=)
2: 579B4ED2266411F1AE95FD6DA8833773.roa (hash: 8bYV5yqT5f/vp8IUk+aSf8PEeGU4OsOngNPeYOyshUM=)
3: 56C55F20266411F1AE95FD6DA8833773.roa (hash: Bh/+aoYsXA1eMtFp1ijM0hnLldVk4y3NMxI4DJ5jwNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91772FA, serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Validity
Not Before: Sep 22 23:58:23 2026 GMT
Not After : Sep 29 23:58:23 2026 GMT
Subject: CN=6ab31620-5d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:ef:92:1f:e5:58:71:c1:b0:4f:b5:f1:f8:
31:2e:e5:40:75:34:10:05:2c:4c:de:09:1f:31:d8:
af:08:02:2a:b6:2e:95:0f:0b:25:33:40:a7:44:b3:
a3:83:94:c9:1b:28:58:a8:3b:42:a7:d6:0b:ee:92:
1f:d6:b3:39:c3:60:e2:98:45:8f:28:8c:85:aa:8b:
f5:f1:4d:4e:61:b8:7e:fd:db:f5:65:fd:1a:73:e8:
1c:96:b4:e3:81:f0:cd:9c:1d:82:f1:f2:1e:59:df:
3c:64:10:93:42:ce:db:9a:62:da:62:dc:fa:a0:07:
29:3e:7d:1d:09:a8:ba:5e:79:60:bd:de:fd:38:4f:
ea:ed:70:9d:05:80:39:19:ec:aa:80:ab:66:36:1b:
5e:af:62:4e:5e:00:f4:7e:99:8f:8d:30:9a:6d:3c:
e5:cd:2b:d2:e9:f1:20:47:ba:69:b1:4e:cf:ec:98:
60:3e:16:ec:47:6f:b0:d3:93:c0:56:d4:cd:45:f1:
fb:07:71:79:9a:b2:77:2f:6a:e9:8b:b9:44:69:ce:
af:6f:57:75:73:86:66:ec:23:48:6c:39:0e:d4:a5:
c9:e5:24:57:46:71:30:1b:82:30:d9:59:4d:ec:af:
15:73:45:40:ab:22:a6:05:66:b3:2a:f0:e5:b3:2b:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B7:61:D9:82:2F:40:F5:BF:99:D1:1B:2C:5A:08:72:B2:41:95:E2
X509v3 Authority Key Identifier:
keyid:02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:e2:ca:80:1b:9b:c7:8f:81:df:d3:34:82:c6:db:68:59:96:
8c:55:99:f4:3a:51:86:63:e9:8d:4b:5e:78:94:9b:de:d8:93:
92:8f:fb:ea:1e:c9:de:7c:d4:0b:c9:b9:ad:f0:23:cf:1b:4f:
a4:67:d1:62:4c:05:cc:d3:42:a4:b8:e9:73:8e:42:34:2a:ae:
34:76:3b:a3:9a:b9:3f:c9:ff:d0:94:e5:8c:c7:d4:70:fa:6d:
95:69:10:90:74:2a:95:f9:68:1a:69:0d:21:b1:b0:f2:6c:d3:
e4:34:76:66:b7:fc:15:36:bc:12:5b:e0:0e:e0:bf:1b:79:74:
0a:09:24:60:de:5a:65:30:17:08:cb:38:e3:7d:6a:d4:a1:c2:
56:61:8e:d9:e3:25:41:be:9c:f5:14:1c:a8:2b:2b:72:75:57:
27:db:69:54:08:da:6f:47:78:b3:18:cc:2e:93:fe:78:3c:22:
f6:bd:0e:ed:bb:89:5e:08:2b:18:c9:be:e8:2a:3e:29:5e:9b:
09:f1:3b:f6:c2:37:85:42:1a:33:ad:d5:11:56:5a:66:ba:01:
70:a5:94:80:88:a3:23:70:ac:a3:7f:cc:a1:82:dd:dd:7f:47:
7a:f7:70:9e:df:92:aa:ab:8e:a8:54:24:5c:d6:4a:45:5a:44:
f7:ad:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:39:03 2026 by rpki-client