
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
File: ApdxaY8oNwXUpN4S5XOVhcvrjww.mft (raw, json)
Hash identifier: u+OgkcgAYhkKRgTh6eW/iCMUcPsnoR/1ujnxwArlR+I=
Subject key identifier: 99:B2:02:15:D9:CF:B2:6A:2D:8A:B0:F3:19:10:7B:82:76:86:D3:56
Authority key identifier: 02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
Certificate issuer: /CN=A91772FA/serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Certificate serial: 9B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
Manifest number: 94
Signing time: Sun 15 Nov 2026 00:02:19 +0000
Manifest this update: Sun 15 Nov 2026 00:02:18 +0000
Manifest next update: Sun 22 Nov 2026 00:02:18 +0000
Files and hashes: 1: ApdxaY8oNwXUpN4S5XOVhcvrjww.crl (hash: wW2rfkJH7x/RGgw4B6KIg0fazmApAPkgUWp+jmj5Aic=)
2: 56C55F20266411F1AE95FD6DA8833773.roa (hash: Bh/+aoYsXA1eMtFp1ijM0hnLldVk4y3NMxI4DJ5jwNI=)
3: 579B4ED2266411F1AE95FD6DA8833773.roa (hash: 8bYV5yqT5f/vp8IUk+aSf8PEeGU4OsOngNPeYOyshUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91772FA, serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Validity
Not Before: Nov 15 00:02:18 2026 GMT
Not After : Nov 22 00:02:18 2026 GMT
Subject: CN=6af8f68b-c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:70:48:60:c6:58:8c:4a:ea:f8:86:c6:77:
3a:3a:dc:a3:81:4f:86:86:f1:db:41:14:ed:a4:41:
86:90:9b:6f:b3:3a:6c:28:b4:95:71:1a:87:05:f0:
68:cf:4b:ec:bf:b2:6f:10:e3:b6:e8:b7:7e:b7:76:
92:7e:42:fa:34:e9:9a:55:67:95:1e:bc:fa:29:e6:
76:7b:fb:89:42:a8:a1:e0:d8:08:a9:79:b9:8c:12:
b3:14:47:49:93:53:83:4f:aa:89:6f:53:e7:ec:84:
7f:3b:7b:ba:4a:d2:c1:27:d1:54:b8:5d:21:f2:e4:
b0:bb:48:fb:71:f9:ec:5d:6e:c9:13:49:ab:e6:84:
bb:1f:91:18:40:b0:ea:26:26:40:c0:33:88:d3:11:
1b:1a:a7:e2:9e:e1:dc:7f:89:12:03:cb:96:8f:0c:
a8:91:6a:0c:e5:32:88:a9:05:50:cb:b5:ed:cb:75:
6b:c5:8d:1b:21:82:24:71:48:2b:d0:2c:f5:a8:19:
5c:31:46:19:f9:99:0c:c4:a7:0f:08:7a:5b:ed:e3:
ae:9d:75:3d:1a:f5:03:98:b2:a3:02:85:9f:78:af:
bb:b7:ee:ba:c6:ad:bf:80:0b:47:d4:0c:66:9a:44:
2e:eb:7c:cc:fe:01:51:72:cc:54:07:0b:a9:60:a9:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B2:02:15:D9:CF:B2:6A:2D:8A:B0:F3:19:10:7B:82:76:86:D3:56
X509v3 Authority Key Identifier:
keyid:02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:d9:07:b9:f2:63:97:ad:1e:e7:ce:7c:2b:17:d7:57:e9:af:
7a:d3:9a:b1:e7:de:eb:83:55:e3:a0:a5:da:d9:d8:2b:96:a9:
d7:cc:36:49:8f:3c:e5:84:f3:96:5b:8b:42:c7:98:00:5b:20:
56:67:b9:68:b9:a5:15:63:d8:d0:8f:3e:22:fe:06:70:68:a9:
48:73:24:52:c7:cc:ad:a3:0e:ab:b9:66:64:d9:d8:50:9b:39:
53:9e:b4:62:9e:e1:b8:c1:1f:68:1e:7c:39:d7:4b:13:e7:43:
c3:6b:50:21:fa:f5:13:c2:f8:25:05:93:11:7d:1b:66:93:b6:
8d:26:e5:aa:76:cf:3c:06:bb:7d:6a:7c:eb:6e:ad:cb:9c:9f:
49:04:b5:ab:78:0f:3b:ed:5b:bb:c0:e2:ea:82:f9:fd:14:3d:
8e:65:cf:39:b2:a1:2e:8a:05:c2:f0:1a:60:c6:f5:b9:d9:64:
24:db:b5:7d:ed:16:1f:3e:fd:1e:43:b7:3f:33:b5:36:7c:50:
34:77:b8:72:b9:d6:ed:f7:c2:49:06:73:d3:2f:b4:34:d9:52:
eb:91:1f:10:4a:99:58:56:57:99:42:99:ea:cc:18:80:09:67:
18:c1:8e:9d:19:42:1f:71:4e:3a:0f:d0:7c:be:5b:9d:9a:9b:
3d:a7:c4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:29:30 2026 by rpki-client