
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json)
Hash identifier: 93/JgeRfcoI/GQMQQoU0LAvV0LTb5vi+WY3Tj3YCZFY=
Subject key identifier: DF:9F:53:33:CC:E4:2F:E6:0E:89:20:B7:B6:A5:87:93:73:05:EC:63
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial: 361C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
Manifest number: 35C2
Signing time: Sat 26 Sep 2026 14:17:44 +0000
Manifest this update: Sat 26 Sep 2026 14:17:43 +0000
Manifest next update: Sat 03 Oct 2026 14:17:43 +0000
Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: huYYXHhdPYZh1FISy+tTbs/wmlBfZKtORwg5TdhntuQ=)
2: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: BUp0zcWa4HIudpk64mEylcMBmmGpd1vuqwNaBAsC6O8=)
3: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: GnJt59bMAjeqlYPa4lin7QYgA2KcGbUA51eIDiT69YA=)
4: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: VG82nm7UqU5w2sJlNK4SDxqINYJwoA6/oxLrBlm8JIE=)
5: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: S5MQHQKHGoySn52561lN0xrvmjrDRJUvv1CviMHuNKM=)
6: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: yReVTcL58773Jpuyzjun19aGFuK7z9XDGu28zTvah3k=)
7: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: tHVxf9Q3vQhMutTNU0Up1wvh8aZLr2ux0lvTei/d9kc=)
8: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: 8krrPxGdC1AJXLst0L0sKBcp7J4vtNMSaCyCJqfKloU=)
9: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: aqVmmYIJQaHpLvDdH8MbBjTUJnEk1fL6///wI+ixCg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13852 (0x361c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Validity
Not Before: Sep 26 14:17:43 2026 GMT
Not After : Oct 3 14:17:43 2026 GMT
Subject: CN=6ab7d408-af82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:10:8d:7e:16:96:0b:46:43:17:c9:e7:51:
3e:44:71:e8:62:96:50:1b:d2:2f:0f:4f:d7:9d:e8:
5e:f7:78:ba:a6:e6:59:bc:14:1c:bb:c0:d5:9e:f6:
e5:44:0c:eb:3f:63:a0:c4:02:67:4c:04:65:b3:e5:
3c:32:cc:f6:36:98:bc:a0:09:7b:48:49:47:77:ca:
37:da:d5:d9:18:a5:dd:8e:c4:16:30:56:70:41:e6:
69:31:7e:8e:05:bc:ff:d8:c4:f8:fc:2a:d5:6a:66:
b2:22:9b:85:6e:2a:fe:c5:0a:7c:fb:ab:1b:97:3e:
9c:d3:d6:5a:2a:aa:5f:f6:aa:76:c5:8f:24:58:8d:
eb:4c:c8:2a:78:47:f3:05:78:7e:12:8c:76:fc:d2:
8b:15:e6:0a:cd:ff:76:e4:fc:28:73:9a:06:40:2c:
fb:e0:aa:83:4c:b9:bb:02:04:12:e7:ed:bf:30:65:
cd:ae:40:19:5d:8d:34:75:b3:e8:8f:1b:fc:c2:dd:
17:7f:39:ee:73:0a:26:b0:7a:87:34:a3:17:d5:fe:
46:96:83:6f:db:05:e2:a2:e4:1f:64:a1:21:01:c2:
90:68:36:11:c2:08:c3:84:52:57:76:72:67:d1:2c:
b4:ae:86:27:35:54:94:64:25:a3:9d:cb:8e:ad:3d:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9F:53:33:CC:E4:2F:E6:0E:89:20:B7:B6:A5:87:93:73:05:EC:63
X509v3 Authority Key Identifier:
keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:eb:85:80:49:53:23:35:11:a3:5c:e3:49:cf:ad:e3:89:4f:
3f:f1:17:d8:89:99:09:f5:e1:72:80:3f:c4:66:76:3a:a5:be:
4f:0f:ae:d0:ac:77:d5:3e:7c:60:f5:5e:09:c4:e3:29:55:91:
8d:02:fc:c2:36:00:3b:0c:3f:c4:5b:01:dc:d5:3b:7d:20:58:
1a:c4:a9:8c:48:fa:63:80:20:cb:0f:89:4f:ad:e9:ff:39:af:
96:3f:bf:1e:08:7f:a7:23:fb:3c:4c:8f:e6:78:8f:2a:63:7e:
4e:c6:12:38:7b:b3:e0:13:d0:1a:f6:6c:6b:f7:d1:b8:02:1f:
82:43:6e:f2:32:7b:c1:64:c7:5b:25:0d:0d:ea:bd:d0:81:5b:
99:24:3a:b5:bf:2f:1e:b4:37:b6:b1:47:29:c5:4b:d0:f1:61:
0d:00:8d:e5:b7:7d:d0:5e:ee:c2:49:11:9d:65:c5:62:16:87:
a6:20:12:73:a2:18:ac:3a:3a:dc:61:1c:32:6d:ba:a8:68:c7:
c4:2d:a0:04:98:aa:ed:f3:2f:b3:91:3e:f8:a7:48:60:3f:47:
dc:23:d1:46:66:9b:c9:b6:e1:46:b1:34:f2:96:89:c2:61:71:
a4:a8:87:b4:7e:4f:fc:9e:6b:2a:ef:9c:ea:ff:1d:a4:d0:bd:
a2:1b:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:58:47 2026 by rpki-client