
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier: tspYzvPcjdR6qajKY7w6l29nllBGOR07X60qu8Xo0a0=
Subject key identifier: DD:91:CA:B3:ED:4D:61:DE:11:01:26:61:A2:C3:E1:5D:33:91:5A:6C
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial: 02F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number: 02DB
Signing time: Sat 03 Oct 2026 01:49:17 +0000
Manifest this update: Sat 03 Oct 2026 01:49:17 +0000
Manifest next update: Sat 10 Oct 2026 01:49:17 +0000
Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: SPIV5KDkxv8t1EdnLo8xR+IBUinuLV0RegOqksInEa4=)
2: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=)
3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Validity
Not Before: Oct 3 01:49:17 2026 GMT
Not After : Oct 10 01:49:17 2026 GMT
Subject: CN=6ac05f1d-802a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:ed:a4:b9:1a:16:21:49:6e:04:e5:7d:9e:
a7:c6:2f:77:e0:75:79:1d:38:af:e3:77:eb:62:bc:
ad:8e:c3:b8:bf:c7:4a:66:54:d3:f4:5f:d2:99:82:
fd:55:e7:26:09:98:9f:e8:a2:22:78:20:94:61:81:
5b:07:1c:c1:5b:89:ce:81:82:33:fb:5f:c6:77:c9:
44:19:1c:a3:84:22:e9:0c:89:40:67:27:df:55:2f:
79:9a:21:96:3f:74:3d:d6:8a:c9:09:fa:9b:cc:42:
f1:81:37:13:2f:4e:97:48:58:03:43:c1:aa:c0:11:
72:e5:27:ca:fc:5f:ed:30:93:5f:7e:f9:0c:7d:e2:
e6:e4:9a:93:44:b9:1c:f7:dd:b9:65:b4:78:3c:f9:
5b:76:0e:1d:35:c7:8b:8e:89:c0:14:a8:a2:31:10:
fe:e6:02:87:65:5e:03:ec:60:b1:3b:c8:f2:53:d0:
1d:83:eb:0f:30:ac:07:c7:0c:39:d5:47:1d:6e:25:
a3:0b:c1:b4:e1:91:09:8e:73:db:ef:25:98:2c:a3:
6c:fa:6c:0d:13:f3:15:4c:77:a7:4b:64:c9:f8:a1:
7c:1d:be:d8:63:f1:e8:20:e4:ba:35:dc:ab:79:6f:
5c:9c:1c:65:f8:4d:09:46:05:b1:de:0c:76:6a:74:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:CA:B3:ED:4D:61:DE:11:01:26:61:A2:C3:E1:5D:33:91:5A:6C
X509v3 Authority Key Identifier:
keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:eb:34:f4:53:a6:61:eb:3a:73:c6:6b:dc:fa:fa:59:9b:ef:
b7:1e:4e:f9:8d:4d:65:87:90:35:cd:3a:c7:4b:09:b3:f8:31:
45:67:14:89:db:b9:5a:e5:1a:57:89:68:c2:84:ba:a7:f8:30:
1d:8d:b3:b3:0b:1d:28:a0:b6:c2:4a:00:6d:0b:18:af:83:d9:
f5:cd:48:e4:84:c6:bf:39:b4:3f:7b:25:d3:7e:94:87:c9:fd:
a4:2a:ed:d8:3d:1b:16:46:b1:92:80:70:7b:32:fb:cd:f3:38:
f7:33:81:6a:cd:f1:01:69:b9:1f:eb:27:3e:72:5a:a5:39:e3:
b3:d2:76:d6:80:08:c6:36:ef:e6:5a:1c:c9:47:10:34:86:86:
34:ee:ad:c1:41:32:35:8b:f1:36:25:57:a4:0d:f8:f5:55:39:
53:ee:11:e9:13:2d:2f:a4:c0:d7:2e:f4:24:95:e3:e1:5d:f4:
d1:c0:6b:69:4c:e8:8a:d2:3b:5e:ac:bd:4e:bc:49:3a:63:c3:
9f:1b:ae:31:6a:ea:be:27:c6:9e:7e:c4:39:54:bf:77:dc:73:
e8:c0:1e:7d:d2:e9:c8:3e:33:50:4a:bb:6f:af:d6:b4:9a:aa:
91:34:bb:da:6e:25:bf:ae:37:32:66:07:00:83:2e:ce:8e:14:
de:39:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:53:51 2026 by rpki-client