
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File: ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier: 8SD/nk7RG7DISZ1aus9TQnknCgofIGjMCR7BdlSxW38=
Subject key identifier: 95:99:64:69:F4:EC:A5:3F:BD:FC:74:0A:4F:E2:1E:49:AD:5A:0F:D4
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer: /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial: 0E39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number: 0E26
Signing time: Mon 28 Sep 2026 17:54:09 +0000
Manifest this update: Mon 28 Sep 2026 17:54:08 +0000
Manifest next update: Mon 05 Oct 2026 17:54:08 +0000
Files and hashes: 1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: +oouqNDO9nASt8tu6dHkyWkZNry6X3YeJV4eoRX9dC0=)
2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: h8Yq1El+9tmCY/aSU/vFeXJAQYEI+HLkPqW4KvJG1Ms=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3641 (0xe39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Validity
Not Before: Sep 28 17:54:08 2026 GMT
Not After : Oct 5 17:54:08 2026 GMT
Subject: CN=6abaa9c1-ab62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:eb:ce:83:de:12:28:a4:b5:8c:8d:8a:e9:
f6:80:49:3e:f9:9d:ee:19:24:00:46:4f:87:c8:c9:
37:ae:ac:59:d6:a2:07:5d:c5:eb:77:34:95:ab:b7:
c8:c6:4d:c8:32:1d:fe:6b:38:3c:38:f1:6e:05:53:
ee:fa:59:ab:c0:f1:0b:82:4e:61:56:3f:2f:6d:83:
51:17:90:42:f2:fb:3e:b9:be:e0:0d:1c:97:16:04:
4f:79:fd:94:ad:2a:9e:c6:d0:44:f6:df:b3:65:a2:
d0:3c:35:de:f2:ab:3c:70:a8:16:82:a5:1b:47:59:
58:44:0d:e5:e6:5a:87:1d:be:ca:4b:6a:c7:e8:94:
44:e9:52:d9:b6:e3:6f:0f:bd:53:74:15:88:67:89:
fe:f0:4f:77:dd:69:cc:b3:ac:2e:6f:b2:2c:9c:2b:
eb:50:09:8f:6a:fd:c2:7c:eb:0b:bb:4e:2a:f7:9a:
04:29:f4:43:df:3f:37:ba:9d:0c:01:f4:11:6a:94:
fa:e7:4f:80:c4:9a:d3:b1:7b:0e:d2:7a:63:c9:9e:
cf:71:08:b5:03:23:9a:23:b1:55:ab:d6:90:95:ed:
9d:f7:d7:e7:f4:e9:4b:bc:1f:0d:d3:cc:d4:9f:b6:
05:29:25:5c:48:3a:14:fd:b8:35:06:36:32:e3:78:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:99:64:69:F4:EC:A5:3F:BD:FC:74:0A:4F:E2:1E:49:AD:5A:0F:D4
X509v3 Authority Key Identifier:
keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:4e:16:da:14:11:e8:d2:f3:b1:3f:aa:00:8e:4a:1c:27:25:
53:ab:39:2b:7b:26:cf:22:ba:8a:6e:25:8e:d3:f5:48:56:65:
53:e8:78:ab:9a:df:1a:93:37:78:88:84:70:ec:69:a0:f5:b5:
bf:c3:ed:d8:80:a0:34:4e:1d:12:2f:74:9b:15:23:2b:39:f3:
66:0c:ef:44:6a:eb:0f:c1:ba:03:08:c3:5b:9d:31:d7:5a:37:
24:20:ea:20:af:e9:de:88:14:d9:7c:36:fa:99:f0:ab:91:b1:
9f:bc:72:bd:f4:e8:e4:28:8b:29:a7:94:cf:32:83:66:54:dd:
85:24:2f:f6:22:ad:be:c0:ee:04:36:ba:6c:6e:f7:7d:51:bb:
33:27:7d:4a:26:66:47:02:f9:e7:d5:10:22:0d:2e:42:69:83:
dd:64:ff:e0:e9:d8:19:27:5f:3c:df:7d:11:c3:3f:0f:21:56:
06:1d:0e:44:62:8b:cb:73:0d:cd:97:3d:6f:7e:0b:ee:11:81:
f0:ef:b1:2c:6f:bd:be:a6:00:70:61:25:ee:10:a6:09:b9:55:
1c:19:a6:a4:14:fa:70:f0:b5:b0:0b:0c:e1:39:db:9b:da:1b:
57:c0:98:75:6d:de:b7:88:57:d7:b2:bd:59:11:62:ff:b7:76:
ae:52:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:54:16 2026 by rpki-client