
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json)
Hash identifier: zyy5T4FH0CNUtgNsZvA7ZEGaf9kUSjzISnEKs/2bGfk=
Subject key identifier: 9F:4D:43:7C:58:F9:1C:6D:A2:D1:E8:6F:37:86:38:7B:65:A6:F9:25
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial: 0D4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
Manifest number: 0D1C
Signing time: Mon 12 Oct 2026 18:28:39 +0000
Manifest this update: Mon 12 Oct 2026 18:28:38 +0000
Manifest next update: Mon 19 Oct 2026 18:28:38 +0000
Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: 2BbpuVkuUFjG9eKPGCRmky0vnZLLXpwUcnZkLmA90To=)
2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: UNRqxb3T+0nOQ/GO8zWJElSOEcU0ZScoqyo9xYCh4+U=)
3: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: Q/z2xPgEev/jp2CYBsFY4fwnHwuGTUM4Sob54bGfHrU=)
4: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: XSNUZ0r/o28q/R/sUwKxLrt1L1Gim57J92y6DiX5k8o=)
5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: oZ5Fktk/X7IkMniZfmOwOSIMZJUooUAA4uRqYhgv5JA=)
6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: MNLepmkmDKIhV6gh+S8mCUAnPQoTINkDmI9IbqljxRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3405 (0xd4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Validity
Not Before: Oct 12 18:28:38 2026 GMT
Not After : Oct 19 18:28:38 2026 GMT
Subject: CN=6acd26d7-527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:2d:98:07:ae:d1:04:ff:47:8e:75:57:c7:
cf:ac:bf:44:48:60:f0:1a:c5:8e:d3:78:c2:78:09:
38:6e:e9:dc:73:b8:bb:e1:87:eb:4f:ea:61:d4:ee:
f2:5d:65:b3:13:eb:f8:a9:24:14:b0:c3:3c:04:cd:
16:24:c3:91:77:19:05:5b:8e:08:ee:e5:9e:74:7e:
7f:fd:85:64:05:64:21:f3:16:fa:10:24:bb:d6:8e:
0c:4b:8f:dc:24:25:7c:53:69:c0:1d:c0:76:32:18:
03:33:6b:49:1b:d4:52:75:69:8c:99:d0:3c:ab:83:
16:d7:4b:bb:59:83:74:4d:97:36:ac:ad:77:82:6d:
1d:85:e1:0a:e4:17:d1:6c:8d:d9:af:f2:12:17:be:
c9:5d:b4:67:3d:b7:ec:d7:19:e7:73:ab:3d:eb:fc:
64:63:5e:d7:23:61:01:af:72:2d:89:29:2b:56:89:
41:38:5b:7a:3e:ba:9f:83:c2:e6:39:1e:8c:00:fe:
28:99:e2:26:f5:8e:7f:73:b0:0a:a2:65:85:8d:11:
07:f1:a4:e7:02:ec:e1:bd:cd:7e:50:8f:39:91:74:
fc:89:77:8c:53:56:f5:f3:9a:7f:37:24:7d:02:46:
f7:63:58:1c:0e:1e:3c:89:ce:a1:4b:54:ee:c6:73:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:43:7C:58:F9:1C:6D:A2:D1:E8:6F:37:86:38:7B:65:A6:F9:25
X509v3 Authority Key Identifier:
keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d4:59:22:0e:5b:2a:4a:ca:3c:bf:47:be:f8:38:40:fb:55:
36:21:f1:90:8e:1a:4d:3e:45:ae:33:bb:3d:71:2c:30:16:be:
bf:99:a9:3a:2d:b6:74:9e:83:61:16:32:5e:43:66:e9:d8:ff:
6a:4d:64:72:49:e6:c9:b9:86:d5:8a:4f:72:8c:88:44:0d:dd:
d5:1d:6c:70:5e:8b:30:76:57:06:2b:a9:fd:5e:bb:6a:4d:b3:
8c:10:f5:51:7f:54:5d:99:ba:02:38:82:6a:55:b9:ca:52:95:
c7:28:2d:c3:41:cf:a1:61:26:ce:86:eb:97:23:75:db:5e:e5:
9d:70:0a:66:a9:74:67:31:29:4d:18:2e:2a:9a:cf:d7:d5:ea:
9f:80:3c:76:60:e1:d1:4b:f7:9a:87:f2:7a:83:31:2d:0e:09:
6f:aa:f1:3e:db:3b:99:29:11:84:d9:eb:a3:65:f2:a8:0f:8b:
9b:90:7f:68:7d:50:07:8f:97:4f:b5:e4:3e:b4:49:77:8b:37:
44:de:5a:7c:99:9d:6b:fd:54:3e:eb:0c:69:c0:b0:61:53:a2:
f0:ce:1f:84:d0:bb:3e:32:25:1c:5b:17:3d:3c:5f:46:3c:75:
45:d9:3e:9b:5c:b6:26:dd:f8:d7:2e:95:e7:f0:82:e2:9d:1c:
3d:ae:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:49:58 2026 by rpki-client