
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json)
Hash identifier: O0spYqxr6NxsKXbpN9epdnFLwhVr/RolbSgw1Q/Q9Ys=
Subject key identifier: E7:09:BC:87:8C:4C:A8:5B:97:5D:27:A2:25:1D:C5:58:FA:91:FF:EE
Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89
Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
Manifest number: 0157
Signing time: Sat 03 Oct 2026 05:58:00 +0000
Manifest this update: Sat 03 Oct 2026 05:57:59 +0000
Manifest next update: Sat 10 Oct 2026 05:57:59 +0000
Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: 9/hGpDzsZ3/GEhwgfd7bWLbcWdM71wcvtem2flsqOgc=)
2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: /AunwFrvROT949ER300con7tMv9t6hnrAMstakDSUnc=)
3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: wpQZ9n5tOzLHw2Dp8uE1s9PaRxpgXwgFNni9J4wuW/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl
rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
Validity
Not Before: Oct 3 05:57:59 2026 GMT
Not After : Oct 10 05:57:59 2026 GMT
Subject: CN=6ac09967-c58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:c1:02:c6:aa:91:28:7a:d4:06:71:de:e1:
55:2b:66:1e:2a:4c:73:3b:ba:77:ce:0a:f5:e0:bf:
0f:4e:ec:04:7b:32:e6:0b:42:b8:07:69:99:f3:93:
20:1d:41:15:b2:84:75:3e:03:3e:a6:db:43:af:82:
2e:4d:83:5f:88:61:79:5d:38:df:52:97:3f:81:e1:
a2:4b:e5:7b:83:02:b2:81:d6:16:a3:5e:25:54:60:
65:5d:12:28:2b:11:08:35:94:82:d6:68:e2:ab:d3:
0c:73:fe:43:e6:4b:b9:12:09:6b:2e:63:1f:37:13:
df:c6:ca:ed:6b:3b:57:94:7a:17:94:e7:9c:f0:6e:
b7:25:a6:86:08:10:5d:d9:c1:43:e6:2b:df:77:6e:
3c:db:fd:e4:26:d1:b4:c8:80:08:46:dc:de:fe:a9:
56:2c:08:d9:fc:92:4a:b1:f2:34:38:51:86:24:2f:
a1:ad:7c:2f:89:d2:ef:e3:1b:98:db:18:52:9b:7e:
75:96:98:a4:26:e7:1e:ee:ac:10:d9:22:b7:c8:92:
ea:53:d3:fe:7f:11:ee:ba:3a:38:ba:1d:95:11:14:
dd:e6:88:96:c9:3a:c2:d2:3d:44:c8:5d:d5:49:26:
89:ab:b9:79:3a:54:3b:82:b7:b4:a4:2d:de:fd:d5:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:09:BC:87:8C:4C:A8:5B:97:5D:27:A2:25:1D:C5:58:FA:91:FF:EE
X509v3 Authority Key Identifier:
keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6b:15:f8:cc:b6:fb:75:10:12:8e:1e:c9:d7:c9:9a:66:07:
ee:b2:c3:3d:0d:bd:88:94:36:2c:ee:d4:a3:9d:1a:df:53:9c:
e0:4b:80:aa:93:9e:f3:54:59:b6:52:6d:cc:e6:f9:45:f4:be:
54:69:20:02:af:24:8b:4d:d4:50:a7:aa:b9:ba:53:a6:6b:24:
04:26:c7:88:6b:c4:5b:91:9c:e2:f6:59:eb:a7:1a:72:8d:9a:
36:23:cc:31:ab:f0:b3:9b:17:33:a2:d9:38:43:d7:b2:b4:f4:
e3:aa:00:58:38:c0:4a:60:83:66:96:22:68:5a:17:c2:8d:3a:
41:4a:93:31:ff:35:3a:50:2c:dc:21:75:c7:f7:16:26:4c:45:
d0:a7:17:c1:e0:44:1e:c7:42:79:16:78:a3:4b:9b:38:df:1a:
28:77:8e:65:85:7c:1e:34:97:8a:2f:46:50:71:6b:31:f4:d4:
50:8d:fa:4d:f1:93:3f:f3:f1:67:26:90:17:cd:29:91:14:71:
b7:dd:94:35:52:00:b5:84:cf:24:1e:01:10:b6:cd:6d:0a:ec:
0b:da:9c:65:41:f2:72:f6:a0:3e:bc:a9:72:a0:01:5d:4b:44:
0e:ed:d5:06:b6:28:88:c3:40:1e:db:ff:37:f7:f9:8c:77:8a:
93:49:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:38:40 2026 by rpki-client