
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
File: -L4s6ssxJNZg8w-KJzgGZIr0PIc.mft (raw, json)
Hash identifier: 7QBNX18M3UPVibGphe9bZRSAo2lC4bDRZtMOgFdA8u4=
Subject key identifier: AD:D2:7A:A8:2F:FC:42:E0:0D:7A:A1:1D:38:53:97:E7:9F:D7:03:FC
Authority key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87
Certificate issuer: /CN=A91AFAAC/serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
Manifest number: FD
Signing time: Wed 23 Sep 2026 06:00:37 +0000
Manifest this update: Wed 23 Sep 2026 06:00:37 +0000
Manifest next update: Wed 30 Sep 2026 06:00:37 +0000
Files and hashes: 1: -L4s6ssxJNZg8w-KJzgGZIr0PIc.crl (hash: oTuNZhHimUSrUlKHN6ooAZBHE638Jy9AP3BeJfIaHnk=)
2: AE67395858D011F1B2604194A2833773.roa (hash: 0/14bImAgE2URSR4c1VW0n5tknPVytdkPxXZ0kflIto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87
Validity
Not Before: Sep 23 06:00:37 2026 GMT
Not After : Sep 30 06:00:37 2026 GMT
Subject: CN=6ab36b05-4a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:88:9a:bb:96:6f:2f:8f:b6:81:b9:0a:1f:a0:
ec:87:ff:6a:b1:01:a5:bc:22:5e:78:bb:1e:02:18:
f5:cc:f0:fa:16:fe:d3:c6:09:44:28:96:e4:98:5d:
23:7b:d3:df:07:2c:0d:7b:f4:d9:1a:f0:38:ef:8f:
1b:77:9c:08:b7:e8:e5:2b:51:c0:32:e6:ac:37:3f:
b3:7b:14:6c:00:5e:4c:71:93:97:57:f2:5c:e3:1f:
1c:31:b7:d8:9b:47:df:97:19:29:05:b8:ba:13:54:
bc:12:05:03:16:73:77:ba:12:8e:96:1a:b6:36:3f:
4b:38:4e:b3:f6:0f:00:fc:06:a7:a1:a6:52:da:e8:
b3:6a:14:b9:08:69:ec:7d:86:8b:2c:65:b9:f3:ae:
d1:80:23:89:dd:34:82:ac:ba:48:15:bf:eb:79:33:
49:3a:dc:32:da:25:3d:a2:c4:11:1d:44:c2:cc:bd:
7a:23:9a:ce:9b:10:7e:f0:1e:82:71:a3:44:fc:49:
bc:6a:76:28:0b:38:5b:f1:da:f2:db:da:cd:50:91:
20:67:16:83:be:99:97:49:e0:c4:b3:3c:76:67:76:
65:c5:15:17:c5:26:fb:69:6f:af:d3:01:68:2c:f0:
88:e0:4a:d0:d7:20:d1:2e:91:63:ed:96:0e:15:cf:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:7A:A8:2F:FC:42:E0:0D:7A:A1:1D:38:53:97:E7:9F:D7:03:FC
X509v3 Authority Key Identifier:
keyid:F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:09:73:c9:f7:f1:3f:fb:5a:5f:4e:03:f3:59:e3:59:73:af:
92:7d:a7:2c:07:72:ba:a9:a8:27:a6:35:60:4a:ec:ac:04:d5:
6b:d9:ea:e1:a3:46:bb:65:a7:f5:74:c0:b1:13:9d:ed:e3:a2:
08:8b:c7:47:ef:91:64:04:06:1d:7f:a0:b6:dd:37:ce:32:e0:
db:fa:62:f0:39:97:32:91:47:42:ea:ba:3c:4f:3f:0b:ea:5a:
0c:ae:16:6f:f5:ae:2c:c8:34:3a:76:12:a3:d2:73:80:5d:c3:
48:93:a6:c6:2a:5b:e6:57:e1:e5:18:85:f5:f8:83:5a:a2:a4:
4e:8b:91:cb:b6:09:37:53:01:0c:58:8b:f8:b7:96:84:8d:25:
49:c5:fa:e4:cd:ab:28:63:10:fc:dd:55:08:1d:26:c4:c3:14:
c9:3d:d7:15:84:be:81:fc:4f:a7:77:32:7e:45:62:5a:32:80:
74:55:1d:0e:49:73:24:c7:60:d9:4e:63:92:89:b4:e7:e9:70:
e2:ff:ce:c7:af:96:52:3e:8f:e8:df:29:b9:93:bd:81:4c:9b:
29:f2:c6:fc:55:87:4e:f1:ad:ab:3f:d3:94:61:38:45:9a:fb:
00:f4:77:95:73:ec:ed:e2:25:b5:6e:a8:33:ae:d2:38:1f:9f:
7c:d4:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:20:21 2026 by rpki-client