
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json)
Hash identifier: Pm9z0dND1pVuAr/28Nwft27BMKKpn+zNxevR3FwZWm4=
Subject key identifier: 13:03:C0:3F:57:54:E7:E4:EB:6E:F0:3A:FB:53:49:CB:52:2B:78:B8
Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Certificate serial: 12E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
Manifest number: 12D3
Signing time: Sat 14 Nov 2026 16:58:33 +0000
Manifest this update: Sat 14 Nov 2026 16:58:33 +0000
Manifest next update: Sat 21 Nov 2026 16:58:33 +0000
Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: 83r0WQs5kGmzd6ylXWmxiG3lwf5nYAhe7arOVPHtThg=)
2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: FX/SXWeGmSorowMzitSzBZ8lzXgrcgho0mITKsxeeLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 16:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4835 (0x12e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Validity
Not Before: Nov 14 16:58:33 2026 GMT
Not After : Nov 21 16:58:33 2026 GMT
Subject: CN=6af89339-a89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:62:59:18:9b:12:94:13:bc:39:6e:84:59:
d9:03:d6:e8:9c:1c:3a:26:8a:68:7b:08:b7:9c:40:
f9:0f:96:4a:ce:53:5d:29:4f:30:c6:4b:db:44:8d:
54:18:e5:8a:f9:62:5d:f9:37:b7:2a:d1:7d:32:4f:
24:d6:38:ac:58:ad:63:78:0b:db:6f:b4:ce:dc:55:
5e:57:79:ef:9b:2c:07:c0:d3:24:17:d0:e4:36:f5:
6b:b6:14:3c:cc:89:23:12:d5:f7:8b:07:4d:79:ce:
cb:0f:26:1b:41:f2:b5:97:06:c0:38:1d:fb:f7:e9:
1c:9e:9f:a9:a4:78:6f:ad:c4:63:12:f2:c8:c1:1a:
f6:92:99:51:ee:29:2a:e6:32:08:e0:2c:ac:8f:3b:
86:8e:a7:b8:80:d8:7c:36:0c:53:43:4f:d2:a4:b6:
a0:34:bb:ae:d3:45:ef:7d:1a:82:a0:a5:39:29:cf:
dc:49:70:7d:2d:7e:de:ca:55:dd:c0:cc:de:51:33:
d3:53:af:67:a0:5d:ac:58:2a:f7:aa:ed:75:1b:f5:
03:c2:fa:14:8c:1b:db:5e:4d:b0:4c:62:99:9c:b0:
1e:77:b6:98:fd:38:87:96:67:7c:8a:a6:ff:75:2a:
ef:e1:5d:a6:a7:33:3a:c7:a5:e0:3f:f6:a3:a9:a8:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:03:C0:3F:57:54:E7:E4:EB:6E:F0:3A:FB:53:49:CB:52:2B:78:B8
X509v3 Authority Key Identifier:
keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:fa:a7:bb:b2:53:0d:1a:6b:6c:bc:e4:24:de:47:3b:e2:
29:43:a3:1a:54:54:84:6d:ca:d2:9e:9b:ec:39:e6:52:4d:58:
b6:30:f4:03:c5:af:fb:29:ef:3f:6a:9a:30:22:ce:c5:5a:8b:
69:90:dc:70:f0:c9:fb:3a:35:58:db:3a:b7:a3:8b:ec:dc:23:
fd:2b:ef:b0:ad:32:9e:37:50:e7:92:5c:ef:4e:cb:c2:a0:cd:
48:c8:19:89:05:70:ce:76:71:35:68:9e:db:27:88:1b:7b:d8:
cd:34:63:96:96:0b:36:07:5c:2d:6a:d4:96:b3:16:f6:a7:f9:
a5:bd:94:2f:33:97:32:2a:aa:60:de:56:2c:6a:90:91:07:d0:
4e:1d:c7:70:cb:7a:ab:e7:3d:84:3e:90:cf:d7:cc:13:ad:b0:
9d:72:f8:a8:35:0e:53:cf:97:7d:14:84:2f:2c:de:e9:3a:6f:
2e:97:d4:24:94:b5:ed:e8:e7:2d:3d:4b:75:28:61:0b:82:4b:
09:0b:49:c5:d8:ff:87:2e:99:48:76:fa:21:65:48:b8:8b:3a:
33:18:aa:2b:9e:97:37:15:d3:c6:62:ab:da:97:9d:6f:ae:b6:
ca:ba:ec:f0:35:b5:0a:38:1f:3b:a4:1a:ce:e2:f4:d3:2e:f1:
5c:78:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:47:06 2026 by rpki-client