
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File: 0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier: KpPmaxbsdT7NTm4zQosVZWdP7MNeMCWqYMeQMnGOxGI=
Subject key identifier: C2:73:C2:77:D3:3F:E5:39:04:27:DB:78:40:68:5D:1A:E9:DB:9B:45
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer: /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number: 0226
Signing time: Fri 25 Sep 2026 02:49:44 +0000
Manifest this update: Fri 25 Sep 2026 02:49:43 +0000
Manifest next update: Fri 02 Oct 2026 02:49:43 +0000
Files and hashes: 1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: R69yw0SemsqlBKodkRrQ90tRkwuyaJAyDreqDbR2fmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Validity
Not Before: Sep 25 02:49:43 2026 GMT
Not After : Oct 2 02:49:43 2026 GMT
Subject: CN=6ab5e148-170d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8a:90:ff:e7:12:93:b5:41:54:a6:9a:2a:27:
73:77:96:2c:2b:73:dd:ad:8e:19:e0:f0:dd:9b:56:
23:95:27:c1:70:3a:bc:bc:74:60:99:29:73:3c:c3:
63:82:04:34:98:9a:25:95:0b:9c:f9:4a:4d:7a:aa:
0f:3b:d3:2f:18:c9:3c:3e:1f:ef:d9:a6:22:77:b5:
76:31:23:3b:2d:9b:5c:50:c0:18:74:12:ad:2f:23:
df:ff:f7:44:b4:7f:3c:d4:a9:d8:94:17:61:e9:a0:
15:08:df:2d:23:70:69:f8:55:23:54:73:e1:3c:4e:
d2:3c:bc:db:d0:cb:90:3a:b2:1d:e1:d7:2c:99:16:
23:86:0d:f8:2c:61:07:c8:8e:f4:29:94:c6:f5:13:
b5:09:23:5d:57:3b:36:8b:b6:9e:53:40:77:de:ce:
ba:55:35:9e:50:af:94:5a:4e:cc:7f:b5:4a:19:db:
e8:40:ac:ad:85:e3:14:d2:38:d3:6f:aa:e6:b3:23:
ff:5f:6e:d6:0c:5a:3a:1b:2d:4c:67:f1:1a:1e:89:
21:f9:5b:cb:6d:ed:92:00:b5:8d:92:73:5d:c4:f2:
0a:e7:2f:55:d4:6e:53:36:21:76:f0:cd:1b:40:61:
ff:b7:cc:57:59:83:57:b0:85:8e:31:ac:60:aa:b2:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:C2:77:D3:3F:E5:39:04:27:DB:78:40:68:5D:1A:E9:DB:9B:45
X509v3 Authority Key Identifier:
keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:4a:02:08:cb:08:45:ca:f5:86:5a:63:b9:e5:0c:d9:b9:61:
e4:d0:f0:65:40:37:4e:4b:8d:9b:9f:2e:4c:aa:34:5f:3c:a3:
51:a5:4c:fd:e5:de:a3:4f:95:e0:9a:76:8e:9b:10:08:ac:71:
b6:44:a7:a3:65:6f:f3:c4:8a:66:6d:3e:5a:14:60:2e:ab:48:
6d:80:4d:f8:20:54:9a:49:d3:8c:c6:0f:cd:1f:65:9f:aa:6e:
c6:e8:b5:61:b8:68:54:8b:f8:5b:6f:44:5f:04:a0:fe:f9:8e:
49:22:c2:aa:45:09:e5:96:e8:5d:8e:7a:95:f5:9d:59:eb:83:
5a:7c:7f:8d:96:b7:ae:48:81:75:dd:9f:4a:1a:ed:01:0b:b8:
5b:dd:7e:64:21:18:6e:9e:60:d5:17:21:09:33:e8:9d:0d:f7:
7d:87:57:cc:f8:ac:1c:b1:69:81:66:a2:49:92:7a:e1:6e:a6:
ab:72:00:18:18:4c:d8:63:c7:bf:a1:5a:23:b8:ad:f4:d8:1b:
0f:b5:6d:1e:c0:7d:c3:2c:e3:59:4d:c3:01:9d:45:2c:b1:63:
20:88:49:cd:e8:d1:96:ac:70:1e:d5:28:24:3c:0c:42:bd:90:
d1:f1:60:5e:8d:5d:65:e8:f8:5c:5a:d3:f8:fc:15:21:3f:24:
5e:c8:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:06:30 2026 by rpki-client