
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json)
Hash identifier: jwHZuVX+o2g9R/6FBBmBWgUBUf0Cqp/43pyvz+Knw5I=
Subject key identifier: 03:F1:81:A7:0C:E0:31:7A:DD:8B:0E:F7:33:79:5D:72:C8:53:E0:3A
Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Certificate serial: 1E93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
Manifest number: 1E7A
Signing time: Sat 14 Nov 2026 16:00:07 +0000
Manifest this update: Sat 14 Nov 2026 16:00:07 +0000
Manifest next update: Sat 21 Nov 2026 16:00:07 +0000
Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: P1CJ36I/H4FLlXFuRJs2fRZE5QtSedlrXCgyn5zpz20=)
2: B842F0DEDB8A11F09F03163163D3641D.roa (hash: jXyFKKhv3NiyhdxhvyOkChDU44D4bw0UZftZE74S4M8=)
3: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: QTVpa4t8F6ebvlprgzU0m7JUeVHvQbd1I09gZUbnt0Q=)
4: B7BA9860DB8A11F09F03163163D3641D.roa (hash: tko+/h36KBIN5Mky2JAjS3z0hpFeYGsUcN3Jcbzdi3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7827 (0x1e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57
Validity
Not Before: Nov 14 16:00:07 2026 GMT
Not After : Nov 21 16:00:07 2026 GMT
Subject: CN=6af88587-5cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:90:78:08:02:03:c3:7d:8d:ad:68:29:5a:
b4:54:42:a3:30:37:91:32:9b:3c:c9:16:1f:af:9e:
28:54:24:d4:5e:db:56:f7:fc:56:69:ea:3c:e2:93:
09:eb:ae:26:25:1a:56:00:8c:6a:d9:90:35:a5:9c:
dd:e9:d1:d0:fe:00:38:e1:61:70:94:73:3f:28:eb:
6a:8b:45:56:05:85:2e:fd:42:de:7e:d1:90:55:0c:
b2:88:61:d1:e1:35:6a:6a:75:df:5a:85:e8:dd:73:
fe:a8:73:49:98:18:b2:58:b0:f5:4a:65:32:92:4e:
ba:92:ae:83:fd:f6:0c:0a:62:13:72:16:63:49:9c:
a9:a0:8b:06:81:02:7f:dd:9b:70:14:88:29:84:66:
50:2f:59:db:7c:99:6a:2f:1b:5d:1a:8b:a1:8c:68:
e6:53:7b:93:9e:fd:e2:f1:7b:c1:4e:3f:04:0d:10:
cc:3a:c1:b9:97:35:23:7d:3d:81:cf:8f:f9:39:08:
ff:d0:ca:42:44:09:14:4e:f4:8d:a4:f2:85:ed:b7:
29:3e:62:88:42:14:d5:e9:b3:6d:11:93:ab:cd:b5:
5c:69:39:cb:62:37:39:45:69:f7:08:66:26:06:d8:
31:4f:89:94:68:a0:69:ca:8c:58:87:a9:63:82:94:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:81:A7:0C:E0:31:7A:DD:8B:0E:F7:33:79:5D:72:C8:53:E0:3A
X509v3 Authority Key Identifier:
keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:91:33:77:78:b3:89:ff:08:1c:f5:2d:91:07:c8:e5:0a:cf:
db:c1:8d:3f:c6:db:86:b2:84:bb:a0:34:43:eb:2e:ff:71:ca:
72:be:a4:7d:7c:81:bb:5c:a7:14:98:ee:87:ff:b5:3e:eb:44:
e2:22:52:7b:c1:46:72:f5:81:13:6a:0f:6d:82:bf:8e:3b:82:
31:cb:db:6b:4b:73:84:e7:42:27:5d:b6:8f:ac:9a:a9:62:36:
95:ae:d9:fb:f6:9b:e7:31:b8:82:ea:fe:49:e5:54:fd:c3:80:
65:80:d1:a0:e8:25:12:ce:52:08:e0:1f:ec:57:43:2c:22:27:
f4:8b:f5:0f:bc:c3:3d:d4:68:f9:ba:8c:58:18:bc:2d:9c:f1:
bf:fa:9e:c5:e4:c0:95:d1:96:7d:06:c4:d7:1b:c1:79:84:52:
02:01:cf:8c:0a:12:0d:c0:e8:0e:ea:4d:cb:b4:89:e4:dc:72:
d9:3c:a6:b2:db:23:f3:c9:cd:4e:ba:a4:8d:cc:bf:38:2a:e3:
f6:34:b6:81:bc:ab:d1:f9:22:2a:df:9a:33:bc:e4:0f:66:e3:
11:3c:4a:b6:34:c8:32:5b:d4:88:a3:ab:24:9c:d5:ea:48:2a:
e3:22:b1:5c:2e:fb:1a:e6:cc:d0:62:5f:b1:dc:bd:ff:4d:4d:
8c:0e:3f:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2
RjUzRTdDNTcwHhcNMjYxMTE0MTYwMDA3WhcNMjYxMTIxMTYwMDA3WjAYMRYwFAYD
VQQDEw02YWY4ODU4Ny01Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlQaQeAgCA8N9ja1oKVq0VEKjMDeRMps8yRYfr54oVCTUXttW9/xWaeo84pMJ
664mJRpWAIxq2ZA1pZzd6dHQ/gA44WFwlHM/KOtqi0VWBYUu/ULeftGQVQyyiGHR
4TVqanXfWoXo3XP+qHNJmBiyWLD1SmUykk66kq6D/fYMCmITchZjSZypoIsGgQJ/
3ZtwFIgphGZQL1nbfJlqLxtdGouhjGjmU3uTnv3i8XvBTj8EDRDMOsG5lzUjfT2B
z4/5OQj/0MpCRAkUTvSNpPKF7bcpPmKIQhTV6bNtEZOrzbVcaTnLYjc5RWn3CGYm
BtgxT4mUaKBpyoxYh6ljgpTwQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPxgacM
4DF63YsO9zN5XXLIU+A6MB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB
NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTZCNS9DQTZBNTVFQ0FBNUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNk
eURYUWZwZ0VYdlJ2VS1mRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV5Ezd3izif8IHPUtkQfI5QrP28GNP8bbhrKEu6A0Q+su/3HKcr6kfXyBu1yn
FJjuh/+1PutE4iJSe8FGcvWBE2oPbYK/jjuCMcvba0tzhOdCJ122j6yaqWI2la7Z
+/ab5zG4gur+SeVU/cOAZYDRoOglEs5SCOAf7FdDLCIn9Iv1D7zDPdRo+bqMWBi8
LZzxv/qexeTAldGWfQbE1xvBeYRSAgHPjAoSDcDoDupNy7SJ5Nxy2Tymstsj88nN
Trqkjcy/OCrj9jS2gbyr0fkiKt+aM7zkD2bjETxKtjTIMlvUiKOrJJzV6kgq4yKx
XC77GubM0GJfsdy9/01NjA4/Nw==
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:48:24 2026 by rpki-client