
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
File: A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json)
Hash identifier: /qmst1jyejDbGPkFJj3g3PkWT/+OVYpA18+VFknri8g=
Subject key identifier: D2:A8:76:5F:50:69:08:0F:E6:2B:EC:42:40:7F:5E:25:25:65:8C:EA
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial: 1280
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
Manifest number: 1026
Signing time: Fri 02 Oct 2026 18:07:04 +0000
Manifest this update: Fri 02 Oct 2026 18:07:04 +0000
Manifest next update: Fri 09 Oct 2026 18:07:04 +0000
Files and hashes: 1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: KKHfe6eHzREbyTrW6FTmxMnN0aaqP7AMux4Xf54vw74=)
2: BD60B6F059A211F183AF6F31B8833773.roa (hash: cNwv63/9s+kMtXt+Cr4yAjM1fI/LlZbgaRJaSG3g5nA=)
3: 55D1A87064CC11F18E187B1B6847A888.roa (hash: 7Z2NciEgokUCo5EnpCBiXza/5v3JJ7UnsmlRE5tDajQ=)
4: A25B6E909E0311F18E1FD92A4A11F970.roa (hash: 0qfS4Tulhh74VpatYXS3ztYz0ycVKBZwgb1B/JbsnRg=)
5: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: kccLJAAJUftI3LLIsTKo7BiUv/BhOLEvY3/TqmL54Ss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4736 (0x1280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Validity
Not Before: Oct 2 18:07:04 2026 GMT
Not After : Oct 9 18:07:04 2026 GMT
Subject: CN=6abff2c8-50ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:cb:a7:b6:fa:ae:b1:53:d0:be:08:17:5f:
d6:43:36:b4:ea:3b:66:b7:84:45:9e:ea:0a:b7:bc:
b0:94:f5:dc:49:2f:76:e5:05:e2:4f:50:46:a2:36:
af:61:2b:50:9d:1f:ce:ff:38:a8:c2:4b:0a:76:b0:
de:fd:fd:f8:83:b3:2c:73:69:f4:9a:c9:32:b9:6a:
60:6c:55:af:f6:c5:da:f5:18:76:10:ae:d9:11:b0:
c6:80:89:f5:42:58:79:6f:b2:cb:d9:a6:b8:6a:c6:
f4:5e:69:0f:7f:2d:4b:f3:df:30:4d:9d:dd:3c:f8:
7f:98:0c:b1:f5:cc:bf:51:93:59:54:93:2f:10:ae:
2f:30:f2:17:d3:37:a2:64:08:01:cb:ce:27:ea:33:
a0:ac:c5:17:34:1f:8d:5c:cc:df:02:94:ad:26:72:
83:09:ae:e9:96:7f:76:17:e6:24:04:e5:11:ad:09:
2e:f8:23:ba:c8:09:50:e0:14:40:45:b5:e1:50:12:
18:03:15:b0:36:26:43:af:4d:9b:e4:6b:a3:f4:3a:
4e:6b:4e:fc:d3:d5:c7:55:93:37:9e:b7:65:ad:a0:
7a:1a:7f:20:11:b1:b3:18:95:ab:b0:8b:d3:89:08:
96:7a:42:bb:1f:e2:18:e8:9c:51:c6:37:30:fb:70:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A8:76:5F:50:69:08:0F:E6:2B:EC:42:40:7F:5E:25:25:65:8C:EA
X509v3 Authority Key Identifier:
keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:33:52:dc:2d:49:3c:38:7a:d5:4c:7f:dd:9a:8e:0c:0b:2a:
13:d9:ee:65:0b:38:67:4b:53:00:3c:0a:66:0f:ec:6f:e2:cc:
16:30:9e:07:02:63:54:c5:63:33:f9:ed:b3:81:90:e5:97:4a:
e0:93:9f:39:7d:1c:5b:70:77:72:79:77:34:4e:e7:d2:7c:ea:
65:83:0c:d8:33:78:23:7b:fb:70:c4:17:73:c1:82:e1:32:f6:
e3:b8:0a:31:6f:fc:b5:c8:95:83:e7:2a:04:f3:3b:8b:08:8b:
64:f4:ff:d4:b1:6a:83:21:91:49:61:cd:22:78:9d:c7:63:9d:
23:c3:d7:96:9b:ec:ae:9c:e7:7a:4d:b6:dc:7f:b0:a2:13:fc:
5c:39:d9:99:d7:a9:63:69:e1:e7:6f:60:0f:47:82:b4:1e:37:
d8:b6:2a:c5:7d:29:53:40:46:6f:20:05:f8:a6:9f:d4:ea:dc:
56:41:cf:80:3d:53:00:79:54:d3:8d:fe:85:89:ba:04:ea:4c:
cc:99:13:b9:16:a5:cc:76:ad:76:68:fc:c0:95:6c:6a:2e:11:
b6:63:98:40:31:d1:96:4c:aa:14:ad:31:a4:61:d5:9e:d6:f9:
63:36:bc:5b:b3:fc:85:18:13:1e:90:7e:35:ba:4a:b9:2b:83:
7f:37:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:39:47 2026 by rpki-client