
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
File: i0hqzK8SpnqVaI6NEb1ljAQcElo.mft (raw, json)
Hash identifier: ZvuQaGM6G7FCXpemVjGULa91dyEOKdGbGUMPRAv3pk4=
Subject key identifier: 3A:06:D9:34:94:DD:4D:1C:A8:F7:CB:BC:25:E1:F7:BF:43:E1:B2:D2
Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
Manifest number: 0181
Signing time: Sun 27 Sep 2026 05:05:06 +0000
Manifest this update: Sun 27 Sep 2026 05:05:05 +0000
Manifest next update: Sun 04 Oct 2026 05:05:05 +0000
Files and hashes: 1: i0hqzK8SpnqVaI6NEb1ljAQcElo.crl (hash: CoH8i+cSTnOfkBLI2T/OqoI9dtq5Wr4/rgwAYWV3gyI=)
2: F305F43270E711EF8573CF71C4F9AE02.roa (hash: /pgTpJCeELO0vx7ey0ylXFhJZdDNJrts1Zcttp5czrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B, serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Validity
Not Before: Sep 27 05:05:05 2026 GMT
Not After : Oct 4 05:05:05 2026 GMT
Subject: CN=6ab8a402-936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:c6:c1:16:7a:5c:0d:9e:62:a1:0c:ff:06:
f3:93:b7:9e:b7:a3:3b:aa:de:35:9a:34:3d:32:b4:
d0:65:09:81:bc:b2:1a:46:11:81:1f:1b:23:28:dc:
1a:7e:e8:92:bd:2a:d0:2e:fd:2f:26:96:bb:e5:29:
41:6c:19:da:45:fa:9a:42:5f:10:e8:74:73:12:c7:
12:c1:09:11:be:73:eb:19:7b:b3:ec:1f:aa:aa:0c:
71:03:d5:78:bb:d3:92:3a:03:e6:77:07:25:ee:f1:
a9:2b:32:9f:d5:14:fd:aa:70:d1:62:74:11:86:65:
a7:35:25:ea:ea:6b:d5:24:a4:71:82:27:65:44:a2:
de:5a:7a:1e:e6:38:ce:18:72:aa:1c:a3:61:10:c8:
18:87:da:40:ed:0c:ab:37:17:cb:d6:b4:db:cf:6e:
f8:f6:df:23:3e:1a:c7:3d:15:8c:16:a4:40:1a:31:
a3:8c:0d:3c:21:f9:7e:6d:35:36:38:2c:98:f6:d8:
6c:61:31:69:ec:fb:39:2b:76:58:4a:03:04:5b:91:
97:84:d0:84:62:ad:bb:40:ac:5d:23:4d:58:4c:bf:
0a:47:94:03:31:a3:dd:4f:c3:c4:62:c7:d2:9e:50:
7c:c1:77:e2:04:7c:bb:fb:e8:0d:01:d7:75:3d:d7:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:D9:34:94:DD:4D:1C:A8:F7:CB:BC:25:E1:F7:BF:43:E1:B2:D2
X509v3 Authority Key Identifier:
keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:19:69:fb:22:59:e4:8b:fb:4e:a2:77:38:dd:64:19:f8:
ff:f8:d0:69:31:57:23:f3:64:c6:ea:24:0a:08:90:3a:38:89:
3f:82:98:17:db:5c:16:91:60:6b:94:a9:10:6b:20:21:cd:21:
8d:1e:f3:59:f1:e6:74:84:21:fc:65:5c:58:f6:72:4d:a9:f5:
e5:7f:cf:74:ea:e7:f6:c5:da:e3:f8:66:36:84:ed:82:e6:2c:
31:e6:2b:e0:81:5e:1a:24:d8:01:7d:b9:7d:b7:c9:02:5f:36:
8c:a2:e1:79:9f:d4:e7:41:d1:c7:1a:b8:db:cf:60:57:55:6e:
44:00:e2:26:cd:a0:a4:4b:e9:d6:af:6a:81:46:58:78:17:f0:
06:74:7f:b8:3e:77:8c:41:53:97:2e:b7:49:1c:b8:26:7d:61:
1f:b7:21:da:39:84:a8:89:48:d8:26:86:20:71:07:fa:c3:95:
9e:5d:11:e2:14:5b:3d:90:8a:f2:0b:04:48:25:a0:64:a7:65:
3e:96:d0:d4:2e:d0:9d:fc:52:84:1b:0f:df:1e:7a:7f:fd:58:
df:4e:a9:f8:84:71:59:f3:71:f7:d7:66:90:c4:4a:8e:9f:6f:
ae:fc:a6:99:7d:a6:2d:fa:f1:8b:3a:03:1f:18:6f:42:a0:0c:
7a:f8:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:02:56 2026 by rpki-client