
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier: biTa/1P+2isM9jGqCWysGKJsanOBUiH+ukgijD5rHrQ=
Subject key identifier: 66:0D:C8:CC:DF:74:E2:90:57:32:6F:3E:B8:47:E1:F5:8C:86:59:3D
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial: 04BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number: 04A4
Signing time: Thu 24 Sep 2026 23:46:37 +0000
Manifest this update: Thu 24 Sep 2026 23:46:37 +0000
Manifest next update: Thu 01 Oct 2026 23:46:37 +0000
Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: 1zlSioknDS+FBMrIirLu+NvblPkP3rXi1E5OzUa8Gt4=)
2: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=)
3: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=)
4: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Validity
Not Before: Sep 24 23:46:37 2026 GMT
Not After : Oct 1 23:46:37 2026 GMT
Subject: CN=6ab5b65d-c052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:da:02:bb:55:ea:d2:72:56:2a:ee:63:bc:
e7:64:4a:a0:88:37:c8:dd:5c:89:12:1b:be:2e:9d:
dc:29:1b:db:0f:b9:f8:62:a7:cd:0b:75:6b:f7:f9:
08:3f:e8:b3:35:26:90:b0:f7:01:86:ea:39:e6:89:
77:72:c6:4d:58:df:15:f5:27:fe:7e:46:f5:39:19:
3c:25:20:b0:5a:97:66:a6:72:c1:cf:44:0a:d2:33:
a8:00:4b:a1:98:e9:3a:30:6b:1b:e2:1c:f3:30:91:
f8:51:fc:b9:81:c4:e6:91:59:f5:c1:b0:c5:7b:c3:
52:01:cb:57:df:17:15:6c:65:58:3f:3e:8a:b6:a4:
65:7b:82:9a:15:4c:bd:eb:f9:87:30:a1:b0:fd:db:
92:31:20:22:e8:4e:95:5b:b8:45:dc:44:d5:2a:6b:
89:6a:94:d9:23:9a:cf:d7:0e:bc:a7:7a:45:14:f0:
77:cc:56:2a:04:18:39:bf:a5:da:a8:81:89:c1:d1:
84:dd:28:2d:35:6b:d6:84:12:f9:b2:26:fe:d1:d3:
c3:2f:be:b7:29:e5:1d:5e:a1:91:bc:b3:3f:bb:d1:
db:6a:41:89:54:66:ce:a0:4a:97:e8:92:f6:f8:12:
56:1a:ef:2c:2a:ac:71:21:f2:1b:25:5d:de:87:15:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:C8:CC:DF:74:E2:90:57:32:6F:3E:B8:47:E1:F5:8C:86:59:3D
X509v3 Authority Key Identifier:
keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:49:89:6c:89:af:81:09:f2:37:f7:be:6b:20:6e:81:24:c9:
f2:5c:a0:51:64:3a:9a:ef:ed:c9:a8:4a:20:6a:be:d4:fb:67:
5c:cb:95:f3:6a:23:bf:e3:ae:a2:3d:fb:77:42:02:41:f4:d1:
78:ad:0e:74:54:26:99:19:99:9a:b7:58:dc:da:f6:28:49:f5:
01:da:94:4f:2a:e6:b5:4b:97:e1:f4:3c:65:cf:11:49:af:bb:
ba:63:dc:9d:d3:88:cc:b9:d3:c3:de:d1:a4:aa:92:fd:14:02:
b6:4e:22:01:65:ef:26:46:4b:89:57:01:92:11:86:d6:a4:01:
0f:da:3d:8a:34:4f:7b:a1:b2:6e:cd:5e:ee:50:9c:46:c4:c8:
e5:ac:e9:6f:ea:fd:a0:02:22:37:47:f1:85:21:80:4b:42:c1:
5e:1c:7e:45:0c:d7:a3:ff:38:6a:10:60:bd:28:c3:d3:6f:d5:
b5:8d:09:32:33:f9:b3:19:7c:cf:c9:39:10:b9:7e:ae:b7:4f:
c2:6e:46:c1:ad:d9:1c:99:c0:cd:99:5c:2c:0b:54:ad:42:b1:
a1:56:aa:ef:5c:c0:44:6c:6a:a7:b6:37:d9:29:44:1a:18:23:
38:5c:04:b9:71:0a:69:7e:93:7c:90:e1:16:99:13:6d:91:1a:
a7:90:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:22:18 2026 by rpki-client