
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File: 53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier: somfFhhq2BQoLATArO5ItqxY8XHSROckaVCtM0ItDBc=
Subject key identifier: F7:6C:83:DD:D7:AC:F1:D8:A4:0B:41:DC:CA:2A:29:E5:A2:EF:63:C7
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer: /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial: 02A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number: 0294
Signing time: Sun 15 Nov 2026 01:52:07 +0000
Manifest this update: Sun 15 Nov 2026 01:52:06 +0000
Manifest next update: Sun 22 Nov 2026 01:52:06 +0000
Files and hashes: 1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: 5eX1YeCL6GINUh6YwXR/nOLysMufqNnPSRIST0YksOQ=)
2: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: NdG+EESk6AxDfSsv+CEMSa3ytYfunyOHRDzMUr7MG1A=)
3: F3210638F06D11ED9055A212C4F9AE02.roa (hash: h5xh1R0tEre7HmC/xYO8AoJTBuo2TI6B3de4UegYPas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Validity
Not Before: Nov 15 01:52:06 2026 GMT
Not After : Nov 22 01:52:06 2026 GMT
Subject: CN=6af91047-53bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:7b:69:e7:8d:39:30:e2:97:62:ac:a2:6f:
3d:e3:6b:ee:4b:02:54:d1:cf:64:ac:5b:7a:91:52:
1f:b3:9a:04:50:6d:a0:22:75:c1:84:d9:58:09:af:
1c:01:97:de:2a:da:06:73:7e:03:0d:8b:19:5e:c8:
03:d0:56:42:b3:23:9c:75:0f:84:34:66:f5:59:c0:
74:3c:33:1e:41:28:b0:74:1e:c4:a4:da:67:c8:5a:
d6:c5:44:46:7c:90:9d:95:7b:6a:26:84:e5:ea:b7:
ac:ef:c1:fb:bc:9d:f7:97:3a:bd:86:89:9e:b9:58:
f1:69:cf:92:e8:63:29:c3:a9:ab:cf:8d:36:65:9c:
44:a4:d7:3c:80:61:3b:2d:95:23:8a:fb:0f:3b:e8:
7e:f7:4d:3c:f6:d2:bd:e6:c9:56:de:3b:0f:37:31:
d0:e9:40:8f:72:ef:14:f0:f9:90:cf:cf:e8:ec:2d:
43:18:3e:5d:33:aa:e0:d0:1d:84:93:12:72:71:50:
01:46:6f:18:3a:64:74:9c:68:58:07:40:83:13:09:
83:a7:dd:91:b8:45:7a:e4:c3:86:2f:a5:cb:13:3e:
d8:93:ac:68:55:ae:ce:6c:b3:ec:b4:8b:9c:16:23:
31:ca:e7:8f:f7:7f:0d:b3:27:f1:b6:19:47:cc:81:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:83:DD:D7:AC:F1:D8:A4:0B:41:DC:CA:2A:29:E5:A2:EF:63:C7
X509v3 Authority Key Identifier:
keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b2:f7:43:f7:a6:72:fc:af:ce:32:7e:d4:00:36:e4:ba:93:
11:b1:49:5b:a6:49:e6:13:42:d6:61:06:83:81:6d:dd:9d:0c:
51:c4:56:f0:d5:7d:e3:c7:ef:2d:b1:fd:ad:72:82:76:5c:b3:
24:5d:94:44:35:6e:4a:03:d2:be:12:90:33:f0:4d:60:87:aa:
1d:cb:b4:2a:33:5b:e9:2c:df:68:03:99:cc:f5:77:b8:3b:3f:
ba:66:6e:4c:0f:9b:38:06:4a:11:8c:8b:5d:ee:68:fd:f3:38:
c1:85:14:ac:3f:5b:0a:87:35:f8:32:a0:37:ac:1d:6f:de:2a:
b9:a1:f8:66:bd:75:c6:2e:1e:56:a5:df:91:e2:03:be:6c:f2:
fc:da:96:d6:9a:a6:05:97:77:82:8b:ca:59:13:98:ce:2b:09:
6a:36:08:3c:70:4a:61:15:60:72:74:e4:db:6b:e7:9e:94:ed:
78:d6:2d:71:19:7e:03:7d:83:a7:91:74:45:17:e4:06:f3:5e:
c0:52:8e:e3:d2:da:95:3b:00:54:de:ec:bb:3a:9e:5d:c8:b4:
b3:2a:36:b9:74:4b:22:e4:14:9b:dd:91:71:6c:89:02:77:39:
fb:08:46:dd:55:c9:47:a5:c6:47:9f:e3:8a:cd:9c:6f:5f:67:
c6:c6:a0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:13:48 2026 by rpki-client