
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
File: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft (raw, json)
Hash identifier: qXs6OVQ4P6QGtEJ15XFfAoUmadtUvR0QRCRlMn/BMlE=
Subject key identifier: 1B:3D:13:1C:31:F1:13:82:B9:E5:F9:E6:BB:46:C0:55:62:1E:67:AA
Authority key identifier: 02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
Certificate issuer: /CN=A91FC3D0/serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
Manifest number: 4B
Signing time: Wed 23 Sep 2026 08:13:39 +0000
Manifest this update: Wed 23 Sep 2026 08:13:39 +0000
Manifest next update: Wed 30 Sep 2026 08:13:39 +0000
Files and hashes: 1: Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl (hash: RTyg5eFVYEI9KOp/N/J/6CebLZisnGf7vvxRv5w5PVs=)
2: 653B4FA87EAA11F1B173303066A30FBC.roa (hash: EFkhWXtgulJBn3A7ClQDPUCqLh2IZisKv33Z5xFDjxE=)
3: 65D380F27EAA11F1B173303066A30FBC.roa (hash: 5gfdpSY7JYQ5F3wG8OEDwn4p3/ZZWjHNEFO05arQYNo=)
4: 64B446CA7EAA11F1B173303066A30FBC.roa (hash: tb/s6gLIXaYTsezXokt2OrwPKppQtIENbSawKe+uw8Y=)
5: 763DF47E5F3611F192539E378047A888.roa (hash: Q5As8jeHYqHhZ7fSSmextS8z5wVQANqrRtBT9kjNokg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl
rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC3D0, serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Validity
Not Before: Sep 23 08:13:39 2026 GMT
Not After : Sep 30 08:13:39 2026 GMT
Subject: CN=6ab38a33-c0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:fd:4c:53:5e:f1:28:7c:e0:40:e6:55:aa:
87:0c:d1:06:a0:b3:7d:c8:26:65:57:ff:47:26:5a:
df:a6:69:f0:f9:e3:4e:ac:31:b1:19:b2:8e:88:25:
19:32:e2:62:fb:8f:95:5b:a4:b7:3b:0e:6d:d5:78:
13:ca:38:be:e1:cc:f6:71:41:6c:cb:ce:db:eb:e2:
87:a3:db:ae:c7:83:0f:61:3a:cd:18:10:c2:f7:22:
b0:8b:c9:eb:82:c8:09:4d:01:fc:bb:00:55:c7:82:
8d:85:2b:43:df:9c:0a:10:d1:2f:50:a8:8e:e3:22:
14:0b:9d:5f:23:c3:e1:ca:c5:df:35:69:07:28:83:
ed:ee:f1:4b:b8:2e:fd:56:e3:bc:64:dc:1b:1f:d3:
ed:3e:93:fa:f3:e5:43:2c:b2:e5:a4:fc:d3:1d:37:
b0:46:83:3c:a0:11:9d:3c:e2:ed:92:05:e0:bd:27:
d5:55:4e:2c:5d:46:54:be:ce:16:31:1e:f2:0c:16:
f3:b6:aa:64:f7:a6:ab:f8:97:e0:1f:5f:c2:9f:4e:
82:df:da:e2:01:24:d3:41:76:11:a7:55:ab:f7:8a:
f1:3e:f3:02:3f:69:df:4e:f0:4f:c6:06:e8:9a:42:
de:4f:74:35:02:be:15:2b:2d:c3:5d:02:f6:8e:ac:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3D:13:1C:31:F1:13:82:B9:E5:F9:E6:BB:46:C0:55:62:1E:67:AA
X509v3 Authority Key Identifier:
keyid:02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d4:08:59:a1:99:d5:ea:2a:0e:45:04:4e:f7:45:e2:d8:d9:
76:e3:88:99:65:c4:5a:af:f6:3e:2a:78:d6:bd:d4:eb:0d:72:
2f:e4:21:29:7c:ca:47:91:74:38:5f:d0:9e:75:ac:6f:d8:9f:
cf:da:f9:f9:4e:29:7d:11:20:54:cc:75:70:05:c3:d6:fb:3b:
0f:f5:b0:13:ac:e3:c6:94:f5:2b:58:33:55:4a:af:8d:f4:db:
3f:8b:09:0f:e5:dd:aa:a7:a3:28:c3:ca:a7:8a:ab:ff:bf:72:
f2:5d:73:a9:43:c4:25:95:a1:7f:45:64:5f:29:48:03:10:cf:
e0:d9:cd:95:69:95:e0:f7:8f:be:db:b5:ce:d9:a4:13:7a:42:
25:20:27:fb:bb:b0:f7:d6:ab:e7:76:18:e6:89:c4:7c:92:b5:
cf:f6:7a:0e:f9:f2:49:4d:57:7c:60:fe:f4:50:7d:45:a0:9b:
33:44:05:83:c8:a6:cc:b9:98:49:63:b5:c4:32:a7:78:de:ee:
51:22:e2:d3:be:a1:82:40:b1:78:e0:33:6c:69:0a:73:a3:84:
05:c2:68:5f:55:8b:5d:14:64:26:dc:69:80:80:63:ff:2f:54:
30:67:c8:32:76:6e:22:ed:40:bd:a7:44:e9:b3:6c:05:be:7a:
5f:c7:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:49 2026 by rpki-client