
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
File: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft (raw, json)
Hash identifier: ojjwipjsiMIVxWR0EW63od4/EOIi+KMa5npzaBp96FE=
Subject key identifier: 54:82:31:4C:E9:20:49:14:05:B9:58:49:01:08:1D:B2:D2:E6:F5:77
Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Certificate serial: 06E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
Manifest number: 06D1
Signing time: Sat 26 Sep 2026 22:22:55 +0000
Manifest this update: Sat 26 Sep 2026 22:22:54 +0000
Manifest next update: Sat 03 Oct 2026 22:22:54 +0000
Files and hashes: 1: tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl (hash: bhLWIREfLk81bYrDQZN5dI544VBdYERixivyEuGbEvQ=)
2: B3DED5C6BAC911EB8533B615C4F9AE02.roa (hash: +nAEEuzzAHJ64g2Y+I53w9dhyFuYT2+b3syIj71QLeM=)
3: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (hash: TMOTzC8LyMJLZtdqx4wEZX0fEZReW/QgdhjNImxkGuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 22:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C95, serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C
Validity
Not Before: Sep 26 22:22:54 2026 GMT
Not After : Oct 3 22:22:54 2026 GMT
Subject: CN=6ab845be-da34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:8e:8f:1c:1a:2f:76:91:e9:74:f4:f1:d8:
ad:bc:c1:25:70:ea:88:8f:6b:3c:a3:a8:96:d5:17:
2d:89:9b:aa:96:59:cb:7f:12:db:7c:16:d2:25:c2:
80:90:ce:7a:b8:66:a1:be:fd:1a:21:8b:61:7c:14:
15:1e:8e:0f:e4:3e:51:4c:2c:08:ec:64:07:02:aa:
dd:4a:0f:32:9a:e2:86:db:06:df:d1:6c:a6:97:c9:
e2:8d:a8:cd:55:81:82:a1:22:33:af:34:89:02:56:
ce:d6:70:3e:24:4a:95:56:01:8f:1f:6e:00:c2:d6:
ef:e3:36:4c:82:48:9a:c6:df:d2:f8:37:90:88:bf:
73:bb:c3:2a:07:5c:0b:86:42:57:15:cc:40:4f:06:
04:10:22:2a:6f:9f:1a:f0:e0:41:46:a2:fe:82:66:
c7:5e:cc:80:31:4c:f1:9b:2f:5f:11:35:c0:10:b1:
ed:ac:d0:2f:ba:95:74:cf:2d:0e:77:92:b3:8b:5f:
c9:4e:b2:e9:80:07:46:02:f2:41:dd:a2:33:3e:0e:
a3:ed:34:e5:7a:31:88:96:5d:cd:01:1b:70:ed:49:
5c:6b:7c:be:57:6d:e4:52:09:e0:67:cd:a2:5f:46:
f9:08:5f:b4:9d:fc:f1:8e:b8:b4:a2:18:8f:0b:54:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:82:31:4C:E9:20:49:14:05:B9:58:49:01:08:1D:B2:D2:E6:F5:77
X509v3 Authority Key Identifier:
keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8f:f1:0d:1d:b1:be:9a:06:b6:f2:45:ff:83:aa:92:aa:0c:
e2:88:df:14:da:de:27:97:11:0e:bd:d8:d7:58:dc:c5:cf:97:
3c:d5:fc:c1:b2:d6:16:54:f4:f4:a1:fc:7c:32:fc:7e:35:f1:
f4:cf:6d:0f:7a:57:9f:db:04:6a:d8:2f:a2:d8:aa:08:a5:54:
eb:04:73:3f:bb:f4:6b:ec:52:de:e9:d8:73:89:e9:db:17:a5:
4a:33:83:bd:c4:e0:e4:09:ab:0a:b7:30:df:9a:02:01:96:f7:
5b:92:45:90:b5:50:9f:61:c7:5f:8d:f9:9f:17:a1:de:71:5d:
89:f7:af:9f:83:f9:71:b5:be:e2:de:3b:41:bc:a6:f8:90:f0:
2a:98:12:bc:2b:f8:66:24:d8:ad:84:9a:fc:a3:70:e2:2e:65:
42:57:6e:31:e3:d9:1b:ce:31:72:82:db:7e:13:c9:1f:10:24:
76:f4:4b:5e:f8:8e:48:9d:71:ae:32:f0:78:99:19:8d:1a:f8:
0d:e7:b2:de:22:db:f5:92:6f:9e:c2:0f:fe:6c:ab:e7:c4:55:
89:28:09:bc:f6:f6:f1:83:d3:3e:31:32:14:02:4a:51:e2:14:
12:ee:ee:59:1f:9f:94:16:69:81:1e:cb:8b:ba:4f:bb:77:10:
9c:3d:06:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBDOTUxMTAvBgNVBAUTKEI0OEU0MDczQjgxMEJDRjlDNzk0ODE5QzgwRkRFNzFE
NTNGMkRFMkMwHhcNMjYwOTI2MjIyMjU0WhcNMjYxMDAzMjIyMjU0WjAYMRYwFAYD
VQQDEw02YWI4NDViZS1kYTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovWOjxwaL3aR6XT08ditvMElcOqIj2s8o6iW1RctiZuqllnLfxLbfBbSJcKA
kM56uGahvv0aIYthfBQVHo4P5D5RTCwI7GQHAqrdSg8ymuKG2wbf0Wyml8nijajN
VYGCoSIzrzSJAlbO1nA+JEqVVgGPH24Awtbv4zZMgkiaxt/S+DeQiL9zu8MqB1wL
hkJXFcxATwYEECIqb58a8OBBRqL+gmbHXsyAMUzxmy9fETXAELHtrNAvupV0zy0O
d5Kzi1/JTrLpgAdGAvJB3aIzPg6j7TTlejGIll3NARtw7Ulca3y+V23kUgngZ82i
X0b5CF+0nfzxjri0ohiPC1R9AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSCMUzp
IEkUBblYSQEIHbLS5vV3MB8GA1UdIwQYMBaAFLSOQHO4ELz5x5SBnID95x1T8t4s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5NS9ERTJGRjFGNEJB
QzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQbkhsSUdjZ1AzbkhWUHkz
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RJNUFjN2dRdlBuSGxJR2NnUDNuSFZQeTNpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEM5NS9ERTJGRjFGNEJBQzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQ
bkhsSUdjZ1AzbkhWUHkzaXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT4/xDR2xvpoGtvJF/4OqkqoM4ojfFNreJ5cRDr3Y11jcxc+XPNX8wbLWFlT0
9KH8fDL8fjXx9M9tD3pXn9sEatgvotiqCKVU6wRzP7v0a+xS3unYc4np2xelSjOD
vcTg5AmrCrcw35oCAZb3W5JFkLVQn2HHX435nxeh3nFdifevn4P5cbW+4t47Qbym
+JDwKpgSvCv4ZiTYrYSa/KNw4i5lQlduMePZG84xcoLbfhPJHxAkdvRLXviOSJ1x
rjLweJkZjRr4Deey3iLb9ZJvnsIP/myr58RViSgJvPb28YPTPjEyFAJKUeIUEu7u
WR+flBZpgR7Li7pPu3cQnD0GNA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 19:29:42 2026 by rpki-client