
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: PFMpCuYa6SW3tf0pJjvtiUUj2q56W8NFlCYdaZJ+yJI=
Subject key identifier: 76:60:99:9A:80:08:5D:B1:59:FB:E3:F8:2B:23:5C:61:27:E7:D3:DF
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 0639
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 05FF
Signing time: Sat 14 Nov 2026 18:41:30 +0000
Manifest this update: Sat 14 Nov 2026 18:41:29 +0000
Manifest next update: Sat 21 Nov 2026 18:41:29 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: POx7wZu+asntMW96MWxbvGYmWgKlgjwLH9tuT3iAow0=)
2: FE0A6842E05A11F19EF102A52366CEF9.roa (hash: Gg6bQINnRA7e9DqhwRMpmq3yVjp2C1HeDA0qVqj/AFg=)
3: 10F4AD9C81DC11F1A817832770A30FBC.roa (hash: MovtHAK/PsupbFCkYS7og2K1pP0+N2V4b/xbXPJc89s=)
4: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: LLTLXt6xDjIK6bwOGJSxN6DvTteHHSfn+cjpk7hZfWk=)
5: 965D3418DBEB11F1BE36954A0C66CEF9.roa (hash: II7No6oa6U1DHw6B5kxKfx8PdjTcZksnUY0zAKdBvMQ=)
6: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: R/DzMjbYB54y2rkjmUsgsoLgRWXNAeACRn32JhxPtuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Nov 14 18:41:29 2026 GMT
Not After : Nov 21 18:41:29 2026 GMT
Subject: CN=6af8ab5a-3566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:57:a7:7f:fb:24:a6:62:10:e7:c5:1d:d6:
df:af:e7:e0:16:54:44:3a:73:7a:12:4c:70:ab:21:
50:9a:4a:9c:37:ae:80:18:f6:55:31:9c:df:19:d6:
c7:10:c1:5e:24:02:c7:d0:7a:16:5c:b7:85:73:e6:
e6:1b:07:d1:a6:e9:8d:79:6c:53:02:6a:32:1a:34:
eb:1d:5c:27:b4:0d:ed:15:76:d4:37:9c:d5:c9:ef:
5a:c0:1b:4a:a2:b3:da:e4:8f:09:f0:79:d3:dd:a3:
01:eb:65:ed:41:f0:01:a3:79:80:f9:92:c6:86:bb:
2f:db:ab:0c:ed:ee:b2:32:12:57:cb:53:b5:ef:2f:
15:8d:92:75:c6:27:5c:2f:d7:1c:15:f0:1a:eb:2f:
f0:25:33:59:b1:4a:b3:dd:cb:e3:53:12:29:a2:ed:
b3:52:f0:3c:87:ac:8e:4d:09:0c:01:b7:cd:5c:fe:
b7:b8:b8:54:9e:34:46:69:8e:86:b6:2b:c3:99:ee:
68:25:ec:f4:5d:82:d6:e2:1f:01:9c:37:ad:a6:ab:
65:a3:4e:5c:51:5e:0b:a2:e9:30:89:dd:f3:63:7d:
65:92:66:b8:98:83:8c:39:76:70:d7:90:b8:93:8c:
74:18:9b:3d:e3:44:10:ce:1e:30:9c:cd:b3:cc:46:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:60:99:9A:80:08:5D:B1:59:FB:E3:F8:2B:23:5C:61:27:E7:D3:DF
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:d6:0a:37:5b:48:52:07:ae:b1:00:a7:84:18:96:a5:62:19:
1b:9c:8e:08:90:67:f0:fd:5c:7d:9a:ee:76:81:21:90:ab:2d:
be:8b:5e:e9:d3:da:93:cc:d0:fb:03:f6:08:2a:6c:3a:a6:8a:
d9:f8:9e:27:26:1b:07:2d:ca:d0:e1:98:c4:8a:a2:45:bf:9d:
c2:08:aa:3a:94:63:f7:dd:fc:a7:30:ba:bb:06:a5:cb:5b:d5:
99:f3:57:98:da:3f:6c:f3:8c:45:c3:73:c5:3c:cd:2e:d7:59:
7f:d5:e2:6b:54:d7:bb:7b:86:33:a2:87:26:c6:b0:60:d9:e1:
d8:b6:2a:42:e7:c5:fa:8d:3a:c6:11:9d:83:c1:2b:70:41:a5:
08:ba:d8:e6:15:a0:24:0c:bb:6a:21:b8:cf:73:f3:a7:7f:b1:
2a:aa:c8:c8:e4:1b:3c:c8:6d:a0:00:3c:70:53:f6:f3:9b:fb:
75:f7:af:17:92:c5:e9:7b:31:81:1f:56:0d:97:19:59:fe:75:
17:bc:b0:31:de:71:2d:96:e6:cc:d7:82:0e:c0:0b:77:fc:d7:
fd:66:92:01:16:b9:61:3b:f3:50:8c:70:d3:67:fc:b2:a2:0d:
6d:a5:69:aa:b8:d9:4d:77:82:fa:48:8e:51:93:de:25:a1:bf:
13:a9:d6:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjYxMTE0MTg0MTI5WhcNMjYxMTIxMTg0MTI5WjAYMRYwFAYD
VQQDEw02YWY4YWI1YS0zNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+xXp3/7JKZiEOfFHdbfr+fgFlREOnN6EkxwqyFQmkqcN66AGPZVMZzfGdbH
EMFeJALH0HoWXLeFc+bmGwfRpumNeWxTAmoyGjTrHVwntA3tFXbUN5zVye9awBtK
orPa5I8J8HnT3aMB62XtQfABo3mA+ZLGhrsv26sM7e6yMhJXy1O17y8VjZJ1xidc
L9ccFfAa6y/wJTNZsUqz3cvjUxIpou2zUvA8h6yOTQkMAbfNXP63uLhUnjRGaY6G
tivDme5oJez0XYLW4h8BnDetpqtlo05cUV4Loukwid3zY31lkma4mIOMOXZw15C4
k4x0GJs940QQzh4wnM2zzEYMewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZgmZqA
CF2xWfvj+CsjXGEn59PfMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0
VTVaNURLY3lQVG9KQnY3WUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM9YKN1tIUgeusQCnhBiWpWIZG5yOCJBn8P1cfZrudoEhkKstvote6dPak8zQ
+wP2CCpsOqaK2fieJyYbBy3K0OGYxIqiRb+dwgiqOpRj9938pzC6uwaly1vVmfNX
mNo/bPOMRcNzxTzNLtdZf9Xia1TXu3uGM6KHJsawYNnh2LYqQufF+o06xhGdg8Er
cEGlCLrY5hWgJAy7aiG4z3Pzp3+xKqrIyOQbPMhtoAA8cFP285v7dfevF5LF6Xsx
gR9WDZcZWf51F7ywMd5xLZbmzNeCDsALd/zX/WaSARa5YTvzUIxw02f8sqINbaVp
qrjZTXeC+kiOUZPeJaG/E6nW6g==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:42:26 2026 by rpki-client