
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: t277ncWbVaXwxeIh2XqDi3/JeKZ3/7DrGfCZN3ronUk=
Subject key identifier: BB:2A:38:E9:B3:14:C6:0E:2C:42:10:DF:BB:E7:2B:58:35:E9:A4:59
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 0616
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 05E0
Signing time: Thu 24 Sep 2026 23:44:48 +0000
Manifest this update: Thu 24 Sep 2026 23:44:47 +0000
Manifest next update: Thu 01 Oct 2026 23:44:47 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: +6JfA2d7mP6w8RU9PuBjfkD6cR0Hb+4OWE/p2h+q0Rg=)
2: 16E5C10AB7F111F1822D02F36C11F970.roa (hash: 5afPUufhSKrGhiG52pdnHdCUnamzHJXlq3Gkc/YW654=)
3: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: LLTLXt6xDjIK6bwOGJSxN6DvTteHHSfn+cjpk7hZfWk=)
4: 10F4AD9C81DC11F1A817832770A30FBC.roa (hash: MovtHAK/PsupbFCkYS7og2K1pP0+N2V4b/xbXPJc89s=)
5: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: R/DzMjbYB54y2rkjmUsgsoLgRWXNAeACRn32JhxPtuw=)
6: B9EECE4CB7F011F1A18F0FCD6C11F970.roa (hash: f5KLUxZEXG3ryqQW3dZ9UJ1LjZ8yLAlRALBSqwsSkfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Sep 24 23:44:47 2026 GMT
Not After : Oct 1 23:44:47 2026 GMT
Subject: CN=6ab5b5f0-ef90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:bf:c2:66:94:c9:40:9f:ac:f0:ab:f1:21:
4b:78:0c:bc:cb:f3:6a:dd:dc:48:83:9a:40:cc:0c:
2e:b0:fd:6c:23:81:e9:35:05:07:64:8d:77:5a:4d:
8c:27:99:ab:dd:34:10:24:d6:f7:eb:7f:0f:58:fb:
73:b4:03:47:bc:64:33:e9:61:a7:77:6d:83:ac:38:
a5:ce:09:30:96:37:b2:07:67:4b:bd:0d:9f:41:3a:
7a:f3:f1:e9:13:61:04:36:5b:d8:f6:4b:7b:78:2f:
c0:74:70:ba:a0:9c:b6:a1:c3:1d:a0:b6:b8:fc:4f:
39:bd:a4:37:a9:ff:fb:1e:99:8e:31:82:bc:d2:ee:
16:ff:21:b8:44:fc:98:01:1d:53:98:c9:e4:f0:70:
19:0e:88:9c:49:be:04:b9:b3:43:39:9a:5f:df:db:
24:f8:53:67:bf:8e:db:cb:44:a6:9d:d8:63:74:a8:
eb:30:3b:b6:e6:3b:75:d1:62:1b:87:58:78:ff:e7:
c6:16:08:9d:2a:99:8b:d6:09:96:e6:8c:63:1c:d9:
5b:9d:f9:89:a2:3e:ea:8a:70:d3:fc:f7:a8:67:3b:
ca:95:50:dc:87:ff:33:90:e0:90:0d:5d:f0:28:ea:
b5:24:0c:f3:d8:63:17:9f:b5:70:fb:73:9b:dc:01:
aa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2A:38:E9:B3:14:C6:0E:2C:42:10:DF:BB:E7:2B:58:35:E9:A4:59
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:9c:d6:b0:c0:5b:70:15:0f:e0:a8:e6:17:c6:24:25:15:d1:
d2:95:98:7a:66:81:f5:74:00:cd:81:11:c4:42:63:3a:61:2a:
49:82:72:c5:b5:ea:16:27:04:6a:45:e7:d2:08:5e:8f:52:85:
33:4c:46:ff:dd:4f:fb:cc:47:83:53:63:19:d7:b6:de:c6:e0:
2b:4f:2b:41:4c:4f:92:ed:13:51:cc:3e:b2:af:42:ad:0c:b9:
3b:d1:76:be:39:ca:b3:d7:c7:d9:28:45:e7:7e:52:82:7a:a2:
8c:82:3c:af:9d:21:d2:5b:b7:36:c5:a8:d3:15:10:93:a4:fb:
3e:85:58:86:97:09:22:c5:90:bc:e2:df:2b:d5:e6:55:9f:63:
f8:16:78:70:46:29:b9:e6:9a:01:f8:40:87:8f:3b:10:44:77:
23:d1:38:c1:17:8a:5f:d0:6b:be:a3:2d:97:49:28:21:ee:42:
83:a6:e3:7d:96:c4:6e:c2:bc:78:9d:69:cc:67:f3:19:1e:bd:
32:d9:2e:da:f0:35:ab:05:2c:98:0d:74:14:cf:e6:0b:c3:a4:
62:ce:c1:66:58:9e:78:b0:94:c9:00:37:12:a2:bf:27:02:6c:
74:98:c9:40:59:33:c3:ba:6e:ee:59:18:b1:14:e9:5b:df:38:
b4:21:a4:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjYwOTI0MjM0NDQ3WhcNMjYxMDAxMjM0NDQ3WjAYMRYwFAYD
VQQDEw02YWI1YjVmMC1lZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEO/wmaUyUCfrPCr8SFLeAy8y/Nq3dxIg5pAzAwusP1sI4HpNQUHZI13Wk2M
J5mr3TQQJNb3638PWPtztANHvGQz6WGnd22DrDilzgkwljeyB2dLvQ2fQTp68/Hp
E2EENlvY9kt7eC/AdHC6oJy2ocMdoLa4/E85vaQ3qf/7HpmOMYK80u4W/yG4RPyY
AR1TmMnk8HAZDoicSb4EubNDOZpf39sk+FNnv47by0SmndhjdKjrMDu25jt10WIb
h1h4/+fGFgidKpmL1gmW5oxjHNlbnfmJoj7qinDT/PeoZzvKlVDch/8zkOCQDV3w
KOq1JAzz2GMXn7Vw+3Ob3AGq1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsqOOmz
FMYOLEIQ37vnK1g16aRZMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0
VTVaNURLY3lQVG9KQnY3WUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeZzWsMBbcBUP4KjmF8YkJRXR0pWYemaB9XQAzYERxEJjOmEqSYJyxbXqFicE
akXn0ghej1KFM0xG/91P+8xHg1NjGde23sbgK08rQUxPku0TUcw+sq9CrQy5O9F2
vjnKs9fH2ShF535SgnqijII8r50h0lu3NsWo0xUQk6T7PoVYhpcJIsWQvOLfK9Xm
VZ9j+BZ4cEYpueaaAfhAh487EER3I9E4wReKX9BrvqMtl0koIe5Cg6bjfZbEbsK8
eJ1pzGfzGR69Mtku2vA1qwUsmA10FM/mC8OkYs7BZlieeLCUyQA3EqK/JwJsdJjJ
QFkzw7pu7lkYsRTpW984tCGkKw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:48:33 2026 by rpki-client