
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
File: 0nYmctKXWA5IQijBceWokHMMF28.mft (raw, json)
Hash identifier: ehGvsGU1gsEwE0AqKVZLzOssek5qYJTDiJL4VqvrlFc=
Subject key identifier: 52:98:9E:0E:86:0D:6F:1C:40:6C:10:F2:C7:51:20:B2:47:10:89:CF
Authority key identifier: D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
Certificate issuer: /CN=A91724A6/serialNumber=D2762672D297580E484228C171E5A890730C176F
Certificate serial: 02A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
Manifest number: 029A
Signing time: Wed 23 Sep 2026 04:09:11 +0000
Manifest this update: Wed 23 Sep 2026 04:09:11 +0000
Manifest next update: Wed 30 Sep 2026 04:09:11 +0000
Files and hashes: 1: 0nYmctKXWA5IQijBceWokHMMF28.crl (hash: KWpetP8WKbT7MoG0ksxJLxxCoKPPvlupkHczNxPDCxs=)
2: 950A55CCC3C711ED8419AA64C4F9AE02.roa (hash: rlJpxeuz4XfDgn5OftJBgDHyUQdmKKYiwzNQtX6KD/A=)
3: Iq213V9poNmimnDJaewA0A7kP2M.asa (hash: 3aVxmTVaoGjTC2fTJCHZyqpyJ2TocfCD5A8GhTzQspY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl
rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91724A6, serialNumber=D2762672D297580E484228C171E5A890730C176F
Validity
Not Before: Sep 23 04:09:11 2026 GMT
Not After : Sep 30 04:09:11 2026 GMT
Subject: CN=6ab350e7-a988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:60:b5:fd:ed:13:48:76:af:df:00:5d:b3:
f0:a0:c2:36:01:47:8e:37:8f:de:b0:b3:be:31:70:
21:d8:4a:5e:ae:d2:b3:94:02:52:98:0a:ae:9d:95:
39:20:20:81:22:0e:2c:17:b3:6c:08:9f:b8:02:50:
ef:d1:ad:1b:82:52:1f:3c:e7:23:de:4d:b4:20:97:
58:81:f0:3c:39:1b:15:0d:95:2a:3d:2f:46:c7:4e:
c4:0d:2d:b9:e7:9e:35:58:6d:17:ff:d1:b5:b3:2a:
22:53:dc:0c:a1:77:d5:be:f1:36:6e:b1:81:fe:8c:
d7:46:4e:09:81:ee:ba:f8:cf:fc:fa:d4:5b:f3:bb:
70:a4:7f:cc:df:e5:de:0c:ca:f6:2b:11:92:75:dc:
73:f9:83:93:74:8e:12:8c:b7:fd:3e:94:54:ed:f1:
8f:d0:09:e1:37:c3:1c:c8:08:c2:f1:07:aa:f8:c9:
24:33:1c:73:2a:50:9c:08:9c:f9:e7:c0:20:f6:c9:
4a:a4:f8:55:94:e7:b5:97:45:b9:3a:b7:66:8a:5b:
6c:81:24:d0:ba:a1:03:e2:44:90:b2:c5:22:f9:5c:
17:f3:ee:c1:cd:95:1b:42:35:f8:9d:c1:7f:7b:a2:
60:2c:56:8e:af:16:07:40:14:38:e0:5e:57:bd:ba:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:9E:0E:86:0D:6F:1C:40:6C:10:F2:C7:51:20:B2:47:10:89:CF
X509v3 Authority Key Identifier:
keyid:D2:76:26:72:D2:97:58:0E:48:42:28:C1:71:E5:A8:90:73:0C:17:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0nYmctKXWA5IQijBceWokHMMF28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91724A6/18E5D484C3C311EDAA5ACB47C4F9AE02/0nYmctKXWA5IQijBceWokHMMF28.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:48:bf:23:d7:a6:88:55:97:36:3d:09:09:37:71:a4:7b:17:
50:fd:d1:e5:f1:5a:af:43:8c:21:fd:5f:18:c3:04:07:a7:8f:
85:d9:13:aa:0b:af:14:97:e5:35:32:2c:58:2c:de:8d:30:93:
36:89:f3:08:76:1c:4d:e0:b6:56:de:f5:a6:38:ce:c5:84:9a:
36:4d:3b:20:29:f0:97:1f:e3:99:a3:29:bd:47:32:fa:f0:e3:
99:d2:4b:2e:92:eb:01:42:3b:ae:a3:9e:85:59:7a:b4:80:38:
98:75:2e:7f:e9:06:4f:c2:ce:ed:dc:aa:98:4f:95:ef:04:17:
ce:18:27:98:60:4f:3a:e7:e3:d8:eb:ff:29:20:9d:d0:6d:1c:
e0:17:6a:e8:4b:a4:df:e8:99:ab:7d:76:5f:83:58:ef:74:0d:
ca:91:07:00:8c:60:7a:ac:b5:11:e0:ab:ad:39:f9:6e:7e:2f:
8f:8d:89:98:e7:06:7c:f2:e4:30:ca:8a:1d:cb:ea:4e:35:d4:
7f:6b:ac:86:10:ab:a2:14:fb:91:91:6d:46:fa:7e:65:0f:9d:
b9:37:c7:05:a7:e2:fe:60:8c:2d:71:7d:b5:64:68:40:bb:f5:
2e:15:df:0d:f5:7a:75:25:09:a7:12:d2:a5:d0:5f:24:bd:1c:
23:ee:4d:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI0QTYxMTAvBgNVBAUTKEQyNzYyNjcyRDI5NzU4MEU0ODQyMjhDMTcxRTVBODkw
NzMwQzE3NkYwHhcNMjYwOTIzMDQwOTExWhcNMjYwOTMwMDQwOTExWjAYMRYwFAYD
VQQDEw02YWIzNTBlNy1hOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Xhgtf3tE0h2r98AXbPwoMI2AUeON4/esLO+MXAh2EpertKzlAJSmAqunZU5
ICCBIg4sF7NsCJ+4AlDv0a0bglIfPOcj3k20IJdYgfA8ORsVDZUqPS9Gx07EDS25
5541WG0X/9G1syoiU9wMoXfVvvE2brGB/ozXRk4Jge66+M/8+tRb87twpH/M3+Xe
DMr2KxGSddxz+YOTdI4SjLf9PpRU7fGP0AnhN8McyAjC8Qeq+MkkMxxzKlCcCJz5
58Ag9slKpPhVlOe1l0W5OrdmiltsgSTQuqED4kSQssUi+VwX8+7BzZUbQjX4ncF/
e6JgLFaOrxYHQBQ44F5XvbqI5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKYng6G
DW8cQGwQ8sdRILJHEInPMB8GA1UdIwQYMBaAFNJ2JnLSl1gOSEIowXHlqJBzDBdv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjRBNi8xOEU1RDQ4NEMz
QzMxMUVEQUE1QUNCNDdDNEY5QUUwMi8wblltY3RLWFdBNUlRaWpCY2VXb2tITU1G
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBuWW1jdEtYV0E1SVFpakJjZVdva0hNTUYyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjRBNi8xOEU1RDQ4NEMzQzMxMUVEQUE1QUNCNDdDNEY5QUUwMi8wblltY3RLWFdB
NUlRaWpCY2VXb2tITU1GMjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADki/I9emiFWXNj0JCTdxpHsXUP3R5fFar0OMIf1fGMMEB6ePhdkTqguvFJfl
NTIsWCzejTCTNonzCHYcTeC2Vt71pjjOxYSaNk07ICnwlx/jmaMpvUcy+vDjmdJL
LpLrAUI7rqOehVl6tIA4mHUuf+kGT8LO7dyqmE+V7wQXzhgnmGBPOufj2Ov/KSCd
0G0c4Bdq6Euk3+iZq312X4NY73QNypEHAIxgeqy1EeCrrTn5bn4vj42JmOcGfPLk
MMqKHcvqTjXUf2ushhCrohT7kZFtRvp+ZQ+duTfHBafi/mCMLXF9tWRoQLv1LhXf
DfV6dSUJpxLSpdBfJL0cI+5NxA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:04:20 2026 by rpki-client