
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
File: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json)
Hash identifier: uIiTJQFmcZOV3cDcV8EuJQpq2VsMmh3w4jFE722stjU=
Subject key identifier: 41:F3:71:73:55:00:42:52:E1:06:0F:E2:A0:18:37:50:80:54:5B:D8
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial: 077E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
Manifest number: 075F
Signing time: Sat 10 Oct 2026 21:50:39 +0000
Manifest this update: Sat 10 Oct 2026 21:50:39 +0000
Manifest next update: Sat 17 Oct 2026 21:50:39 +0000
Files and hashes: 1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: ypVeHbvBJaJQ7kojV19WuQOxXwQMJlG8++gtZPKfpDo=)
2: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: qXGDfI73IfnHMAp4HxrY2CaG3uaWhC+oKVSUMLz1LFQ=)
3: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: 48L080JyJlktjDJm5JUMWcLPjjHEK1WWZAsxDZsWQPg=)
4: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: XoRUOC4UUdsqAWL8b8mRp3Lb8qKoXQVLqNUMMLIx7wI=)
5: 399EDDAA823F11F0895C5843C4F9AE02.roa (hash: n+OBMglPTvErv+P6ZUgv6kKsWJf1PaCgzoYVPi34f1Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Validity
Not Before: Oct 10 21:50:39 2026 GMT
Not After : Oct 17 21:50:39 2026 GMT
Subject: CN=6acab32f-0833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5d:8b:41:79:e4:20:3b:3d:4c:08:75:0a:f1:
a8:35:4a:e7:36:ef:0d:00:4e:7f:4b:17:98:dd:51:
cb:ef:22:7b:cd:c3:7b:c7:9c:da:43:61:4f:e3:45:
20:77:73:da:f7:36:4c:5a:6b:e1:33:6d:9c:ac:cb:
3a:a0:2a:4c:10:e0:f5:49:d8:b9:46:34:eb:a9:6d:
1d:8d:f2:62:07:2f:29:e4:e3:c2:e8:e7:3e:b9:77:
91:ac:d4:39:8f:54:a1:0e:7c:41:92:02:e3:1d:32:
f0:ae:09:49:0b:23:2a:19:e4:a1:33:6d:88:29:20:
e8:61:77:5b:8b:4b:96:44:47:6f:65:69:e5:4f:fe:
4c:b3:64:68:9d:94:4b:92:28:b9:c7:72:5f:83:d5:
78:15:63:85:a4:24:ee:25:35:0b:5a:e3:00:9c:d0:
8f:72:af:42:54:04:9f:c6:9f:55:1b:01:80:9d:6a:
ea:76:a6:9d:30:8d:27:bf:aa:c9:2d:1a:f9:56:1f:
22:18:e2:cb:12:af:ba:87:c8:97:2c:29:2c:e2:c0:
d2:5e:71:33:72:4d:0e:01:e4:ac:65:c2:c9:55:c0:
9a:a3:3e:4e:32:ec:e9:97:e2:c2:28:3e:27:ec:11:
c8:0e:5f:c9:1c:9b:ef:bc:d1:bd:f4:25:25:d1:39:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F3:71:73:55:00:42:52:E1:06:0F:E2:A0:18:37:50:80:54:5B:D8
X509v3 Authority Key Identifier:
keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e2:d7:fa:54:10:ae:3e:00:f8:b7:ed:f9:8c:61:64:73:7e:
1c:d7:5b:db:2c:48:9b:f3:4d:a0:bf:b2:4e:1d:cf:e5:1d:52:
5d:00:31:54:09:ca:0d:1a:43:b9:a6:d7:f9:9e:37:6c:eb:68:
de:e5:d6:22:44:3d:d0:f1:5b:02:19:f9:6b:72:e3:9d:c8:1e:
69:90:c7:af:45:56:b0:21:70:76:a1:1b:d3:68:f1:ea:73:c5:
e9:ef:bb:f1:d6:fe:67:7a:24:b4:dd:55:14:ea:60:68:42:c7:
06:f3:ea:06:b9:2f:47:db:4c:1d:7f:32:05:56:66:88:1d:fc:
6a:ec:ba:f0:0a:a7:6c:f3:be:1e:d2:b4:b7:37:0e:4c:d1:e7:
f3:82:77:cd:99:00:84:40:3b:fb:39:4b:75:89:a9:2f:ac:e9:
c1:1c:ab:25:c7:f8:90:7f:d2:8c:25:21:ff:fb:f6:07:4c:ef:
74:5d:c4:17:2e:c1:a3:6f:d8:f5:1a:2d:10:e4:f5:1f:b0:43:
ee:a8:15:c2:1e:42:3b:ca:db:1c:04:fc:0c:bb:96:bd:58:dc:
7d:31:f5:59:a4:31:f8:d0:65:7f:d6:04:0d:cb:20:85:f9:bb:
49:b6:a7:13:1b:ca:37:60:bf:a6:8a:d7:90:b1:b6:34:3f:25:
21:bc:6a:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0QjcxMTAvBgNVBAUTKEY4OEI5NzQwNEY5REMxMEY1QUFCMDJGNzRFQzQ5MEY5
OEFEMEQzQjAwHhcNMjYxMDEwMjE1MDM5WhcNMjYxMDE3MjE1MDM5WjAYMRYwFAYD
VQQDEw02YWNhYjMyZi0wODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA212LQXnkIDs9TAh1CvGoNUrnNu8NAE5/SxeY3VHL7yJ7zcN7x5zaQ2FP40Ug
d3Pa9zZMWmvhM22crMs6oCpMEOD1Sdi5RjTrqW0djfJiBy8p5OPC6Oc+uXeRrNQ5
j1ShDnxBkgLjHTLwrglJCyMqGeShM22IKSDoYXdbi0uWREdvZWnlT/5Ms2RonZRL
kii5x3Jfg9V4FWOFpCTuJTULWuMAnNCPcq9CVASfxp9VGwGAnWrqdqadMI0nv6rJ
LRr5Vh8iGOLLEq+6h8iXLCks4sDSXnEzck0OAeSsZcLJVcCaoz5OMuzpl+LCKD4n
7BHIDl/JHJvvvNG99CUl0TnT/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHzcXNV
AEJS4QYP4qAYN1CAVFvYMB8GA1UdIwQYMBaAFPiLl0BPncEPWqsC907EkPmK0NOw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTRCNy9FMTgwQ0U3QTg1
MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdROWFxd0wzVHNTUS1ZclEw
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1JdVhRRS1kd1E5YXF3TDNUc1NRLVlyUTA3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTRCNy9FMTgwQ0U3QTg1MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdR
OWFxd0wzVHNTUS1ZclEwN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG+LX+lQQrj4A+Lft+YxhZHN+HNdb2yxIm/NNoL+yTh3P5R1SXQAxVAnKDRpD
uabX+Z43bOto3uXWIkQ90PFbAhn5a3LjncgeaZDHr0VWsCFwdqEb02jx6nPF6e+7
8db+Z3oktN1VFOpgaELHBvPqBrkvR9tMHX8yBVZmiB38auy68AqnbPO+HtK0tzcO
TNHn84J3zZkAhEA7+zlLdYmpL6zpwRyrJcf4kH/SjCUh//v2B0zvdF3EFy7Bo2/Y
9RotEOT1H7BD7qgVwh5CO8rbHAT8DLuWvVjcfTH1WaQx+NBlf9YEDcsghfm7Sban
ExvKN2C/porXkLG2ND8lIbxqKA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:03:29 2026 by rpki-client