
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json)
Hash identifier: ubVPLkIom5ZKqMJeirD5U6YKdZlbzCcZd4l/0DwD7H8=
Subject key identifier: 1D:D8:12:ED:36:D5:34:A9:B0:B4:48:01:E7:AE:38:99:B9:BC:D7:95
Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Certificate serial: 0464
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
Manifest number: 044E
Signing time: Sat 14 Nov 2026 23:59:18 +0000
Manifest this update: Sat 14 Nov 2026 23:59:18 +0000
Manifest next update: Sat 21 Nov 2026 23:59:18 +0000
Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: tmtTVkqW2dzQPJLHM8ytmmO11z04SDmN6H43GRcQE0s=)
2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: k2Tm+VECAOkqgz18jDdhRYGz/UVnU5T68kA32PJlYJ8=)
3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: SiaKfWh20onDMNEmqxmOZpPd2+52s+o/XbL2Uti7Li8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0
Validity
Not Before: Nov 14 23:59:18 2026 GMT
Not After : Nov 21 23:59:18 2026 GMT
Subject: CN=6af8f5d6-ef56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:05:a8:79:66:bb:71:56:3a:7a:40:e0:7a:
24:17:0e:57:57:eb:c0:47:64:85:9d:07:42:07:6e:
af:42:e7:ee:cf:4f:a4:5c:0a:5b:91:40:87:2c:d5:
ee:aa:16:99:3f:37:b8:bc:33:87:03:42:5a:fb:14:
91:a5:89:a7:74:d6:e9:27:5e:f7:dd:9c:e2:de:7d:
f9:ac:b8:48:8c:df:e7:64:29:d1:71:fd:48:c0:ba:
4e:7f:79:c2:b3:0a:8d:ad:07:3f:73:c5:6d:cb:2a:
e5:1c:f8:f4:4b:95:e1:04:65:ff:b0:86:15:0d:2e:
a9:f0:06:2f:a7:66:a7:64:c0:57:a7:6c:b1:aa:75:
b5:bc:2d:ff:42:29:21:04:d5:52:5f:c4:ff:d0:39:
85:92:9d:ac:5a:d9:a7:39:de:e4:af:41:5e:13:8d:
d5:8a:93:d4:26:18:4f:69:f4:1f:54:9d:50:7b:92:
9d:e2:50:aa:fe:00:d8:6c:b8:e6:56:f4:74:2c:6d:
52:8d:6a:c7:de:d7:da:cf:4b:0f:00:f8:e3:a9:ef:
c3:1e:b9:9d:d3:07:bb:fa:75:3a:17:9f:b0:ab:77:
5e:44:ab:90:30:6b:1f:9e:81:5e:33:97:11:71:3e:
c3:c3:51:ec:a8:bc:c5:ba:76:f0:e3:a6:36:7e:8c:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:12:ED:36:D5:34:A9:B0:B4:48:01:E7:AE:38:99:B9:BC:D7:95
X509v3 Authority Key Identifier:
keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:68:fc:3f:aa:fc:6a:b2:8a:86:69:e1:99:8f:d5:35:01:99:
92:68:2e:54:15:ee:e1:11:85:0d:fa:68:94:5d:d9:b0:16:86:
cd:3d:00:8b:74:b8:d8:de:a6:64:b4:c6:2a:77:0c:95:96:6c:
a0:da:db:63:de:41:74:99:35:0c:46:03:51:cc:2d:5d:c0:14:
6d:94:1f:e6:6f:e5:41:83:d6:e9:33:4d:33:38:e2:38:8d:7d:
6e:2d:91:92:73:ee:1a:8a:d6:86:9b:ae:43:f9:c1:94:b1:13:
a2:24:cf:22:e7:95:2a:65:87:40:cc:ea:5a:50:e7:e2:f3:57:
5a:c3:77:b1:21:0c:c6:52:a6:b7:e6:e6:34:8f:3a:db:02:85:
93:af:17:a4:7e:7e:5f:81:f9:c4:b5:d5:71:ac:9e:27:c5:ca:
52:a4:50:ab:d2:6f:c3:91:ea:6e:6e:18:76:68:fe:77:3b:fa:
dd:e7:98:4d:30:8b:2d:ad:ca:45:3a:95:72:71:44:19:27:28:
73:bd:21:29:7e:a7:c6:27:98:b3:be:5f:18:4b:f7:65:f6:f6:
3e:4a:89:ed:07:c0:f8:d2:d2:89:e9:48:75:d4:60:97:92:a3:
ce:20:c7:23:8d:e7:2b:80:a3:99:29:df:a5:46:0c:4c:1d:83:
82:0a:83:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB
NUNDNzcyQzAwHhcNMjYxMTE0MjM1OTE4WhcNMjYxMTIxMjM1OTE4WjAYMRYwFAYD
VQQDEw02YWY4ZjVkNi1lZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJ4FqHlmu3FWOnpA4HokFw5XV+vAR2SFnQdCB26vQufuz0+kXApbkUCHLNXu
qhaZPze4vDOHA0Ja+xSRpYmndNbpJ1733Zzi3n35rLhIjN/nZCnRcf1IwLpOf3nC
swqNrQc/c8VtyyrlHPj0S5XhBGX/sIYVDS6p8AYvp2anZMBXp2yxqnW1vC3/Qikh
BNVSX8T/0DmFkp2sWtmnOd7kr0FeE43VipPUJhhPafQfVJ1Qe5Kd4lCq/gDYbLjm
VvR0LG1SjWrH3tfaz0sPAPjjqe/DHrmd0we7+nU6F5+wq3deRKuQMGsfnoFeM5cR
cT7Dw1HsqLzFunbw46Y2foxa+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3YEu02
1TSpsLRIAeeuOJm5vNeVMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2
MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE
andGX3BsMUhCNEdsekhjc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALmj8P6r8arKKhmnhmY/VNQGZkmguVBXu4RGFDfpolF3ZsBaGzT0Ai3S42N6m
ZLTGKncMlZZsoNrbY95BdJk1DEYDUcwtXcAUbZQf5m/lQYPW6TNNMzjiOI19bi2R
knPuGorWhpuuQ/nBlLEToiTPIueVKmWHQMzqWlDn4vNXWsN3sSEMxlKmt+bmNI86
2wKFk68XpH5+X4H5xLXVcayeJ8XKUqRQq9Jvw5Hqbm4Ydmj+dzv63eeYTTCLLa3K
RTqVcnFEGScoc70hKX6nxieYs75fGEv3Zfb2PkqJ7QfA+NLSielIddRgl5KjziDH
I43nK4CjmSnfpUYMTB2DggqDHA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:40:44 2026 by rpki-client