
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier: 6oj7uVGEJyZ1lIs67H8hEfgXi3e6HW1B74q3GN3ofZY=
Subject key identifier: C6:18:00:3B:4F:9E:81:CC:58:A1:AC:83:64:88:E6:BE:10:FA:C8:6E
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 06:19:57 +0000
Manifest this update: Wed 23 Sep 2026 06:19:57 +0000
Manifest next update: Wed 30 Sep 2026 06:19:57 +0000
Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: QdTt8VQNu+XQBteULXeTVfCDhqgmDiCtAnbxTvtopq4=)
2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: HgsCBlPfUxEGN7fUuKP9EFyk8NbYZcFbFk0fllEBLvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Validity
Not Before: Sep 23 06:19:57 2026 GMT
Not After : Sep 30 06:19:57 2026 GMT
Subject: CN=6ab36f8d-7369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4b:fe:c9:d2:30:a9:8c:fa:24:f7:a1:d6:dc:
81:76:f1:1e:07:36:4d:c1:0f:24:d0:d8:18:98:e3:
1b:7e:40:9e:43:d6:c2:db:bc:ee:c5:3a:56:7d:66:
45:f8:f1:a7:1c:cf:11:3c:78:48:60:b1:08:cd:10:
8e:b7:17:7c:0b:6d:00:0c:ed:a7:28:c9:f8:76:3b:
a6:fb:a3:18:93:7e:f3:72:e7:3c:c5:19:02:73:77:
91:61:df:3e:71:6e:cd:38:06:36:5c:a3:ca:a7:46:
74:49:1c:2a:b3:d7:ee:f4:f7:b7:31:d6:f0:2f:8b:
c3:93:6b:ae:fe:4e:ca:9e:ed:9b:42:83:9c:89:96:
8b:4f:31:de:ca:85:cd:ae:57:b1:a9:65:e2:b7:f0:
03:74:20:13:e2:a8:0a:34:4f:62:e5:82:b1:36:a5:
b7:ae:10:7d:1e:a0:23:b8:9f:90:5d:0a:6e:5e:72:
9b:89:c8:60:a0:30:3f:3d:bc:62:d3:1d:56:6d:de:
8b:a3:84:82:42:6e:7c:58:3a:bb:e8:a0:99:b9:86:
a5:ff:a2:07:0a:64:0e:ae:95:cb:3d:27:ff:90:b1:
18:48:97:5a:61:3b:79:ad:00:be:33:03:78:3c:da:
38:54:8d:4c:4c:0b:bf:39:44:46:50:84:07:51:3c:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:00:3B:4F:9E:81:CC:58:A1:AC:83:64:88:E6:BE:10:FA:C8:6E
X509v3 Authority Key Identifier:
keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:30:5e:ba:c6:a5:78:7c:a1:9e:b3:24:4c:1a:c1:b8:8e:53:
39:ac:96:49:ee:7c:d9:1c:32:94:e1:83:b0:7c:11:cc:42:40:
57:76:7e:19:4e:21:0d:3a:90:4b:73:e4:3a:b4:88:1a:00:2b:
f8:bf:3a:f2:80:00:ef:95:da:f0:8d:bd:75:87:94:65:35:31:
33:af:17:30:5e:0d:12:c8:67:42:4d:fa:34:a2:e4:75:ca:e9:
19:da:c5:28:5e:d1:3f:d7:70:6e:8b:b6:f7:81:60:a7:2f:ab:
f6:44:2a:09:75:85:9f:41:6f:89:95:34:aa:6a:e4:49:ec:1a:
38:d0:72:41:33:9e:d8:ba:96:a0:d2:63:a9:95:e7:cd:94:f0:
65:4b:c5:28:3f:72:02:f0:3c:b9:75:d3:68:8f:2f:f4:60:30:
34:6f:bd:43:c3:2c:5a:02:48:c8:2e:ad:95:77:bf:cd:ef:9f:
5c:91:d5:c8:08:c1:e9:cf:ba:9b:b1:31:01:87:17:55:fb:e5:
6b:18:16:e3:4d:29:57:31:26:80:0f:12:df:bd:11:cd:7f:25:
f3:e2:02:00:d5:b1:d4:d3:be:ce:c6:d9:97:24:94:20:a1:c0:
f1:ec:dd:3e:8f:98:4c:71:d2:bc:51:3c:3a:33:f8:fd:1d:8b:
5e:4e:2f:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUxREUxMTAvBgNVBAUTKDZCODI5NkE1ODE1NDMwMjc4RUMzMTFCNUU5Q0JFQjdG
RjBBOTBEQzYwHhcNMjYwOTIzMDYxOTU3WhcNMjYwOTMwMDYxOTU3WjAYMRYwFAYD
VQQDEw02YWIzNmY4ZC03MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA60v+ydIwqYz6JPeh1tyBdvEeBzZNwQ8k0NgYmOMbfkCeQ9bC27zuxTpWfWZF
+PGnHM8RPHhIYLEIzRCOtxd8C20ADO2nKMn4djum+6MYk37zcuc8xRkCc3eRYd8+
cW7NOAY2XKPKp0Z0SRwqs9fu9Pe3MdbwL4vDk2uu/k7Knu2bQoOciZaLTzHeyoXN
rlexqWXit/ADdCAT4qgKNE9i5YKxNqW3rhB9HqAjuJ+QXQpuXnKbichgoDA/Pbxi
0x1Wbd6Lo4SCQm58WDq76KCZuYal/6IHCmQOrpXLPSf/kLEYSJdaYTt5rQC+MwN4
PNo4VI1MTAu/OURGUIQHUTyCEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYYADtP
noHMWKGsg2SI5r4Q+shuMB8GA1UdIwQYMBaAFGuClqWBVDAnjsMRtenL63/wqQ3G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTFERS84NzFGREEzNjYw
QjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9hNEtXcFlGVU1DZU93eEcxNmN2cmZfQ3BE
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERjWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTFERS84NzFGREEzNjYwQjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9hNEtXcFlGVU1D
ZU93eEcxNmN2cmZfQ3BEY1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqzBeusaleHyhnrMkTBrBuI5TOayWSe582RwylOGDsHwRzEJAV3Z+GU4hDTqQ
S3PkOrSIGgAr+L868oAA75Xa8I29dYeUZTUxM68XMF4NEshnQk36NKLkdcrpGdrF
KF7RP9dwbou294Fgpy+r9kQqCXWFn0FviZU0qmrkSewaONByQTOe2LqWoNJjqZXn
zZTwZUvFKD9yAvA8uXXTaI8v9GAwNG+9Q8MsWgJIyC6tlXe/ze+fXJHVyAjB6c+6
m7ExAYcXVfvlaxgW400pVzEmgA8S370RzX8l8+ICANWx1NO+zsbZlySUIKHA8ezd
Po+YTHHSvFE8OjP4/R2LXk4v5g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:50:45 2026 by rpki-client