
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json)
Hash identifier: UmQK5eyuKJ89dvKr13TB0VSY6ow6rLvh+eSCIHm6ZMI=
Subject key identifier: 6C:6A:49:C5:C4:0B:DC:AF:95:5B:99:9E:85:FB:62:EA:B1:42:C4:6F
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial: 0306
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
Manifest number: 02DF
Signing time: Sun 11 Oct 2026 01:41:10 +0000
Manifest this update: Sun 11 Oct 2026 01:41:10 +0000
Manifest next update: Sun 18 Oct 2026 01:41:10 +0000
Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: ZKYdfeMg0q1Jp7DQO5Z1J9aUoMGjNBeLUkbaKDdaaSs=)
2: 6709E1D0D0FB11F08508FE58C4F9AE02.roa (hash: yB3ol9rUcdCMd9JnZM0DHqWp/9+cmY3NhYZPNGTCgSk=)
3: 8361CB4E5AE611F0963E5C62C4F9AE02.roa (hash: jj9Anb+YltSNZ7XXzklotQBXr3n/2KBa9WPb7jR7Hmc=)
4: FA9BD5C2C5DC11F0A5504261C4F9AE02.roa (hash: iXf9KuDSIbIFYMh4V2pQ7flo3c0UEktI37Pu46KLsLQ=)
5: B856D46C3B9611F0B2363C74C4F9AE02.roa (hash: bXMhRP5t5yXxZ38+U5zANdmRNyogxO2UTQiQkXvbZD8=)
6: 026537E8861E11F0BC465F85C4F9AE02.roa (hash: jND/P0to+up6kdOpyJDFygxyQBhs5JfYLpar96q+qQI=)
7: A216EC4E3C7911F0B25C0585C4F9AE02.roa (hash: PzMKVF5RWKMCBBz+uMcp/BJxucoQAleKAMkhu2SsbNI=)
8: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: D3QE+K/fDpz/3eSAi1rPfAFHFlOdI3dak+hzzYghHZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 01:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Validity
Not Before: Oct 11 01:41:10 2026 GMT
Not After : Oct 18 01:41:10 2026 GMT
Subject: CN=6acae936-96ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:e5:b9:6b:2a:77:70:26:09:a5:9b:dc:b0:
9f:27:18:16:3a:67:ce:4d:ab:a4:2b:75:68:ed:a2:
9c:13:56:eb:7d:49:e0:35:4c:72:fd:5c:30:dd:8e:
90:f3:5c:50:ad:e4:be:29:be:29:06:33:1d:73:8f:
3a:2a:41:7c:05:67:f7:5b:b7:b2:26:17:4f:9a:e3:
19:45:9f:5c:e6:b6:22:21:f5:59:c0:48:a5:e0:fa:
b8:d0:97:7d:4b:f7:1b:3a:3d:6b:1a:5b:2e:b7:67:
80:63:c9:b3:8c:90:64:fb:20:26:c0:fc:00:81:37:
61:fe:0d:14:59:16:db:48:ec:2c:c8:da:26:cd:bc:
b7:19:ef:33:dd:56:25:58:ba:c8:a9:dd:f0:b7:93:
d3:af:d9:4d:b3:6e:76:b5:1d:ad:4b:18:69:70:33:
69:32:f2:23:ff:d3:c2:54:df:c9:df:e4:a8:57:4b:
6c:8d:6f:ae:db:d9:22:d3:04:d3:ad:71:bc:e9:c1:
a0:71:21:58:22:c0:c6:5b:53:e1:a6:bd:44:c5:38:
ee:76:b8:93:db:20:8a:55:cb:5b:bd:4f:1b:c9:39:
22:cb:8a:54:2f:a9:07:73:52:21:c8:6e:ec:a7:11:
58:40:20:f9:26:40:d6:96:af:c8:5a:7e:7e:58:45:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6A:49:C5:C4:0B:DC:AF:95:5B:99:9E:85:FB:62:EA:B1:42:C4:6F
X509v3 Authority Key Identifier:
keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c4:f3:b4:cb:31:bc:2f:09:70:bd:4c:c7:ce:0b:96:dd:f1:
bb:5e:53:2f:3d:c6:85:5b:f1:41:1f:0c:8f:47:37:18:fc:d3:
72:78:bc:aa:8f:87:2b:c8:db:82:89:d9:cc:65:db:f4:9b:f5:
f5:fd:47:7b:5c:de:15:c3:4a:fd:27:30:d4:b4:76:c3:1e:11:
b9:24:28:ea:a2:56:22:ff:90:b1:41:5c:a7:3c:f0:6f:01:9e:
62:60:43:c4:90:09:06:1d:6c:7b:bf:19:28:12:23:be:ea:1c:
15:d8:ca:0c:ec:53:e4:02:87:90:96:f1:70:82:c8:a7:50:55:
2d:00:66:c8:0f:23:ab:cd:3b:a4:63:20:df:91:7a:2b:37:8d:
9b:8d:85:e1:76:00:c8:68:c7:96:9d:58:cf:29:13:c3:8f:45:
21:aa:ab:b2:b1:8f:67:88:c5:19:10:4f:85:c1:9d:07:b2:78:
34:e6:b2:c0:82:db:5e:d0:0c:b2:60:d5:a4:c6:59:f7:b0:68:
bd:89:cc:11:95:fd:f1:9d:0d:6d:9e:ce:ba:34:8a:a4:54:c3:
31:5d:e9:d3:23:50:5a:40:e4:07:e6:41:a4:3b:8c:d0:80:ea:
86:81:52:82:e9:68:65:48:3d:69:9c:ef:8f:b8:d2:56:ab:8b:
e6:2b:29:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3
NEE5MkQ0NEQwHhcNMjYxMDExMDE0MTEwWhcNMjYxMDE4MDE0MTEwWjAYMRYwFAYD
VQQDEw02YWNhZTkzNi05NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnhXluWsqd3AmCaWb3LCfJxgWOmfOTaukK3Vo7aKcE1brfUngNUxy/Vww3Y6Q
81xQreS+Kb4pBjMdc486KkF8BWf3W7eyJhdPmuMZRZ9c5rYiIfVZwEil4Pq40Jd9
S/cbOj1rGlsut2eAY8mzjJBk+yAmwPwAgTdh/g0UWRbbSOwsyNomzby3Ge8z3VYl
WLrIqd3wt5PTr9lNs252tR2tSxhpcDNpMvIj/9PCVN/J3+SoV0tsjW+u29ki0wTT
rXG86cGgcSFYIsDGW1Phpr1ExTjudriT2yCKVctbvU8byTkiy4pUL6kHc1IhyG7s
pxFYQCD5JkDWlq/IWn5+WEWzHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxqScXE
C9yvlVuZnoX7YuqxQsRvMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5
MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTFEMy81RkEzNkUzNDg5MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6
Y3hseVpqdWhpWHQwcVMxRTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWsTztMsxvC8JcL1Mx84Llt3xu15TLz3GhVvxQR8Mj0c3GPzTcni8qo+HK8jb
gonZzGXb9Jv19f1He1zeFcNK/Scw1LR2wx4RuSQo6qJWIv+QsUFcpzzwbwGeYmBD
xJAJBh1se78ZKBIjvuocFdjKDOxT5AKHkJbxcILIp1BVLQBmyA8jq807pGMg35F6
KzeNm42F4XYAyGjHlp1YzykTw49FIaqrsrGPZ4jFGRBPhcGdB7J4NOaywILbXtAM
smDVpMZZ97BovYnMEZX98Z0NbZ7OujSKpFTDMV3p0yNQWkDkB+ZBpDuM0IDqhoFS
guloZUg9aZzvj7jSVquL5ispHQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:26:18 2026 by rpki-client