
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
File: _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json)
Hash identifier: t7a5qBULGFKEShYrKr6KqY2V9afF+Vz64aYdvGY6D44=
Subject key identifier: 2E:1B:32:83:EC:E7:D2:B4:C3:22:66:EC:CB:8D:69:0B:CD:3C:EC:B2
Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30
Certificate issuer: /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530
Certificate serial: 15F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
Manifest number: 15DE
Signing time: Thu 08 Oct 2026 16:47:30 +0000
Manifest this update: Thu 08 Oct 2026 16:47:29 +0000
Manifest next update: Thu 15 Oct 2026 16:47:29 +0000
Files and hashes: 1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: CwaQ+BapVv5KhO+8Q8Pzr5m7oSSUpPapeIuput3NAxA=)
2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: V0O9cc44CpQjLwDzTjlUyviUEhpI1JM6eosDEJpOoCc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl
rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5618 (0x15f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0D9C, serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530
Validity
Not Before: Oct 8 16:47:29 2026 GMT
Not After : Oct 15 16:47:29 2026 GMT
Subject: CN=6ac7c922-8954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:f9:6e:0b:b8:7c:71:ca:ae:4d:99:a9:35:
2a:20:fa:62:11:f5:d5:38:c1:e8:68:b4:d5:26:a2:
8d:ac:00:9c:c2:08:ca:f4:5a:cf:7e:94:04:c1:a3:
66:8b:3f:b2:88:8f:b8:d3:9f:e4:d7:df:a5:47:84:
62:79:a0:0d:53:b6:0b:09:3c:3b:dd:9e:fe:81:f9:
48:2f:ce:79:7d:1c:e3:f1:4a:8c:7e:68:70:ef:9d:
88:a7:59:6f:2b:62:71:cd:12:cb:06:ea:0a:f3:d6:
25:cc:ec:ba:c0:e3:f9:8d:5b:41:fd:8e:c9:93:d6:
b9:fe:0d:f5:2f:25:83:7e:ad:09:63:22:87:9c:60:
c2:5f:81:3b:e6:d8:b4:19:3d:06:d3:02:8b:30:dc:
d7:d4:6c:7d:ec:02:e0:05:dc:eb:e4:e8:40:da:ee:
07:99:c7:8b:ba:b3:0e:d7:27:9b:ed:d6:23:7e:75:
69:7f:6f:82:c3:69:99:9d:60:fd:85:39:9a:5a:9e:
76:9e:1b:21:06:31:8a:bc:be:c9:2b:03:5a:be:da:
b2:23:5c:33:6b:4a:45:52:ac:e8:2f:46:a3:61:e0:
64:14:87:9f:a5:7d:07:09:68:a9:de:e8:82:41:99:
c3:ae:5c:d8:88:36:bc:75:53:31:92:47:d0:9f:86:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:32:83:EC:E7:D2:B4:C3:22:66:EC:CB:8D:69:0B:CD:3C:EC:B2
X509v3 Authority Key Identifier:
keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:76:6a:3c:4c:ef:3e:9e:8e:cd:4d:86:8a:9f:1e:2b:e7:59:
65:fa:8a:23:f5:1f:de:61:b4:9f:06:65:10:68:5a:93:9b:d3:
e4:3f:0c:1a:ac:1c:1e:70:96:7f:81:f7:9b:26:6f:5d:91:06:
7f:89:40:e4:9f:b7:97:63:d8:dd:d0:df:1b:42:68:95:39:a3:
7c:ae:af:a2:8f:c2:d4:55:f4:49:59:02:3f:3b:4d:8f:88:9e:
b2:1d:64:fa:c0:c2:22:30:b8:b5:b1:99:8f:b0:3c:a3:f4:72:
b0:b9:fd:f3:9d:0e:7b:14:b9:63:ea:61:31:24:f2:0f:53:fa:
dc:19:2e:b6:e6:f9:b7:c8:65:83:28:76:42:1e:85:1b:05:83:
e5:5d:ef:03:b1:64:cc:06:58:5f:30:22:7b:d7:ee:37:98:b9:
8d:16:b8:96:32:a5:75:65:be:10:16:28:2f:9e:cd:23:38:7c:
de:f3:10:7e:af:62:be:14:83:8b:41:2b:d6:cd:ca:dd:4f:ee:
21:6a:7e:6d:53:5b:66:92:7e:f1:8f:3b:46:57:94:58:79:67:
9d:3f:4c:f5:87:02:9f:04:6f:ba:9c:9e:73:9b:b0:f8:12:0e:
1b:5b:67:33:ce:ad:51:90:55:79:0d:b8:80:6c:50:d4:84:bb:
d2:d1:07:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBEOUMxMTAvBgNVBAUTKEZFM0U5OEM0QzFBNzkxMkI1QTkxNkQxNjMzNDc3OEM0
QUI3QTY1MzAwHhcNMjYxMDA4MTY0NzI5WhcNMjYxMDE1MTY0NzI5WjAYMRYwFAYD
VQQDEw02YWM3YzkyMi04OTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhwf5bgu4fHHKrk2ZqTUqIPpiEfXVOMHoaLTVJqKNrACcwgjK9FrPfpQEwaNm
iz+yiI+405/k19+lR4RieaANU7YLCTw73Z7+gflIL855fRzj8UqMfmhw752Ip1lv
K2JxzRLLBuoK89YlzOy6wOP5jVtB/Y7Jk9a5/g31LyWDfq0JYyKHnGDCX4E75ti0
GT0G0wKLMNzX1Gx97ALgBdzr5OhA2u4HmceLurMO1yeb7dYjfnVpf2+Cw2mZnWD9
hTmaWp52nhshBjGKvL7JKwNavtqyI1wza0pFUqzoL0ajYeBkFIefpX0HCWip3uiC
QZnDrlzYiDa8dVMxkkfQn4Z38wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4bMoPs
59K0wyJm7MuNaQvNPOyyMB8GA1UdIwQYMBaAFP4+mMTBp5ErWpFtFjNHeMSremUw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ5Qy85RTI4MzAwNjU3
QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtTdGFrVzBXTTBkNHhLdDZa
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19qNll4TUdua1N0YWtXMFdNMGQ0eEt0NlpUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEQ5Qy85RTI4MzAwNjU3QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtT
dGFrVzBXTTBkNHhLdDZaVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmHZqPEzvPp6OzU2Gip8eK+dZZfqKI/Uf3mG0nwZlEGhak5vT5D8MGqwcHnCW
f4H3myZvXZEGf4lA5J+3l2PY3dDfG0JolTmjfK6voo/C1FX0SVkCPztNj4iesh1k
+sDCIjC4tbGZj7A8o/RysLn9850OexS5Y+phMSTyD1P63Bkutub5t8hlgyh2Qh6F
GwWD5V3vA7FkzAZYXzAie9fuN5i5jRa4ljKldWW+EBYoL57NIzh83vMQfq9ivhSD
i0Er1s3K3U/uIWp+bVNbZpJ+8Y87RleUWHlnnT9M9YcCnwRvupyec5uw+BIOG1tn
M86tUZBVeQ24gGxQ1IS70tEHWg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 01:22:00 2026 by rpki-client