
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
File: 0hsNWsWvkZAPUK2WADMT5R7WChA.mft (raw, json)
Hash identifier: GLlET1gVh0MLLoA/StW4pnwPi7wGi+u8t2QxTFXTSds=
Subject key identifier: 8C:1C:64:28:1A:43:4E:55:A4:99:B1:14:7E:E9:9F:05:2F:88:D9:B9
Authority key identifier: D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10
Certificate issuer: /CN=A91A0E9D/serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
Manifest number: 016E
Signing time: Mon 21 Sep 2026 05:00:24 +0000
Manifest this update: Mon 21 Sep 2026 05:00:23 +0000
Manifest next update: Mon 28 Sep 2026 05:00:23 +0000
Files and hashes: 1: 0hsNWsWvkZAPUK2WADMT5R7WChA.crl (hash: Ix9R2T1v+jw13XLCN2yHFITVgIXIlh9phr+e3MMfwpY=)
2: 3996C94896D211EF924C486FC4F9AE02.roa (hash: RSWSsqKVGFqnc5MjQ5V0wfdqY1cc/uC9LzB1g38vtcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl
rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0E9D, serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
Validity
Not Before: Sep 21 05:00:23 2026 GMT
Not After : Sep 28 05:00:23 2026 GMT
Subject: CN=6ab0b9e8-4e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:2a:a3:c6:03:0b:49:02:c9:4a:d8:50:8c:
13:1d:19:6f:8d:5e:e1:79:4e:f5:f7:73:13:ef:c7:
41:7c:a4:b7:cf:fa:b3:e2:1b:1d:2d:15:b4:20:d4:
43:f7:72:49:48:04:68:fd:fe:82:47:09:4f:ed:6c:
1d:dd:f4:1f:88:d3:1f:8c:15:a3:24:bf:a5:9f:50:
3d:76:77:a4:b4:62:0f:10:5c:a4:ad:a1:53:26:9d:
73:cd:61:69:04:0c:2d:88:ab:2c:3d:43:4e:3d:4e:
da:bd:22:3a:68:79:c8:4f:ad:61:3c:39:6d:5a:45:
a0:2c:62:79:7c:19:f7:cb:81:84:3a:1a:49:c2:bd:
1f:b0:bb:99:b4:42:76:6d:0e:7d:20:cd:98:9c:3b:
29:8e:12:dc:a7:a5:e9:0b:54:27:86:e1:66:9d:3c:
b3:6a:22:48:d6:46:14:15:cb:ec:75:0d:28:5c:79:
73:30:ab:46:a3:e5:dc:77:16:b1:cb:55:10:de:b4:
0f:92:74:71:0a:f2:7e:d3:ff:69:53:33:df:f0:a1:
93:aa:31:37:f4:79:43:dc:15:aa:1c:a6:2a:df:d1:
f7:61:bc:5b:dd:95:84:e4:48:2f:8a:66:93:0d:25:
0e:78:d1:a6:28:30:87:f3:19:71:8c:44:7d:a2:3a:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1C:64:28:1A:43:4E:55:A4:99:B1:14:7E:E9:9F:05:2F:88:D9:B9
X509v3 Authority Key Identifier:
keyid:D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:13:5e:4e:69:b5:38:b4:09:fb:33:e1:c3:07:e7:23:1c:a2:
63:21:24:42:f5:d4:74:df:f7:ce:ac:89:99:c2:1c:80:6c:93:
c0:92:13:ed:af:9f:d4:06:85:85:20:a6:73:e6:92:98:f0:f3:
b9:a1:9f:12:1f:41:36:ac:6d:11:22:e1:20:40:dd:1e:e1:6e:
7c:6d:3f:5f:b5:3f:0f:62:44:df:32:ed:77:7b:ae:07:a3:06:
5b:ac:8f:78:ff:37:2d:ca:61:f3:cb:3c:c7:c0:76:7f:72:bf:
3c:46:96:0f:3b:fd:72:5a:f9:30:5b:45:fb:0b:0c:db:f9:31:
48:88:8f:00:c3:4a:61:16:41:6d:18:3b:89:02:bb:87:88:a3:
37:36:6a:83:7e:78:9d:fc:e3:94:3a:e3:83:8b:41:93:85:91:
06:f9:60:a8:5f:1c:f1:3a:80:71:8c:d9:51:54:8b:67:ea:8a:
8a:2e:56:3b:b6:5a:75:ec:48:12:ca:c3:c8:53:b7:d7:cc:5f:
9f:52:8b:04:6d:c7:ff:87:92:21:09:23:46:63:36:6d:35:82:
87:96:81:ed:ce:1c:37:cf:2e:81:21:49:ab:13:18:22:ff:6e:
41:b2:bd:6e:13:92:ed:8e:d6:7a:1d:47:8d:01:45:6b:88:e8:
6c:d1:db:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBFOUQxMTAvBgNVBAUTKEQyMUIwRDVBQzVBRjkxOTAwRjUwQUQ5NjAwMzMxM0U1
MUVENjBBMTAwHhcNMjYwOTIxMDUwMDIzWhcNMjYwOTI4MDUwMDIzWjAYMRYwFAYD
VQQDEw02YWIwYjllOC00ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0gqo8YDC0kCyUrYUIwTHRlvjV7heU7193MT78dBfKS3z/qz4hsdLRW0INRD
93JJSARo/f6CRwlP7Wwd3fQfiNMfjBWjJL+ln1A9dnektGIPEFykraFTJp1zzWFp
BAwtiKssPUNOPU7avSI6aHnIT61hPDltWkWgLGJ5fBn3y4GEOhpJwr0fsLuZtEJ2
bQ59IM2YnDspjhLcp6XpC1QnhuFmnTyzaiJI1kYUFcvsdQ0oXHlzMKtGo+Xcdxax
y1UQ3rQPknRxCvJ+0/9pUzPf8KGTqjE39HlD3BWqHKYq39H3Ybxb3ZWE5EgvimaT
DSUOeNGmKDCH8xlxjER9ojq6BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwcZCga
Q05VpJmxFH7pnwUviNm5MB8GA1UdIwQYMBaAFNIbDVrFr5GQD1CtlgAzE+Ue1goQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEU5RC85NTY5QURCNDk1
REIxMUVGQTRFMkZCNDVDNEY5QUUwMi8waHNOV3NXdmtaQVBVSzJXQURNVDVSN1dD
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBoc05Xc1d2a1pBUFVLMldBRE1UNVI3V0NoQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEU5RC85NTY5QURCNDk1REIxMUVGQTRFMkZCNDVDNEY5QUUwMi8waHNOV3NXdmta
QVBVSzJXQURNVDVSN1dDaEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyRNeTmm1OLQJ+zPhwwfnIxyiYyEkQvXUdN/3zqyJmcIcgGyTwJIT7a+f1AaF
hSCmc+aSmPDzuaGfEh9BNqxtESLhIEDdHuFufG0/X7U/D2JE3zLtd3uuB6MGW6yP
eP83Lcph88s8x8B2f3K/PEaWDzv9clr5MFtF+wsM2/kxSIiPAMNKYRZBbRg7iQK7
h4ijNzZqg354nfzjlDrjg4tBk4WRBvlgqF8c8TqAcYzZUVSLZ+qKii5WO7ZadexI
EsrDyFO318xfn1KLBG3H/4eSIQkjRmM2bTWCh5aB7c4cN88ugSFJqxMYIv9uQbK9
bhOS7Y7Weh1HjQFFa4jobNHbXA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:42:56 2026 by rpki-client