
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
File: c27zV-8j8z6sB7J06l4_7A3-5Yo.mft (raw, json)
Hash identifier: IB7XO7eJRaJxTDPKf0dzuL2Tnf0hAdy9sHoAJYKgHBc=
Subject key identifier: 24:DD:64:2B:CF:0B:7C:CC:36:BF:FB:0F:6B:28:AE:79:29:DA:D0:1C
Authority key identifier: 73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
Certificate issuer: /CN=A91A4ACD/serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
Manifest number: 9D
Signing time: Mon 21 Sep 2026 07:22:40 +0000
Manifest this update: Mon 21 Sep 2026 07:22:40 +0000
Manifest next update: Mon 28 Sep 2026 07:22:40 +0000
Files and hashes: 1: c27zV-8j8z6sB7J06l4_7A3-5Yo.crl (hash: agEbtlNsV6ixnzJIrYEsAfE1AZma5yZhxngLrsq8OJw=)
2: B2A566E2CB9B11F0A4EC673AC4F9AE02.roa (hash: iuVZXAAipAy2W4qils7MwY0qFs7nw1X3E/jymLHx1So=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4ACD, serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A
Validity
Not Before: Sep 21 07:22:40 2026 GMT
Not After : Sep 28 07:22:40 2026 GMT
Subject: CN=6ab0db40-fe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:36:1d:2e:6f:a1:e0:4d:04:19:25:06:6f:
6c:7d:af:b2:9f:fe:05:82:ca:2b:87:07:c0:a9:b6:
c0:64:67:6c:e5:ef:8b:c0:5d:ab:ad:97:b1:64:2b:
8e:19:65:79:00:54:20:91:ed:db:80:6f:6f:46:92:
c5:62:36:20:ef:64:b5:a9:c3:99:e2:20:18:62:b8:
a3:43:89:e2:9b:7c:fe:30:54:90:5c:0a:5c:08:ae:
6c:51:3d:f2:3a:e2:d6:ac:ca:eb:38:bb:cc:33:84:
17:97:69:94:dd:9f:d6:61:fb:f7:12:44:77:1b:d4:
19:ce:a0:ea:2f:ae:10:21:77:d1:35:43:f9:2f:f2:
b3:d1:54:a7:6e:42:fd:cc:78:92:db:d6:9a:89:4b:
61:84:25:70:3e:e5:15:60:07:d3:2f:ab:bc:6f:56:
8e:5c:6c:3a:7c:5c:44:92:df:20:e2:dc:ed:ef:40:
04:70:21:f9:1f:91:88:c0:01:a2:72:cf:92:8f:bf:
be:cf:46:2a:30:cd:30:fa:0d:fa:28:85:ed:25:a5:
b0:d7:a3:d5:f2:c9:09:8f:f0:a2:b9:ff:67:c0:30:
c5:f5:ae:81:7f:c3:86:c7:42:9a:c5:ac:31:55:fa:
a1:ee:a2:1d:82:75:46:e6:64:26:a3:da:ed:55:bb:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:64:2B:CF:0B:7C:CC:36:BF:FB:0F:6B:28:AE:79:29:DA:D0:1C
X509v3 Authority Key Identifier:
keyid:73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a5:ac:2a:7c:d7:cb:a5:29:19:77:86:43:2c:7e:b2:97:8d:
9b:48:63:61:b4:46:96:fa:b9:cb:ed:48:44:f8:5e:29:8a:86:
32:96:4e:70:fc:c4:b0:f2:f3:59:84:d3:94:d8:62:df:5c:ba:
88:98:d3:5a:9b:1f:8b:7d:43:84:e7:d7:99:f0:23:c3:05:20:
a0:08:f2:c2:dc:60:97:50:c1:f0:80:76:ac:c2:4f:af:33:0c:
ac:b9:31:7c:2e:0f:56:f7:10:82:c0:48:fb:af:cc:d1:b5:dd:
7a:7a:d5:a0:ab:12:17:3e:ad:bd:e7:07:51:5c:b6:e1:48:6a:
93:05:89:d9:af:4f:87:90:01:31:32:65:b4:a0:a7:4b:ce:55:
dc:d7:ca:63:ea:86:57:fd:34:ca:79:5a:3e:d4:ef:d8:fb:68:
3b:f9:0b:f9:6f:85:b1:57:e5:23:ce:d0:5b:75:cb:80:c4:2b:
af:62:41:47:73:aa:c6:31:df:d0:c7:ff:4f:55:f2:aa:72:26:
c2:52:fa:c9:86:86:76:04:b9:ec:53:b8:7d:17:7e:23:74:a6:
e9:48:14:36:61:34:9d:bd:2c:94:b3:37:d1:1f:9e:bb:92:0b:
81:9c:ab:98:1b:8d:45:5f:16:c4:4e:40:51:e1:da:88:f0:a5:
01:eb:41:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRBQ0QxMTAvBgNVBAUTKDczNkVGMzU3RUYyM0YzM0VBQzA3QjI3NEVBNUUzRkVD
MERGRUU1OEEwHhcNMjYwOTIxMDcyMjQwWhcNMjYwOTI4MDcyMjQwWjAYMRYwFAYD
VQQDEw02YWIwZGI0MC1mZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1dA2HS5voeBNBBklBm9sfa+yn/4FgsorhwfAqbbAZGds5e+LwF2rrZexZCuO
GWV5AFQgke3bgG9vRpLFYjYg72S1qcOZ4iAYYrijQ4nim3z+MFSQXApcCK5sUT3y
OuLWrMrrOLvMM4QXl2mU3Z/WYfv3EkR3G9QZzqDqL64QIXfRNUP5L/Kz0VSnbkL9
zHiS29aaiUthhCVwPuUVYAfTL6u8b1aOXGw6fFxEkt8g4tzt70AEcCH5H5GIwAGi
cs+Sj7++z0YqMM0w+g36KIXtJaWw16PV8skJj/Ciuf9nwDDF9a6Bf8OGx0Kaxawx
Vfqh7qIdgnVG5mQmo9rtVbscZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTdZCvP
C3zMNr/7D2sornkp2tAcMB8GA1UdIwQYMBaAFHNu81fvI/M+rAeydOpeP+wN/uWK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEFDRC9CMzMyNDg2QUNC
OUExMUYwOUQxMEMxMTZDNEY5QUUwMi9jMjd6Vi04ajh6NnNCN0owNmw0XzdBMy01
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2MyN3pWLThqOHo2c0I3SjA2bDRfN0EzLTVZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEFDRC9CMzMyNDg2QUNCOUExMUYwOUQxMEMxMTZDNEY5QUUwMi9jMjd6Vi04ajh6
NnNCN0owNmw0XzdBMy01WW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhqWsKnzXy6UpGXeGQyx+speNm0hjYbRGlvq5y+1IRPheKYqGMpZOcPzEsPLz
WYTTlNhi31y6iJjTWpsfi31DhOfXmfAjwwUgoAjywtxgl1DB8IB2rMJPrzMMrLkx
fC4PVvcQgsBI+6/M0bXdenrVoKsSFz6tvecHUVy24UhqkwWJ2a9Ph5ABMTJltKCn
S85V3NfKY+qGV/00ynlaPtTv2PtoO/kL+W+FsVflI87QW3XLgMQrr2JBR3OqxjHf
0Mf/T1XyqnImwlL6yYaGdgS57FO4fRd+I3Sm6UgUNmE0nb0slLM30R+eu5ILgZyr
mBuNRV8WxE5AUeHaiPClAetBmg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:25:16 2026 by rpki-client