
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier: 1fUbondlHIEdgolnuP9npEzjuO0wCvo3sPyaziYFBKY=
Subject key identifier: B1:C4:D3:61:7F:66:A2:23:17:B5:B4:75:8A:A3:18:16:7B:3F:FD:6E
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial: 0298
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number: 025E
Signing time: Thu 01 Oct 2026 03:10:18 +0000
Manifest this update: Thu 01 Oct 2026 03:10:17 +0000
Manifest next update: Thu 08 Oct 2026 03:10:17 +0000
Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: Lch+QAzkjz8YQjbaw3LR/jc9tp0wO9MJAvReSIzq9s0=)
2: E9874B2A16D011EF90793868C4F9AE02.roa (hash: StFMy3NKhkaFCNdoWKE6eyzBLd+skcdMmjgC62pSh+8=)
3: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: P3O7u+qRGn1bwR58h4CF4ybrJlg7WXxzi0HEWNF1wU8=)
4: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: kTWCQH3l0WWzLGhSEAUO4J7QO5Yg3xSjvZflpuriZzI=)
5: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: vbQDLMrS8rOq+qQeyQoAROFt0AaGqDcf1/1F1wwGpXo=)
6: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: OsNJpFKmHPyfNeh8koHIfP2TRZRKEPMZ5UDUwZ4ntLI=)
7: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: iXBfomCkV4xNH1cYbzZuww9SUUgCW5qk20yC43URNok=)
8: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: 170jykPgfx0s5CIB7KCfpg6Av4bJnDZ6uSGDY5UfwZQ=)
9: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: U9Cn0ELdUyS5NVvWmDLivz50FWKKV0p0b8inagt4fog=)
10: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: /RmusU5UC3h4mIZxyyVvzpFaDdQyB/V1AfNpSxG2USc=)
11: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: V/7VSGMl5ikCm95Tbf+xqFXER+QUdiwbSFx6fNdYM2Y=)
12: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: VMT1xU70dE5HYB1EHd2Tb1ASm0RRDcnimQ+3IrrOZ7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 03:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Validity
Not Before: Oct 1 03:10:17 2026 GMT
Not After : Oct 8 03:10:17 2026 GMT
Subject: CN=6abdcf19-8201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:c0:e8:ce:ef:23:66:21:46:14:09:f1:04:
9e:70:7f:7f:5b:c1:d3:da:b0:62:28:91:bd:c2:cb:
30:e3:cf:15:e4:4d:a6:66:8f:65:62:a7:19:55:c0:
97:5c:3d:88:a2:15:2c:e4:ee:85:ff:56:01:41:b1:
73:2e:a0:3a:3b:8f:b8:80:1b:21:3e:1b:a2:ee:e6:
69:ed:6a:17:22:a0:48:a0:86:d2:ee:94:67:d8:74:
83:41:b2:7b:7a:f1:a9:ab:23:52:22:1a:34:3d:54:
19:b2:a9:f0:26:4d:ec:55:fe:af:eb:ed:51:06:78:
0e:56:57:06:89:f2:6a:bf:e2:25:a3:20:5a:7a:7c:
87:5a:47:48:3a:3c:e4:c1:18:87:75:84:de:20:32:
1e:d5:7e:5c:2c:6f:cc:89:22:ab:25:09:dd:6e:d9:
3e:70:ab:63:07:e9:fd:39:dd:b8:5a:81:34:6d:71:
8d:1c:c7:14:02:f8:2c:43:0c:83:b2:6e:c1:d9:67:
12:8b:4c:58:1a:a5:38:82:51:68:d1:c5:61:57:89:
1c:51:36:8b:9e:ee:40:60:18:d4:78:05:32:e1:39:
d9:1f:1d:da:5d:c7:76:a2:69:2a:37:6d:9b:56:31:
1b:60:c5:c0:8c:7d:c4:3a:ba:82:6f:07:82:56:d0:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:D3:61:7F:66:A2:23:17:B5:B4:75:8A:A3:18:16:7B:3F:FD:6E
X509v3 Authority Key Identifier:
keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:63:ce:8d:ae:79:96:e5:b0:bf:c5:43:d0:f2:c1:fe:9b:37:
75:67:00:86:dc:5a:ef:fa:0a:f7:a4:c3:de:bb:95:85:ac:3a:
d1:f1:fa:ea:5d:81:4b:7a:11:05:03:72:84:38:c6:43:5d:d1:
1a:83:e5:e1:bf:79:f1:ea:d2:3d:94:fb:12:41:e9:84:79:6f:
59:62:da:1d:ff:74:ad:a5:84:b0:e2:a0:76:6d:fc:d5:e1:2f:
a8:3b:31:fb:2a:0d:a4:14:86:5a:92:45:d6:8f:60:37:34:c5:
08:a1:26:b0:de:5d:f3:92:d5:07:bd:76:da:06:93:fa:db:e4:
5b:0e:ac:a2:67:d4:3e:a1:36:0f:5c:bb:e1:e2:b0:78:68:9a:
6b:63:bd:81:1b:01:b8:29:3d:2a:86:e8:57:31:77:72:87:d8:
0d:51:9c:75:e5:d7:37:b7:9e:11:d7:ea:93:66:bf:7a:c6:29:
7e:04:87:26:39:d6:55:fc:b6:b5:f2:93:11:d5:db:21:76:1d:
be:c0:e3:50:0c:92:a3:e8:e3:a6:6d:63:2b:38:30:44:e3:f9:
20:72:aa:48:26:94:8e:ef:9e:4e:6a:f2:ce:45:d2:43:1f:7d:
c4:62:31:c6:c1:03:fa:02:78:ef:e0:e1:48:77:2d:a3:ad:f8:
55:db:d3:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3
RDREQUE4OTAwHhcNMjYxMDAxMDMxMDE3WhcNMjYxMDA4MDMxMDE3WjAYMRYwFAYD
VQQDEw02YWJkY2YxOS04MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpjA6M7vI2YhRhQJ8QSecH9/W8HT2rBiKJG9wssw488V5E2mZo9lYqcZVcCX
XD2IohUs5O6F/1YBQbFzLqA6O4+4gBshPhui7uZp7WoXIqBIoIbS7pRn2HSDQbJ7
evGpqyNSIho0PVQZsqnwJk3sVf6v6+1RBngOVlcGifJqv+IloyBaenyHWkdIOjzk
wRiHdYTeIDIe1X5cLG/MiSKrJQndbtk+cKtjB+n9Od24WoE0bXGNHMcUAvgsQwyD
sm7B2WcSi0xYGqU4glFo0cVhV4kcUTaLnu5AYBjUeAUy4TnZHx3aXcd2omkqN22b
VjEbYMXAjH3EOrqCbweCVtAd9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHE02F/
ZqIjF7W0dYqjGBZ7P/1uMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3
NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu
V2drVVMyWjlPVFI5VGFxSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvmPOja55luWwv8VD0PLB/ps3dWcAhtxa7/oK96TD3ruVhaw60fH66l2BS3oR
BQNyhDjGQ13RGoPl4b958erSPZT7EkHphHlvWWLaHf90raWEsOKgdm381eEvqDsx
+yoNpBSGWpJF1o9gNzTFCKEmsN5d85LVB7122gaT+tvkWw6somfUPqE2D1y74eKw
eGiaa2O9gRsBuCk9KoboVzF3cofYDVGcdeXXN7eeEdfqk2a/esYpfgSHJjnWVfy2
tfKTEdXbIXYdvsDjUAySo+jjpm1jKzgwROP5IHKqSCaUju+eTmryzkXSQx99xGIx
xsED+gJ47+DhSHcto634VdvTpw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 12:39:16 2026 by rpki-client