
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
File: CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json)
Hash identifier: bXpcXjP9MqJ0dpyrc8GntBxdti6RI6fM0RM/yUk7q4E=
Subject key identifier: 03:BB:8E:B9:0A:6F:20:C1:B4:16:62:B6:2D:5A:D2:13:87:4B:B7:FF
Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6
Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
Certificate serial: 0377
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
Manifest number: 036F
Signing time: Wed 23 Sep 2026 00:27:52 +0000
Manifest this update: Wed 23 Sep 2026 00:27:51 +0000
Manifest next update: Wed 30 Sep 2026 00:27:51 +0000
Files and hashes: 1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: uw2hHNWVN8N1EsG+nzRwuCS8nYGXBbIb848aCCFSYlI=)
2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: QM3TZDb9n+aQx7/1/HX5pDRtbQ+ME0yE/NNbiA3qbqY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl
rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6
Validity
Not Before: Sep 23 00:27:51 2026 GMT
Not After : Sep 30 00:27:51 2026 GMT
Subject: CN=6ab31d07-92e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:7c:8e:4b:36:d3:ed:71:51:0c:a4:3f:a0:
03:7a:c5:cd:a0:d6:63:70:37:34:fb:79:01:5c:6f:
dd:55:bb:2a:28:ac:69:51:22:7b:77:ba:20:df:58:
cf:f2:72:85:7b:d0:0d:0e:50:52:de:b0:9b:99:42:
47:67:0b:05:e5:1e:a9:d4:15:22:ee:4b:68:7c:1b:
0d:19:ce:20:c7:f7:b2:98:df:aa:ec:35:28:5f:a2:
79:2f:fd:0c:54:87:c7:69:31:31:69:00:89:a1:4f:
c4:a0:32:50:ff:f8:04:4a:ed:2f:75:f9:23:8f:4c:
97:be:93:0a:74:81:4d:8f:94:70:a6:05:05:27:dc:
24:60:3a:74:f2:c4:39:98:be:db:30:9e:f7:b4:94:
96:a2:23:3b:47:b7:50:25:90:63:56:23:60:59:24:
e5:16:5d:92:61:fd:d1:a7:d4:60:cd:d8:af:06:76:
d7:d5:20:65:68:58:20:5d:51:d4:17:5a:78:d6:b2:
d4:d3:3f:33:0e:11:2a:a6:82:2d:dd:0d:c9:98:4d:
5c:47:e3:59:0e:3f:55:82:21:35:0b:3d:f4:ff:95:
93:f0:65:e2:64:b9:fd:d8:d6:59:31:55:97:7f:f3:
a0:f1:18:68:ea:7d:61:cc:9d:eb:eb:d1:ef:f9:53:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BB:8E:B9:0A:6F:20:C1:B4:16:62:B6:2D:5A:D2:13:87:4B:B7:FF
X509v3 Authority Key Identifier:
keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:08:99:29:17:b7:8b:11:c6:70:1e:0c:02:18:18:83:b6:84:
e5:f2:a0:34:5d:40:5f:05:e8:a4:2f:cb:be:1e:df:c9:7f:37:
69:1b:c0:d2:08:cd:ab:b9:69:0a:c0:8c:7a:11:41:49:0b:8f:
c5:43:2d:29:32:4e:6e:2a:79:70:e3:e8:68:96:07:e5:31:18:
9d:41:f2:29:58:dd:70:05:f1:17:45:40:ca:49:80:33:0d:54:
56:dc:c6:a8:4e:7f:62:2e:66:5f:41:fe:9b:6f:9e:0c:23:77:
2d:ae:9b:a2:60:4d:22:e0:b6:b4:f6:63:d0:30:ba:f5:30:1a:
3a:70:64:95:c2:96:a2:8d:c7:49:04:5f:8a:6d:15:2e:3c:f4:
b7:6a:b6:d8:bb:67:47:30:8c:93:23:c9:1b:43:af:8f:e7:06:
ed:50:2d:29:d6:48:0e:91:65:ea:05:ae:9c:d1:ef:00:33:bb:
1d:46:4b:94:6a:ce:c7:ac:e2:32:ba:04:92:fa:a9:40:f9:5b:
a1:9d:7b:67:97:92:5e:7a:6c:f9:39:63:1f:ee:ab:ea:44:e6:
4d:3a:f8:2e:e0:3f:6e:72:ab:89:91:c5:d2:55:26:65:15:e7:
b4:d0:b0:fd:1a:dc:7a:94:6c:f6:e0:76:ff:4b:0c:6b:83:5a:
57:b7:47:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk1QzExMTAvBgNVBAUTKDBBNDMxNjNDQkVCMUJGNzk4QzlDRTQxQzFDNUU3NEEx
Qzg4MzdBQzYwHhcNMjYwOTIzMDAyNzUxWhcNMjYwOTMwMDAyNzUxWjAYMRYwFAYD
VQQDEw02YWIzMWQwNy05MmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdp8jks20+1xUQykP6ADesXNoNZjcDc0+3kBXG/dVbsqKKxpUSJ7d7og31jP
8nKFe9ANDlBS3rCbmUJHZwsF5R6p1BUi7ktofBsNGc4gx/eymN+q7DUoX6J5L/0M
VIfHaTExaQCJoU/EoDJQ//gESu0vdfkjj0yXvpMKdIFNj5RwpgUFJ9wkYDp08sQ5
mL7bMJ73tJSWoiM7R7dQJZBjViNgWSTlFl2SYf3Rp9RgzdivBnbX1SBlaFggXVHU
F1p41rLU0z8zDhEqpoIt3Q3JmE1cR+NZDj9VgiE1Cz30/5WT8GXiZLn92NZZMVWX
f/Og8Rho6n1hzJ3r69Hv+VP+ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAO7jrkK
byDBtBZiti1a0hOHS7f/MB8GA1UdIwQYMBaAFApDFjy+sb95jJzkHBxedKHIg3rG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVDMS9DQkU2QkM3NDBG
MDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYzbU1uT1FjSEY1MG9jaURl
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrTVdQTDZ4djNtTW5PUWNIRjUwb2NpRGVzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTVDMS9DQkU2QkM3NDBGMDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYz
bU1uT1FjSEY1MG9jaURlc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyQiZKRe3ixHGcB4MAhgYg7aE5fKgNF1AXwXopC/Lvh7fyX83aRvA0gjNq7lp
CsCMehFBSQuPxUMtKTJObip5cOPoaJYH5TEYnUHyKVjdcAXxF0VAykmAMw1UVtzG
qE5/Yi5mX0H+m2+eDCN3La6bomBNIuC2tPZj0DC69TAaOnBklcKWoo3HSQRfim0V
Ljz0t2q22LtnRzCMkyPJG0Ovj+cG7VAtKdZIDpFl6gWunNHvADO7HUZLlGrOx6zi
MroEkvqpQPlboZ17Z5eSXnps+TljH+6r6kTmTTr4LuA/bnKriZHF0lUmZRXntNCw
/RrcepRs9uB2/0sMa4NaV7dH6g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:37:40 2026 by rpki-client