
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
File: tOIgv84ikKotb4jteq4w3okVyUw.mft (raw, json)
Hash identifier: l9RsUYMNis/cFAhoYCBYjcq4wr9ycI6BbXdRhqkOmG4=
Subject key identifier: 20:50:38:78:DB:EC:78:F6:52:89:9B:39:77:4F:80:8E:02:81:05:BE
Authority key identifier: B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C
Certificate issuer: /CN=A91AC415/serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
Manifest number: 2F
Signing time: Fri 25 Sep 2026 03:34:27 +0000
Manifest this update: Fri 25 Sep 2026 03:34:26 +0000
Manifest next update: Fri 02 Oct 2026 03:34:26 +0000
Files and hashes: 1: tOIgv84ikKotb4jteq4w3okVyUw.crl (hash: nayrG/8y8boyvV8eto5ryOMDnUpZ46dof7UUp/bMTP0=)
2: 39D27246750511F1B847DD7F6CA30FBC.roa (hash: cia8IPAkix/MNyKAepXMq+8vc+QuoRzXeBNvwlaYww4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl
rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC415, serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
Validity
Not Before: Sep 25 03:34:26 2026 GMT
Not After : Oct 2 03:34:26 2026 GMT
Subject: CN=6ab5ebc3-2f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:5e:75:bd:0c:47:5e:39:f8:aa:76:dc:1a:
50:b1:87:e4:21:44:96:cc:f5:46:6c:a9:d4:9f:f4:
db:01:a9:66:98:61:31:36:1f:0a:40:ab:99:66:bf:
31:70:6c:b0:d9:0d:51:22:8f:b1:ca:04:0f:36:00:
76:f7:a4:2a:d6:3d:5f:1b:3d:7e:c0:db:33:4d:77:
32:23:7c:ff:8e:58:2a:62:65:cf:50:7b:39:fd:a9:
56:15:64:bc:1f:35:7a:5e:8d:29:99:55:fe:bd:cf:
5a:bf:78:df:e8:8d:8f:cc:7b:aa:5d:44:d6:4f:0c:
71:f3:8f:7f:18:ba:c7:1a:ef:67:67:5f:a4:4c:17:
77:7a:e3:c4:e1:b4:93:f0:68:83:37:09:5f:7a:28:
db:ef:58:e3:2b:4e:4e:c8:30:9f:a5:4e:41:0c:3a:
a0:76:9e:4f:51:2f:77:e1:ed:22:6f:4e:f3:bb:69:
3b:92:b7:2e:83:e5:52:eb:17:1c:4f:79:4f:9b:1e:
ba:4b:71:a2:73:18:59:f0:b5:fc:38:29:0d:67:24:
4f:53:44:83:fe:77:06:9e:76:92:2d:28:a1:5b:43:
ba:51:90:89:6f:f6:79:16:58:9e:7d:f3:32:a1:5d:
af:d4:01:c0:cb:18:77:58:ec:54:33:14:8f:21:2c:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:38:78:DB:EC:78:F6:52:89:9B:39:77:4F:80:8E:02:81:05:BE
X509v3 Authority Key Identifier:
keyid:B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:16:fb:8a:67:ce:3d:92:87:c1:02:58:46:b7:58:1c:47:3a:
9a:0f:a7:36:ae:c4:fd:c8:e7:60:b7:ba:41:31:61:c6:93:29:
06:30:93:18:0f:80:56:8b:3f:47:9f:96:94:6a:ea:19:20:15:
e5:86:b9:a1:07:9c:07:45:d2:66:e2:13:32:f1:9b:5e:03:ec:
dd:a8:77:15:d5:e1:07:26:4c:a4:c0:0d:21:cd:38:98:a8:20:
c0:7a:5d:c5:0b:28:da:dc:29:64:65:ba:d9:0f:7f:c9:ca:f4:
96:1c:19:86:9f:6a:47:f2:0a:46:94:e8:89:59:d7:0e:0a:ff:
94:3f:c3:fc:08:5a:40:86:46:8b:45:2d:fc:4e:d1:8f:1e:dd:
ac:20:a6:32:7f:c2:45:2e:be:89:b8:60:15:6f:9a:5a:8c:cd:
84:3d:2c:1e:0c:5c:d9:d7:a2:35:ca:75:b4:b4:e7:6e:96:77:
b1:97:3d:dd:b3:7d:19:2d:ce:cf:aa:2b:2f:ec:fb:d7:70:92:
c0:d6:1d:62:a6:51:3f:b8:f0:2c:9a:f1:b3:1a:1c:fe:5e:52:
52:64:2e:8b:3a:1d:de:56:4a:50:95:e0:d7:04:75:55:66:88:
4e:5a:b0:ee:5c:c1:46:c9:2e:90:03:10:1e:9d:87:c4:f9:3b:
0c:a5:e7:ca
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzQxNTExMC8GA1UEBRMoQjRFMjIwQkZDRTIyOTBBQTJENkY4OEVEN0FBRTMwREU4
OTE1Qzk0QzAeFw0yNjA5MjUwMzM0MjZaFw0yNjEwMDIwMzM0MjZaMBgxFjAUBgNV
BAMTDTZhYjVlYmMzLTJmM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw3l51vQxHXjn4qnbcGlCxh+QhRJbM9UZsqdSf9NsBqWaYYTE2HwpAq5lmvzFw
bLDZDVEij7HKBA82AHb3pCrWPV8bPX7A2zNNdzIjfP+OWCpiZc9Qezn9qVYVZLwf
NXpejSmZVf69z1q/eN/ojY/Me6pdRNZPDHHzj38Yusca72dnX6RMF3d648ThtJPw
aIM3CV96KNvvWOMrTk7IMJ+lTkEMOqB2nk9RL3fh7SJvTvO7aTuSty6D5VLrFxxP
eU+bHrpLcaJzGFnwtfw4KQ1nJE9TRIP+dwaedpItKKFbQ7pRkIlv9nkWWJ598zKh
Xa/UAcDLGHdY7FQzFI8hLAUlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIFA4eNvs
ePZSiZs5d0+AjgKBBb4wHwYDVR0jBBgwFoAUtOIgv84ikKotb4jteq4w3okVyUww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNDE1Lzc3QUFEQUFBNzRF
MTExRjE4RTQ1RkJBMzgwRUU1MjhFL3RPSWd2ODRpa0tvdGI0anRlcTR3M29rVnlV
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdE9JZ3Y4NGlrS290YjRqdGVxNHczb2tWeVV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
NDE1Lzc3QUFEQUFBNzRFMTExRjE4RTQ1RkJBMzgwRUU1MjhFL3RPSWd2ODRpa0tv
dGI0anRlcTR3M29rVnlVdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB5FvuKZ849kofBAlhGt1gcRzqaD6c2rsT9yOdgt7pBMWHGkykGMJMYD4BWiz9H
n5aUauoZIBXlhrmhB5wHRdJm4hMy8ZteA+zdqHcV1eEHJkykwA0hzTiYqCDAel3F
Cyja3ClkZbrZD3/JyvSWHBmGn2pH8gpGlOiJWdcOCv+UP8P8CFpAhkaLRS38TtGP
Ht2sIKYyf8JFLr6JuGAVb5pajM2EPSweDFzZ16I1ynW0tOdulnexlz3ds30ZLc7P
qisv7PvXcJLA1h1iplE/uPAsmvGzGhz+XlJSZC6LOh3eVkpQleDXBHVVZohOWrDu
XMFGyS6QAxAenYfE+TsMpefK
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:57:29 2026 by rpki-client