
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier: oYJi5e3Yk9LslnwtSCA5O7y9sAt7mcp2eYOGdlEstA0=
Subject key identifier: 15:ED:CD:06:CA:29:41:F6:EE:42:A2:93:0D:61:A5:C0:AA:57:AB:92
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 06EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number: 06CB
Signing time: Tue 22 Sep 2026 22:06:48 +0000
Manifest this update: Tue 22 Sep 2026 22:06:47 +0000
Manifest next update: Tue 29 Sep 2026 22:06:47 +0000
Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: eMU/i+HmNEmXDvcq/lq2lmydc6XVs09/nVIFMn05By0=)
2: FB1416BA9C7611F1B1FB27074F11F970.roa (hash: fJHw3KHbw5JqhCL5X32Hu7gkVE/D7z03jBEZkid9WR4=)
3: AFC035669D3111F1992D1A564911F970.roa (hash: te+/7chBtqWirQ3Sy8cdSUzT1iaVFXNRVp+AFNi5gt4=)
4: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: nnDH6rvORkwCmJUa2SHMfnPNgo7zw9YFjWX6Zaktv3k=)
5: 319A6658973111F19629FCFF3211F970.roa (hash: ginLpbAUhhIDR7OXh5vCfxR5+ivMC1F/qzgijOsdkzg=)
6: 55701668973111F1A86A43863311F970.roa (hash: 0fnwHD1e8+xguealFicHUassztcIDudaKbeSOw/qYWs=)
7: DF8DD8A098C411F19E6AA2476D11F970.roa (hash: AHI17Y99lS0m1pu4f9i1rlfgUH330F3GganWYeEqayY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1770 (0x6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Sep 22 22:06:47 2026 GMT
Not After : Sep 29 22:06:47 2026 GMT
Subject: CN=6ab2fbf7-b48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:f6:b3:b3:ad:93:9c:50:e3:23:f8:a5:d3:
4c:ec:aa:7e:9f:bc:66:f3:36:29:6c:d9:5f:0d:d2:
07:f2:bd:8a:85:e1:22:a2:2a:15:a6:61:23:07:66:
51:19:8c:84:9e:51:f8:a9:c9:a2:01:39:f7:f2:a5:
73:9b:d0:4e:a0:49:ac:f0:5d:23:1a:19:8b:30:9e:
da:8a:82:df:96:0c:c7:46:4d:84:4e:f6:c6:55:bc:
bf:51:0a:c5:e5:45:b2:ad:9a:b7:30:26:9d:c3:1f:
40:c1:3f:9e:4b:12:40:c4:06:6a:86:ac:43:d7:2e:
e3:47:75:e9:be:9d:fd:7d:87:ad:4d:cf:4e:89:11:
bb:7b:f0:c7:47:20:54:db:0e:46:3b:33:cc:31:79:
d3:7d:f4:cf:e6:bc:6d:d1:b1:f1:42:e2:8e:9d:8c:
9e:2d:a3:b1:0c:29:74:19:06:71:b6:ff:e1:5e:85:
63:da:d1:10:2c:e5:8a:6f:75:d2:94:1c:00:73:d4:
df:f1:a6:51:62:1b:b6:c2:e5:bf:88:36:5c:26:68:
8d:19:eb:89:fc:a1:87:66:a1:aa:54:f4:ec:a2:f4:
fa:3f:89:71:54:73:ab:0f:ea:66:e3:58:fe:48:0c:
bb:6e:5b:95:8c:2e:b2:da:11:65:a1:06:c3:74:6e:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:ED:CD:06:CA:29:41:F6:EE:42:A2:93:0D:61:A5:C0:AA:57:AB:92
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d3:cd:f2:f7:cc:f9:3f:b8:67:06:85:ed:c4:cc:71:33:4f:
58:d8:d6:c5:c9:34:ac:bf:8b:90:c4:89:65:8e:90:c9:1b:6a:
a5:9a:51:78:f0:a9:d9:24:e1:19:fd:1b:3f:aa:90:31:ab:2a:
4a:25:79:0a:e6:b6:39:30:c9:df:f3:74:89:b2:2e:19:24:90:
dc:58:81:24:f9:9f:ba:d9:cd:e5:54:b7:1a:e0:b3:21:29:bb:
9f:3f:00:2d:46:6e:f2:b1:33:dc:e6:0e:02:d0:45:80:74:5e:
24:f7:f1:27:d6:9c:58:65:20:51:53:16:c8:5d:53:d1:9a:66:
af:c2:8f:65:e8:33:d9:53:64:ca:44:19:d2:34:74:f0:e8:9c:
6d:39:32:01:19:a8:77:a8:6d:97:ed:6f:29:2d:72:38:94:fd:
5a:66:83:cf:0b:ae:58:26:ce:c2:b2:ba:67:ef:3b:e0:e2:bb:
43:0c:d0:67:37:c0:ab:ce:e6:fb:83:0d:d5:14:e4:58:65:a7:
ca:9d:6b:09:58:38:49:3e:25:35:0e:b2:6a:f2:5c:f7:d9:a5:
10:5b:6e:3e:b8:8e:b4:85:b9:07:73:68:8f:aa:38:4e:b6:b2:
bb:2b:08:d2:6d:60:d3:7b:22:f2:c7:54:89:60:9f:b6:aa:7b:
b2:6c:86:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz
QzI1OUMxOUYwHhcNMjYwOTIyMjIwNjQ3WhcNMjYwOTI5MjIwNjQ3WjAYMRYwFAYD
VQQDEw02YWIyZmJmNy1iNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjl72s7Otk5xQ4yP4pdNM7Kp+n7xm8zYpbNlfDdIH8r2KheEioioVpmEjB2ZR
GYyEnlH4qcmiATn38qVzm9BOoEms8F0jGhmLMJ7aioLflgzHRk2ETvbGVby/UQrF
5UWyrZq3MCadwx9AwT+eSxJAxAZqhqxD1y7jR3Xpvp39fYetTc9OiRG7e/DHRyBU
2w5GOzPMMXnTffTP5rxt0bHxQuKOnYyeLaOxDCl0GQZxtv/hXoVj2tEQLOWKb3XS
lBwAc9Tf8aZRYhu2wuW/iDZcJmiNGeuJ/KGHZqGqVPTsovT6P4lxVHOrD+pm41j+
SAy7bluVjC6y2hFloQbDdG4NswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXtzQbK
KUH27kKikw1hpcCqV6uSMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3
ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD
dUtITlJYZVRYazg4Slp3WjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1tPN8vfM+T+4ZwaF7cTMcTNPWNjWxck0rL+LkMSJZY6QyRtqpZpRePCp2STh
Gf0bP6qQMasqSiV5Cua2OTDJ3/N0ibIuGSSQ3FiBJPmfutnN5VS3GuCzISm7nz8A
LUZu8rEz3OYOAtBFgHReJPfxJ9acWGUgUVMWyF1T0Zpmr8KPZegz2VNkykQZ0jR0
8OicbTkyARmod6htl+1vKS1yOJT9WmaDzwuuWCbOwrK6Z+874OK7QwzQZzfAq87m
+4MN1RTkWGWnyp1rCVg4ST4lNQ6yavJc99mlEFtuPriOtIW5B3Noj6o4TrayuysI
0m1g03si8sdUiWCftqp7smyGXw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:03:23 2026 by rpki-client