
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
File: b814Gaj5P69A0OOH8htG6E3p1ws.mft (raw, json)
Hash identifier: q5mDUeBfqzOrJ7b7GU5Pq1oU/aCBdDUp27kEKUnt1Hw=
Subject key identifier: 05:14:1B:30:B4:F7:DC:64:94:D9:27:C3:B7:1A:10:6C:32:A5:57:20
Authority key identifier: 6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
Certificate issuer: /CN=A91B02A2/serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Certificate serial: 024E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
Manifest number: 023C
Signing time: Fri 13 Nov 2026 02:43:36 +0000
Manifest this update: Fri 13 Nov 2026 02:43:35 +0000
Manifest next update: Fri 20 Nov 2026 02:43:35 +0000
Files and hashes: 1: b814Gaj5P69A0OOH8htG6E3p1ws.crl (hash: usaJ6Jee/o/3MWwABquDixnOFY/CQdk7cB2v+nxsddA=)
2: 5D98833C77EC11EEA06F373BC4F9AE02.roa (hash: CsyZRvBZjt0dHAYffGH8YRNAMUomFdDHqloAHzosLdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 02:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B02A2, serialNumber=6FCD7819A8F93FAF40D0E387F21B46E84DE9D70B
Validity
Not Before: Nov 13 02:43:35 2026 GMT
Not After : Nov 20 02:43:35 2026 GMT
Subject: CN=6af67958-1919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:bc:66:7a:b0:12:86:e1:f1:53:ea:4b:72:
70:d0:b2:09:36:25:8e:37:e6:35:aa:55:98:70:b3:
84:c8:aa:d5:45:39:42:f0:d9:01:62:13:dd:b4:c5:
2d:a8:00:0b:5a:63:d5:2d:fc:d4:c5:35:4c:d5:ab:
84:88:34:35:ce:d8:fe:41:64:f7:2c:a4:7a:68:25:
31:4d:89:69:d7:15:d3:f4:66:f0:79:9b:3c:1a:28:
60:23:49:07:6f:53:15:3b:1b:ce:b0:33:71:8b:7b:
73:58:81:c3:60:90:bd:35:1f:99:86:3e:59:dc:96:
8b:1c:57:cc:46:aa:63:d6:93:75:18:d4:14:65:f5:
2b:f0:88:5c:9e:0a:c8:d1:e2:02:2b:d8:ce:c4:e9:
c1:0e:04:a7:bf:cc:77:80:e3:10:00:79:8f:db:51:
d2:a9:6d:bc:06:c9:fe:cd:29:16:8f:55:a0:30:e1:
ca:29:71:6e:ac:e3:f9:de:c0:f1:c8:a4:e7:c5:69:
da:bf:ae:c4:41:94:0f:08:02:13:62:99:9c:bd:1f:
3f:b3:a0:79:fd:76:9f:29:0e:6e:0f:c1:79:fa:45:
d3:2b:62:0c:ec:d1:cf:23:c2:9c:e4:80:49:6d:e7:
17:99:78:39:ae:5d:23:3e:78:5e:e5:99:20:65:1f:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:14:1B:30:B4:F7:DC:64:94:D9:27:C3:B7:1A:10:6C:32:A5:57:20
X509v3 Authority Key Identifier:
keyid:6F:CD:78:19:A8:F9:3F:AF:40:D0:E3:87:F2:1B:46:E8:4D:E9:D7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b814Gaj5P69A0OOH8htG6E3p1ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B02A2/EFD2158477EB11EE93B68B3AC4F9AE02/b814Gaj5P69A0OOH8htG6E3p1ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d0:38:96:a1:ed:b7:03:c8:f9:7f:0d:53:bf:d9:2e:9b:d6:
ab:5a:71:16:e8:a0:f6:c4:1c:d3:27:9f:8a:be:b7:68:4c:b5:
9c:4e:d0:8b:60:4e:81:38:31:62:db:63:bd:aa:9d:ec:34:2d:
0c:98:01:63:3d:e3:bd:ed:23:ba:67:21:fc:2d:63:b7:ca:42:
3c:00:e2:a3:66:7a:0b:be:1c:5f:b4:b9:2f:bf:a7:b4:c8:93:
c7:39:7f:62:ed:57:9f:6e:f7:eb:a6:b5:f9:aa:a6:b1:49:64:
2d:6c:1f:53:7d:b5:5e:32:44:3d:16:b4:68:82:41:2c:1b:45:
15:d3:af:84:da:ce:45:94:64:81:86:f6:6d:45:38:26:98:7c:
2b:5f:0d:4b:b6:05:43:a2:6b:02:dc:22:18:85:70:a5:ec:17:
13:2b:59:cb:2a:53:5f:84:f1:d9:f2:80:95:38:ab:44:96:7d:
9a:62:29:aa:a3:35:3f:36:b5:60:87:b1:c8:c7:b1:f4:0c:0e:
ec:e9:fd:0b:b3:3b:ec:8e:83:db:00:dd:82:ec:23:79:aa:65:
9f:09:3b:f9:09:5d:d5:4e:bb:db:6d:c0:73:41:7f:e8:1f:b7:
77:82:09:83:e2:0c:16:7b:b9:cb:72:71:95:6a:9d:5d:b2:8c:
6a:a7:01:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAyQTIxMTAvBgNVBAUTKDZGQ0Q3ODE5QThGOTNGQUY0MEQwRTM4N0YyMUI0NkU4
NERFOUQ3MEIwHhcNMjYxMTEzMDI0MzM1WhcNMjYxMTIwMDI0MzM1WjAYMRYwFAYD
VQQDEw02YWY2Nzk1OC0xOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl+G8ZnqwEobh8VPqS3Jw0LIJNiWON+Y1qlWYcLOEyKrVRTlC8NkBYhPdtMUt
qAALWmPVLfzUxTVM1auEiDQ1ztj+QWT3LKR6aCUxTYlp1xXT9GbweZs8GihgI0kH
b1MVOxvOsDNxi3tzWIHDYJC9NR+Zhj5Z3JaLHFfMRqpj1pN1GNQUZfUr8IhcngrI
0eICK9jOxOnBDgSnv8x3gOMQAHmP21HSqW28Bsn+zSkWj1WgMOHKKXFurOP53sDx
yKTnxWnav67EQZQPCAITYpmcvR8/s6B5/XafKQ5uD8F5+kXTK2IM7NHPI8Kc5IBJ
becXmXg5rl0jPnhe5ZkgZR8PqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUUGzC0
99xklNknw7caEGwypVcgMB8GA1UdIwQYMBaAFG/NeBmo+T+vQNDjh/IbRuhN6dcL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDJBMi9FRkQyMTU4NDc3
RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2OUEwT09IOGh0RzZFM3Ax
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I4MTRHYWo1UDY5QTBPT0g4aHRHNkUzcDF3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDJBMi9FRkQyMTU4NDc3RUIxMUVFOTNCNjhCM0FDNEY5QUUwMi9iODE0R2FqNVA2
OUEwT09IOGh0RzZFM3Axd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnNA4lqHttwPI+X8NU7/ZLpvWq1pxFuig9sQc0yefir63aEy1nE7Qi2BOgTgx
Yttjvaqd7DQtDJgBYz3jve0jumch/C1jt8pCPADio2Z6C74cX7S5L7+ntMiTxzl/
Yu1Xn27366a1+aqmsUlkLWwfU321XjJEPRa0aIJBLBtFFdOvhNrORZRkgYb2bUU4
Jph8K18NS7YFQ6JrAtwiGIVwpewXEytZyypTX4Tx2fKAlTirRJZ9mmIpqqM1Pza1
YIexyMex9AwO7On9C7M77I6D2wDdguwjeaplnwk7+Qld1U67223Ac0F/6B+3d4IJ
g+IMFnu5y3JxlWqdXbKMaqcBmg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:05:49 2026 by rpki-client