
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier: eGoc6IVii3VmUYqyHkKPetld7pXQHDGPoyWALQcLlSo=
Subject key identifier: 26:99:5F:6A:55:F6:CA:24:7C:4B:65:00:2A:A1:22:E0:2E:2C:C8:65
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial: 0373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number: 0369
Signing time: Wed 23 Sep 2026 00:30:17 +0000
Manifest this update: Wed 23 Sep 2026 00:30:16 +0000
Manifest next update: Wed 30 Sep 2026 00:30:16 +0000
Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: R8sLEeqNoNEVk12EbLadmbjeBEiCm6IB8ejo/g+eVyE=)
2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: BM+ozPBqi+7jkDfiv4Ek3CSSWjwIGqheBBZo7D8CtKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883 (0x373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Validity
Not Before: Sep 23 00:30:16 2026 GMT
Not After : Sep 30 00:30:16 2026 GMT
Subject: CN=6ab31d98-b113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:47:3a:b1:9e:a1:1a:40:58:78:70:e0:5a:
a6:89:7e:46:b0:47:17:1b:12:67:12:21:de:10:a9:
bd:92:31:43:e9:e0:d8:a5:b7:80:ac:91:0b:43:24:
eb:3a:48:3f:c2:22:ef:14:ff:9e:94:0e:5a:d6:34:
09:7c:bb:94:09:5c:e3:73:81:f1:c2:37:14:3b:4b:
a2:ca:3b:fb:90:2c:e5:0d:80:55:a5:74:9c:34:32:
d7:e6:4b:94:7d:76:8a:fb:3e:98:d4:25:23:83:69:
d5:fa:ad:c9:45:09:85:1f:51:c5:30:f3:2b:b3:8a:
60:4f:88:60:2d:73:19:63:58:cc:56:4f:96:07:fd:
5e:f1:c9:cd:3d:f5:4b:55:38:89:b8:a2:9b:91:e5:
dc:e3:87:52:2b:cd:c8:f7:ef:6f:ab:c0:ad:ac:9c:
91:e4:a7:b0:36:87:d7:9b:be:03:de:b2:42:b9:a2:
a3:9b:58:8c:31:7c:43:30:77:21:88:64:be:be:f8:
2f:dd:a2:e3:35:13:1b:61:ef:f1:93:65:2f:60:45:
92:91:f4:b5:87:72:6c:ca:db:ac:3c:1a:fd:7b:58:
6c:f7:38:4e:fb:f9:2b:d9:43:0e:ef:bd:e3:fd:52:
5a:38:ac:c6:c4:6d:2b:ba:ef:c0:76:4c:56:2b:ad:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:5F:6A:55:F6:CA:24:7C:4B:65:00:2A:A1:22:E0:2E:2C:C8:65
X509v3 Authority Key Identifier:
keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:78:25:40:9f:dc:e5:61:ad:6d:5e:24:ef:18:a8:24:dc:1b:
28:83:ea:59:b0:b5:ee:3f:47:b4:30:40:50:66:a7:61:6e:08:
8b:c1:42:53:07:65:8e:a0:41:5e:88:9d:7f:9c:25:fc:c5:c8:
3f:f3:7f:cf:b8:2c:7e:04:2c:1f:c1:61:e7:f0:83:f3:94:55:
85:47:8a:b1:62:b4:77:51:6d:c9:c5:9e:99:62:f0:c2:5e:e8:
09:98:eb:33:d3:bb:24:06:d3:63:c4:28:5e:85:d7:f9:01:86:
a4:3b:86:b4:65:14:6e:cc:c8:c1:eb:04:83:3c:34:2d:66:69:
f9:22:8e:91:b9:22:9f:52:f9:61:e8:12:aa:a2:54:33:74:9e:
7b:7e:2c:e2:e0:b0:ce:b5:a8:c5:9c:2d:ce:88:43:68:67:19:
4c:44:c7:2f:a2:30:2d:87:23:83:7b:90:26:1d:14:f4:08:57:
1c:9d:95:cd:50:02:b5:40:4f:cc:10:bf:97:1e:19:b8:e8:be:
db:3c:22:bd:92:0d:45:3c:9c:72:76:78:67:da:01:dd:c6:67:
0a:d2:6c:03:84:24:95:b3:21:5b:4c:94:05:d5:6b:85:c4:6d:
4d:0d:9f:41:71:18:58:1f:ac:01:7a:48:01:6c:ec:c2:1e:77:
65:fb:78:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4
MTlENUVGMjMwHhcNMjYwOTIzMDAzMDE2WhcNMjYwOTMwMDAzMDE2WjAYMRYwFAYD
VQQDEw02YWIzMWQ5OC1iMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo55HOrGeoRpAWHhw4FqmiX5GsEcXGxJnEiHeEKm9kjFD6eDYpbeArJELQyTr
Okg/wiLvFP+elA5a1jQJfLuUCVzjc4HxwjcUO0uiyjv7kCzlDYBVpXScNDLX5kuU
fXaK+z6Y1CUjg2nV+q3JRQmFH1HFMPMrs4pgT4hgLXMZY1jMVk+WB/1e8cnNPfVL
VTiJuKKbkeXc44dSK83I9+9vq8CtrJyR5KewNofXm74D3rJCuaKjm1iMMXxDMHch
iGS+vvgv3aLjNRMbYe/xk2UvYEWSkfS1h3JsytusPBr9e1hs9zhO+/kr2UMO773j
/VJaOKzGxG0ruu/AdkxWK62BdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaZX2pV
9sokfEtlACqhIuAuLMhlMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy
RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3
eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h
ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAXglQJ/c5WGtbV4k7xioJNwbKIPqWbC17j9HtDBAUGanYW4Ii8FCUwdljqBB
Xoidf5wl/MXIP/N/z7gsfgQsH8Fh5/CD85RVhUeKsWK0d1FtycWemWLwwl7oCZjr
M9O7JAbTY8QoXoXX+QGGpDuGtGUUbszIwesEgzw0LWZp+SKOkbkin1L5YegSqqJU
M3See34s4uCwzrWoxZwtzohDaGcZTETHL6IwLYcjg3uQJh0U9AhXHJ2VzVACtUBP
zBC/lx4ZuOi+2zwivZINRTyccnZ4Z9oB3cZnCtJsA4QklbMhW0yUBdVrhcRtTQ2f
QXEYWB+sAXpIAWzswh53Zft4eQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:04:11 2026 by rpki-client