
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
File: iUKJrUDufmJvXNgvzsVAbbkeHnE.mft (raw, json)
Hash identifier: LBKAOIneHcQt/vHAZiN5deTcXiYvvnw+4rCRZtJlkbE=
Subject key identifier: 3D:FE:3C:C3:F1:58:AB:2A:4C:AD:69:C5:54:5E:7E:DF:54:6A:DC:AA
Authority key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71
Certificate issuer: /CN=A91B9790/serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
Manifest number: 0194
Signing time: Fri 25 Sep 2026 04:28:45 +0000
Manifest this update: Fri 25 Sep 2026 04:28:45 +0000
Manifest next update: Fri 02 Oct 2026 04:28:45 +0000
Files and hashes: 1: iUKJrUDufmJvXNgvzsVAbbkeHnE.crl (hash: bZktr7tcjfhsP2YiPv4B10gNeMXZsPUs+ZT41AMoJqs=)
2: 9EC3DA0CABC311F0B5C5583DC4F9AE02.roa (hash: oQRja5kNE1xgzFCqir1541pX0ir8ZOqbUXiW5IO5uBg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl
rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71
Validity
Not Before: Sep 25 04:28:45 2026 GMT
Not After : Oct 2 04:28:45 2026 GMT
Subject: CN=6ab5f87d-2990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:77:a1:0a:11:74:b6:5d:a2:36:c9:5f:18:
1c:2f:95:50:dd:41:11:84:f8:50:57:ea:ac:b5:3b:
d9:9f:7e:56:fb:fa:1c:0c:08:60:22:31:bb:07:7a:
32:65:d4:3d:5a:fa:e0:a8:cb:8f:9a:ea:3d:c6:b2:
59:7f:a7:cd:a2:df:9a:8d:31:2a:c6:bc:32:a9:c3:
cc:4a:85:cf:23:5f:2d:83:a6:33:b3:b8:7f:b9:8a:
13:3c:e5:ae:7f:8a:4e:33:12:66:0d:c3:12:a5:48:
8a:1b:ed:db:af:43:3c:69:b8:54:4e:b2:88:87:52:
a8:06:dd:0b:34:cd:e6:d9:a3:42:5b:14:77:b9:1f:
ca:d5:13:c6:4f:08:95:4e:a4:23:55:3c:60:77:4e:
16:8f:0d:d0:68:9e:09:49:8d:1a:11:54:1d:38:59:
38:c3:8e:35:58:68:05:4b:d5:18:aa:a6:0a:db:21:
f9:00:f8:44:fb:cf:dd:d3:5b:b4:f7:ed:95:7f:71:
c9:92:7e:3e:13:4a:84:6e:94:f9:69:7f:f8:f8:36:
cf:cb:c4:46:d7:c9:ca:a3:73:45:ce:ea:4c:87:f7:
66:df:66:b7:d7:36:e7:9e:5c:c1:94:0f:01:7f:22:
2b:1c:b5:ba:10:54:fd:62:35:15:60:2d:86:d2:51:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:3C:C3:F1:58:AB:2A:4C:AD:69:C5:54:5E:7E:DF:54:6A:DC:AA
X509v3 Authority Key Identifier:
keyid:89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:6f:53:05:52:73:09:f1:86:f6:0d:76:0a:9a:ca:18:a0:3c:
e3:58:51:9b:a9:06:83:f4:1f:74:77:af:88:9c:f2:af:74:c5:
89:ca:76:28:56:79:22:ff:13:59:f4:c2:d3:d8:24:96:81:ec:
31:80:b6:8f:51:65:e5:e3:7e:dc:25:1b:14:85:83:98:23:c8:
6a:73:c3:13:a7:5c:73:bc:35:3f:bf:4a:75:8c:6c:69:e6:5c:
0a:73:fe:e9:2c:8b:e4:3f:53:70:19:3d:36:9d:71:41:32:e2:
e4:58:f0:1a:89:06:e0:55:c4:89:93:74:0a:58:6d:76:dc:c7:
03:37:00:be:27:20:af:c5:a3:f0:73:66:2e:e9:eb:05:97:21:
52:87:b8:be:50:bd:a3:74:c3:aa:ee:5b:e8:be:12:a2:5d:e0:
0d:d8:eb:9d:cc:6f:87:2f:14:59:3b:dd:a3:3e:52:1d:ec:db:
ed:86:04:67:55:cc:38:3c:39:d6:b6:b3:ca:c4:35:3b:9b:65:
f4:3a:22:ef:2e:00:88:6f:a5:c1:43:6a:44:3f:ee:37:79:cb:
29:d4:66:9c:02:99:b8:cc:33:fe:95:d4:99:48:a5:8a:8b:b6:
49:b4:46:df:bb:5e:a1:fd:43:84:66:26:72:55:21:a3:ca:24:
d2:7b:07:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjk3OTAxMTAvBgNVBAUTKDg5NDI4OUFENDBFRTdFNjI2RjVDRDgyRkNFQzU0MDZE
QjkxRTFFNzEwHhcNMjYwOTI1MDQyODQ1WhcNMjYxMDAyMDQyODQ1WjAYMRYwFAYD
VQQDEw02YWI1Zjg3ZC0yOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3UF3oQoRdLZdojbJXxgcL5VQ3UERhPhQV+qstTvZn35W+/ocDAhgIjG7B3oy
ZdQ9WvrgqMuPmuo9xrJZf6fNot+ajTEqxrwyqcPMSoXPI18tg6Yzs7h/uYoTPOWu
f4pOMxJmDcMSpUiKG+3br0M8abhUTrKIh1KoBt0LNM3m2aNCWxR3uR/K1RPGTwiV
TqQjVTxgd04Wjw3QaJ4JSY0aEVQdOFk4w441WGgFS9UYqqYK2yH5APhE+8/d01u0
9+2Vf3HJkn4+E0qEbpT5aX/4+DbPy8RG18nKo3NFzupMh/dm32a31zbnnlzBlA8B
fyIrHLW6EFT9YjUVYC2G0lHRSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3+PMPx
WKsqTK1pxVReft9UatyqMB8GA1UdIwQYMBaAFIlCia1A7n5ib1zYL87FQG25Hh5x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTc5MC83MTgwNUJBQzVB
RTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVEdWZtSnZYTmd2enNWQWJia2VI
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lVS0pyVUR1Zm1KdlhOZ3Z6c1ZBYmJrZUhuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTc5MC83MTgwNUJBQzVBRTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVEdWZt
SnZYTmd2enNWQWJia2VIbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv29TBVJzCfGG9g12CprKGKA841hRm6kGg/QfdHeviJzyr3TFicp2KFZ5Iv8T
WfTC09gkloHsMYC2j1Fl5eN+3CUbFIWDmCPIanPDE6dcc7w1P79KdYxsaeZcCnP+
6SyL5D9TcBk9Np1xQTLi5FjwGokG4FXEiZN0ClhtdtzHAzcAvicgr8Wj8HNmLunr
BZchUoe4vlC9o3TDqu5b6L4Sol3gDdjrncxvhy8UWTvdoz5SHezb7YYEZ1XMODw5
1razysQ1O5tl9Doi7y4AiG+lwUNqRD/uN3nLKdRmnAKZuMwz/pXUmUiliou2SbRG
37teof1DhGYmclUho8ok0nsH+A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:36:24 2026 by rpki-client