
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: uPsiwZxYBdNv0TODc9ynkAUG2mr+NyAI321ebex9PBY=
Subject key identifier: 18:B8:21:16:CD:B7:FA:05:55:67:5A:29:C5:91:F8:9F:B5:FB:E5:DC
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 150A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 1499
Signing time: Sat 26 Sep 2026 16:54:42 +0000
Manifest this update: Sat 26 Sep 2026 16:54:42 +0000
Manifest next update: Sat 03 Oct 2026 16:54:42 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: +PfjNDpYvGco5duT6bMvRyjlIgh20zMNVBI/jB6Gdag=)
2: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: wFgqxtjBGSnNz0V3JbbMZbJffl0S6xGyyA4P8cQ+F5Q=)
3: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: 3JrsTAYAGHynUAu7FXh7i6mKx20TisYQ8rxOPDDqL30=)
4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: XTo7hzo+YS5Mx8+cYSyBvlAGKzskb8sqYpNZv6UbZw0=)
5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=)
6: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wx0Bxj5s6AtaxYxKTNAOFbXAlN9uVO+TgC5goivQpV0=)
7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=)
8: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E=)
9: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: RY4kpnbvPpjFeHSCdD9BLyLv0qAmm+duLbNyMu+5+gA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5386 (0x150a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Sep 26 16:54:42 2026 GMT
Not After : Oct 3 16:54:42 2026 GMT
Subject: CN=6ab7f8d2-cb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:1b:0d:0a:2f:61:68:84:f8:3c:14:8b:e0:
34:2c:98:18:af:93:df:06:d6:82:5b:de:ed:c9:4b:
8b:27:0f:87:81:07:95:9a:e3:bf:e3:e6:6f:a2:72:
48:55:e0:4b:70:b0:f3:bf:9d:aa:de:d3:50:91:d1:
e7:8e:bc:ab:fe:d0:49:48:86:44:67:96:00:22:c8:
66:0c:30:df:c3:37:74:09:6f:5c:c5:1d:26:68:d0:
7f:89:99:e3:af:2d:0a:2c:3c:d2:a0:48:be:f1:34:
ac:7f:33:05:26:bc:0c:41:d6:15:e9:df:c0:4a:1b:
85:1a:4c:2f:be:cb:76:ad:0a:66:5d:1f:b4:30:1a:
eb:6b:96:90:d6:4b:69:eb:2d:09:98:33:7d:a7:86:
9b:65:d1:3f:2e:08:da:b5:8b:a2:29:3d:1a:fe:3e:
34:1b:07:e5:0c:cd:51:07:35:ea:73:da:b4:ef:dd:
b4:55:b7:0e:48:e4:b6:a3:d7:2a:88:37:8c:42:f3:
94:a3:ad:b8:6e:47:0d:57:a4:1c:79:6c:9f:2e:3c:
4e:a6:a2:19:19:e7:f8:6e:0c:b1:75:86:e3:36:e7:
d7:62:82:c5:6c:d1:dc:a3:71:1d:9c:0a:cd:34:d5:
42:18:6c:fb:46:c8:c1:7b:25:ed:6c:f1:66:82:0c:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B8:21:16:CD:B7:FA:05:55:67:5A:29:C5:91:F8:9F:B5:FB:E5:DC
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d2:b0:b8:1c:84:78:9a:35:e9:ad:ef:2a:aa:de:4a:57:70:
89:30:54:41:3e:ab:6c:a5:95:b3:f0:9f:87:a0:af:22:fa:3d:
93:09:3b:de:16:63:c5:fa:8e:80:48:bf:b6:c9:16:4b:9e:6a:
31:03:01:f7:68:4a:e6:46:a7:76:b0:d1:25:85:9e:0c:19:ff:
08:93:43:01:c6:fe:40:75:f2:f8:98:74:1a:1e:5f:f4:9a:80:
02:e1:24:4f:75:8d:1c:b4:3b:18:db:4d:80:77:69:e9:ce:de:
3b:a1:9c:51:c0:1a:57:ef:7b:d6:4d:0d:53:f3:1a:35:36:1d:
d9:1c:b9:b7:99:09:c9:df:64:4b:4a:bb:72:84:d2:ef:97:b1:
00:b6:6a:31:e9:dd:b8:8e:53:d4:4d:d4:37:ca:84:96:3d:e6:
39:f0:07:73:98:4f:a8:92:02:79:a5:f9:f7:a4:fe:e5:cd:78:
52:33:7d:42:ee:d6:ad:e9:1f:1a:1b:0f:50:06:a2:e3:32:30:
7b:58:4a:1a:a1:64:0d:5b:f0:1a:e4:21:18:48:52:10:90:75:
09:5a:f1:1e:b5:4c:78:d4:ed:df:35:52:63:37:20:c2:b6:e1:
8a:eb:81:81:69:c9:c6:ad:8f:f8:f5:42:f6:d0:b9:1b:e6:17:
6c:53:e6:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2
MTg0MUMzOUEwHhcNMjYwOTI2MTY1NDQyWhcNMjYxMDAzMTY1NDQyWjAYMRYwFAYD
VQQDEw02YWI3ZjhkMi1jYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TgbDQovYWiE+DwUi+A0LJgYr5PfBtaCW97tyUuLJw+HgQeVmuO/4+ZvonJI
VeBLcLDzv52q3tNQkdHnjryr/tBJSIZEZ5YAIshmDDDfwzd0CW9cxR0maNB/iZnj
ry0KLDzSoEi+8TSsfzMFJrwMQdYV6d/AShuFGkwvvst2rQpmXR+0MBrra5aQ1ktp
6y0JmDN9p4abZdE/LgjatYuiKT0a/j40GwflDM1RBzXqc9q07920VbcOSOS2o9cq
iDeMQvOUo624bkcNV6QceWyfLjxOpqIZGef4bgyxdYbjNufXYoLFbNHco3EdnArN
NNVCGGz7RsjBeyXtbPFmggxzAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBi4IRbN
t/oFVWdaKcWR+J+1++XcMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB
RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp
NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXNKwuByEeJo16a3vKqreSldwiTBUQT6rbKWVs/Cfh6CvIvo9kwk73hZjxfqO
gEi/tskWS55qMQMB92hK5kandrDRJYWeDBn/CJNDAcb+QHXy+Jh0Gh5f9JqAAuEk
T3WNHLQ7GNtNgHdp6c7eO6GcUcAaV+971k0NU/MaNTYd2Ry5t5kJyd9kS0q7coTS
75exALZqMenduI5T1E3UN8qElj3mOfAHc5hPqJICeaX596T+5c14UjN9Qu7Wrekf
GhsPUAai4zIwe1hKGqFkDVvwGuQhGEhSEJB1CVrxHrVMeNTt3zVSYzcgwrbhiuuB
gWnJxq2P+PVC9tC5G+YXbFPmKg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:33:59 2026 by rpki-client