
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json)
Hash identifier: VppqnxIylS41Xk6BZmJvxKRHFK+i/1ERsG5W7m2nAPw=
Subject key identifier: 3C:52:92:F9:C5:B6:FF:0E:E0:8D:09:B4:C4:4B:E3:F2:D3:7F:E3:4C
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial: 08E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
Manifest number: 08C1
Signing time: Thu 24 Sep 2026 20:33:05 +0000
Manifest this update: Thu 24 Sep 2026 20:33:04 +0000
Manifest next update: Thu 01 Oct 2026 20:33:04 +0000
Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: ajTvRyHBUnxEOQ12PAu3a+tLKc07jw5WS/C0ujl/jbE=)
2: 0BE76940057F11F1BBFA6CD7ADEE528E.roa (hash: 6ZHlxBuUbn16eSux/ogpwO6CFNWl05TS7wn4VyI0hlQ=)
3: E51AC37C169D11F18D04F8B992EE528E.roa (hash: mYlJdFIW8EjyX8ajfhqX1Cs+hajlapMlYM5UC79/gBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Validity
Not Before: Sep 24 20:33:04 2026 GMT
Not After : Oct 1 20:33:04 2026 GMT
Subject: CN=6ab58901-54f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:c6:83:3a:d8:f5:49:6b:f7:60:26:d7:58:
86:6b:43:f0:e8:ff:db:37:63:98:9e:d1:67:35:58:
62:1c:6e:58:46:50:14:60:2c:a7:a8:b8:f7:86:ed:
d9:53:e3:0d:4a:58:62:88:17:36:54:bd:91:53:62:
54:04:37:c2:cb:d5:19:48:16:31:7d:a6:d6:e4:61:
a8:25:54:0c:37:26:1b:57:e1:5f:f5:c0:5f:23:75:
ba:81:9d:8d:54:8a:eb:f7:8c:79:07:ec:dc:c4:f2:
83:fb:ce:4d:67:2c:97:3e:c2:2f:cb:01:38:a7:e3:
bd:9a:61:55:19:77:ea:a7:fb:b5:3b:00:96:83:1c:
28:f9:20:c4:fa:d1:94:76:4e:f6:f6:c9:d8:a9:32:
5b:44:05:75:07:80:47:46:00:d6:cd:1a:8c:85:da:
6a:6e:3f:21:7a:ef:72:bb:40:2c:3a:e7:66:ed:aa:
9c:94:c5:ac:d4:0f:62:7b:c4:e9:27:7b:5b:2f:8f:
6e:01:9c:d0:0f:9d:64:e3:8a:4f:6a:10:56:c7:1e:
2b:8e:5a:7a:91:b4:85:e2:ea:bd:32:bb:25:d9:f6:
c0:f3:ca:ef:7e:bc:79:1d:1b:ae:5e:1b:01:f2:66:
dc:d7:52:0a:e2:06:2a:2b:5a:82:b8:70:27:d9:7b:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:92:F9:C5:B6:FF:0E:E0:8D:09:B4:C4:4B:E3:F2:D3:7F:E3:4C
X509v3 Authority Key Identifier:
keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:32:e7:ec:cc:50:96:96:e8:ff:ea:6e:14:74:d4:19:13:a5:
48:41:75:45:44:c0:a9:77:92:95:cf:01:63:66:32:a3:07:db:
9c:e9:56:d2:23:f6:3a:ef:fe:3f:0c:0e:c6:1e:25:df:d9:60:
aa:18:48:39:e5:de:f7:84:fb:ff:2c:5b:13:e9:d3:b9:ce:f8:
c4:dc:2a:17:15:fa:90:1a:01:50:43:ef:a0:bb:a3:a9:11:fb:
36:45:04:86:3b:37:43:c3:f9:b1:d2:d0:3f:78:6b:ea:2f:ab:
ea:71:2c:5a:76:95:6a:dd:d3:cb:39:06:7d:b1:6f:d4:c2:e8:
7a:d5:d0:30:d8:0b:ce:49:c4:28:f1:9e:97:ee:6d:37:e9:78:
07:ed:00:1f:33:87:a1:1d:6d:8c:8c:15:a5:bb:f7:99:49:c5:
3d:da:2f:4b:1b:d3:f0:e8:51:4c:6e:33:67:36:d9:81:ad:2d:
ad:6d:55:20:43:b5:36:35:18:fa:50:2c:72:48:86:8d:69:e5:
53:c9:34:05:3c:81:73:cb:59:40:e6:bc:42:68:37:20:61:d7:
cf:7a:83:08:0f:e8:86:89:bc:bd:ff:70:f9:50:c2:2a:ec:14:
02:e5:ac:1c:1e:a9:11:37:f8:fb:0c:e8:d9:fc:96:de:39:4e:
0d:00:6b:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw
MEZDNTQ5NUUwHhcNMjYwOTI0MjAzMzA0WhcNMjYxMDAxMjAzMzA0WjAYMRYwFAYD
VQQDEw02YWI1ODkwMS01NGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApSzGgzrY9Ulr92Am11iGa0Pw6P/bN2OYntFnNVhiHG5YRlAUYCynqLj3hu3Z
U+MNSlhiiBc2VL2RU2JUBDfCy9UZSBYxfabW5GGoJVQMNyYbV+Ff9cBfI3W6gZ2N
VIrr94x5B+zcxPKD+85NZyyXPsIvywE4p+O9mmFVGXfqp/u1OwCWgxwo+SDE+tGU
dk729snYqTJbRAV1B4BHRgDWzRqMhdpqbj8heu9yu0AsOudm7aqclMWs1A9ie8Tp
J3tbL49uAZzQD51k44pPahBWxx4rjlp6kbSF4uq9Mrsl2fbA88rvfrx5HRuuXhsB
8mbc11IK4gYqK1qCuHAn2Xts6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxSkvnF
tv8O4I0JtMRL4/LTf+NMMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy
QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjhDMy9EMEUzM0ZBNDAyQzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRu
MWIxeXR1NlhDb0FBX0ZTVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARDLn7MxQlpbo/+puFHTUGROlSEF1RUTAqXeSlc8BY2YyowfbnOlW0iP2Ou/+
PwwOxh4l39lgqhhIOeXe94T7/yxbE+nTuc74xNwqFxX6kBoBUEPvoLujqRH7NkUE
hjs3Q8P5sdLQP3hr6i+r6nEsWnaVat3TyzkGfbFv1MLoetXQMNgLzknEKPGel+5t
N+l4B+0AHzOHoR1tjIwVpbv3mUnFPdovSxvT8OhRTG4zZzbZga0trW1VIEO1NjUY
+lAsckiGjWnlU8k0BTyBc8tZQOa8Qmg3IGHXz3qDCA/ohom8vf9w+VDCKuwUAuWs
HB6pETf4+wzo2fyW3jlODQBrhQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:52:28 2026 by rpki-client