
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json)
Hash identifier: vVDnl7oGzYZO5kjfmohqoNwH4t4q+xlQOWYxmMvLNtQ=
Subject key identifier: 4F:1E:6B:C7:81:13:65:45:C6:49:0A:90:04:A7:E7:48:F7:BF:68:7C
Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
Manifest number: 023D
Signing time: Fri 25 Sep 2026 02:37:23 +0000
Manifest this update: Fri 25 Sep 2026 02:37:23 +0000
Manifest next update: Fri 02 Oct 2026 02:37:23 +0000
Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: GLf4F2ufJ2ocSy4VzeBkS9QjxFih7boJ63SdK5Uvdmo=)
2: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: DT8F2vSiTnDZ92tEugXg46ga5AYrQXf1PZTpjRK3m7c=)
3: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Validity
Not Before: Sep 25 02:37:23 2026 GMT
Not After : Oct 2 02:37:23 2026 GMT
Subject: CN=6ab5de63-8f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:02:31:ab:54:d2:fc:b8:87:b1:9e:0e:7c:
99:76:f3:ac:89:2b:0d:cb:eb:60:7b:1c:ad:5a:b4:
20:d4:a1:f8:10:05:f9:92:13:74:6e:23:58:96:52:
eb:63:88:41:5b:fb:eb:07:ac:83:da:1d:9c:6c:b5:
9e:b3:11:43:78:06:8b:f8:d1:82:31:a5:46:39:5c:
a5:46:dc:fa:08:72:db:af:97:c1:c1:cb:06:df:db:
91:e9:03:b3:bd:c4:0d:a5:17:35:f2:04:19:0e:fa:
1a:c4:38:c3:a0:94:f6:59:99:95:53:26:5f:58:9f:
3d:e7:43:5b:f1:2e:8c:f7:8a:68:e4:9d:cf:06:b3:
d9:89:d5:22:6d:84:76:7d:12:f0:1a:bc:d0:24:61:
c9:fc:fc:85:a3:d8:0a:db:b9:df:dd:44:e6:e8:c8:
79:7b:fb:7c:b8:ab:3e:23:ed:e8:12:08:4e:c4:f4:
ed:d1:51:5e:5d:b2:1b:eb:13:58:95:2e:77:c2:33:
53:ef:81:c5:46:6b:56:ba:57:56:e4:cc:93:79:b7:
e3:29:71:b6:22:86:82:8f:10:a5:50:3b:f5:69:1c:
b7:a8:0b:df:5a:4c:03:97:c6:95:6f:d3:15:5e:fe:
29:2d:10:85:64:22:06:d2:01:cd:ec:dc:fa:0d:10:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1E:6B:C7:81:13:65:45:C6:49:0A:90:04:A7:E7:48:F7:BF:68:7C
X509v3 Authority Key Identifier:
keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:83:ad:ad:89:6a:8d:56:ab:f3:95:ab:77:16:25:ba:5a:
4c:36:70:9d:56:a7:67:76:d4:8e:d5:56:a1:2e:d0:9a:e8:7f:
96:60:be:67:9a:01:b1:47:7f:d9:7e:94:d5:af:a7:a8:a0:34:
fb:96:06:68:1c:da:d0:c9:b2:b1:30:10:0e:46:ce:10:23:50:
9f:9a:0a:a0:b3:0a:1d:13:69:60:c9:ac:4c:a0:24:e2:71:44:
67:22:59:18:27:2b:f3:ff:1a:eb:59:d0:ac:41:12:44:16:21:
31:7d:aa:44:5d:9d:90:32:bf:56:b0:fb:83:42:47:ac:d8:a0:
26:a7:c7:2d:c1:fc:c7:85:42:00:57:d8:d8:4b:b6:1e:41:54:
a2:14:8a:7d:4a:52:56:94:3c:6d:75:c3:5a:73:55:41:c3:aa:
e9:a5:e8:cc:e1:9b:23:56:4a:48:23:58:15:46:6e:44:f3:58:
ae:91:5c:fd:32:20:e9:78:9c:56:09:60:15:6d:7e:80:49:38:
c4:0b:40:d4:a0:e4:3b:4c:a6:06:88:e9:53:43:ec:d7:8a:1d:
c8:b6:6a:a2:e9:62:b1:c4:07:2a:6b:f4:55:81:cc:fa:d6:fe:
17:fe:c9:f9:e9:38:ac:32:f6:20:b7:76:2f:df:5a:d4:04:9d:
98:ac:26:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF
RjBCOUJGQzIwHhcNMjYwOTI1MDIzNzIzWhcNMjYxMDAyMDIzNzIzWjAYMRYwFAYD
VQQDEw02YWI1ZGU2My04ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySUCMatU0vy4h7GeDnyZdvOsiSsNy+tgexytWrQg1KH4EAX5khN0biNYllLr
Y4hBW/vrB6yD2h2cbLWesxFDeAaL+NGCMaVGOVylRtz6CHLbr5fBwcsG39uR6QOz
vcQNpRc18gQZDvoaxDjDoJT2WZmVUyZfWJ8950Nb8S6M94po5J3PBrPZidUibYR2
fRLwGrzQJGHJ/PyFo9gK27nf3UTm6Mh5e/t8uKs+I+3oEghOxPTt0VFeXbIb6xNY
lS53wjNT74HFRmtWuldW5MyTebfjKXG2IoaCjxClUDv1aRy3qAvfWkwDl8aVb9MV
Xv4pLRCFZCIG0gHN7Nz6DRDX2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8ea8eB
E2VFxkkKkASn50j3v2h8MB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz
NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB
RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnsaDra2Jao1Wq/OVq3cWJbpaTDZwnVanZ3bUjtVWoS7Qmuh/lmC+Z5oBsUd/
2X6U1a+nqKA0+5YGaBza0MmysTAQDkbOECNQn5oKoLMKHRNpYMmsTKAk4nFEZyJZ
GCcr8/8a61nQrEESRBYhMX2qRF2dkDK/VrD7g0JHrNigJqfHLcH8x4VCAFfY2Eu2
HkFUohSKfUpSVpQ8bXXDWnNVQcOq6aXozOGbI1ZKSCNYFUZuRPNYrpFc/TIg6Xic
VglgFW1+gEk4xAtA1KDkO0ymBojpU0Ps14odyLZqouliscQHKmv0VYHM+tb+F/7J
+ek4rDL2ILd2L99a1ASdmKwm3A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:58:41 2026 by rpki-client