
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json)
Hash identifier: LbY+ROWjk/i0yWpc3IiOZ/NgtxAS9CLN8MD3F1frB0E=
Subject key identifier: AF:A0:5D:E6:A6:72:8C:C4:87:F7:25:F6:29:4A:91:64:74:2F:58:23
Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Certificate serial: 091F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
Manifest number: 090D
Signing time: Thu 24 Sep 2026 20:11:31 +0000
Manifest this update: Thu 24 Sep 2026 20:11:30 +0000
Manifest next update: Thu 01 Oct 2026 20:11:30 +0000
Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: Qc9SH/QD1dYyn6seoXzJ3hS+CCnOb5eLK2eIGq8LF4Q=)
2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Q2tDi7aDCqJfPbKlsvpv/Im3EMBA1tZp/jy9biarem0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Validity
Not Before: Sep 24 20:11:30 2026 GMT
Not After : Oct 1 20:11:30 2026 GMT
Subject: CN=6ab583f3-1503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:d2:f8:df:de:74:6e:95:12:2b:dc:82:ed:
86:e5:5c:f4:52:0e:9a:7b:c5:d9:26:7a:77:80:83:
a8:18:e4:9b:08:a1:20:a0:64:bb:be:16:d3:aa:a0:
fd:7e:8e:d1:5c:71:b3:f4:40:14:db:0c:22:e5:ce:
f6:c7:6d:d3:ff:8c:95:01:6b:9f:fb:a3:7d:93:06:
14:2f:8b:5b:2b:33:ec:14:7c:a1:28:b6:f1:45:c4:
e8:ea:c4:de:84:64:ef:5c:fb:a4:22:38:9c:dd:7b:
49:bf:86:a7:db:89:d2:c8:67:58:87:40:5d:47:e1:
03:dd:a5:3d:2f:e8:7b:33:ef:0e:f6:7f:f1:80:ad:
68:68:c8:ee:62:36:71:a2:b7:29:36:51:99:66:8f:
e6:9c:36:b0:98:7d:00:e2:e0:42:e7:9b:1d:fb:a6:
a5:0f:47:59:50:91:71:c7:28:2c:1a:cd:75:93:5e:
b2:f6:86:56:f6:d1:4c:30:27:2f:dd:08:29:12:d5:
30:65:a8:ce:9d:47:19:49:81:59:16:c8:45:0d:db:
82:e8:9e:9f:82:87:01:3a:67:43:57:4b:2e:f1:39:
45:3a:86:59:1a:a3:63:22:c4:cd:10:24:02:10:13:
c8:10:2b:89:ae:4a:bb:a0:92:04:ab:f5:91:cd:f0:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:5D:E6:A6:72:8C:C4:87:F7:25:F6:29:4A:91:64:74:2F:58:23
X509v3 Authority Key Identifier:
keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3e:75:5a:77:7f:f9:a7:6d:de:42:9c:96:79:e6:7d:3f:ec:
3c:9c:7b:46:ca:98:7e:18:df:bb:62:fb:0a:40:5b:83:16:84:
8a:69:9b:66:a5:48:df:05:8e:37:7c:e0:2d:30:12:77:6a:ae:
ad:8d:0c:85:81:4f:b0:09:d4:16:f0:f8:ca:73:ea:3d:93:c3:
4e:12:30:63:07:e4:b4:fd:4b:dc:fc:7d:0e:ae:6e:41:97:4e:
97:da:19:b1:61:4e:02:d2:49:ff:6e:6b:29:bc:4a:31:4b:8a:
96:2e:b1:03:cf:ac:fd:7f:11:36:38:44:f7:fa:be:48:b9:3e:
04:0d:0a:a6:cf:bd:a9:e4:16:14:b6:e0:1e:e9:da:eb:ef:a2:
1b:26:7f:a2:52:00:8d:18:84:41:47:6f:71:56:2b:bc:29:15:
65:17:95:a9:34:18:ba:da:dd:99:e2:84:4f:cb:fb:f3:8a:11:
8e:2c:25:65:24:ba:b9:df:88:2a:99:ff:24:c8:d9:73:20:17:
4c:e1:09:f7:98:7d:87:54:48:32:d4:52:66:05:07:3b:96:04:
3a:e0:0f:3e:2e:6a:c9:2d:90:6d:35:e6:a8:43:9d:c4:a3:14:
98:3b:d7:fd:3e:bc:13:3a:18:3c:97:bd:5d:f4:1d:87:3f:f3:
7c:d9:17:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ3NTAxMTAvBgNVBAUTKDY4NzYzRTkyQTJDMTc4NTMxNjc1NzY2NTExMDNGODFG
NTlBQ0RDMUEwHhcNMjYwOTI0MjAxMTMwWhcNMjYxMDAxMjAxMTMwWjAYMRYwFAYD
VQQDEw02YWI1ODNmMy0xNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnqLS+N/edG6VEivcgu2G5Vz0Ug6ae8XZJnp3gIOoGOSbCKEgoGS7vhbTqqD9
fo7RXHGz9EAU2wwi5c72x23T/4yVAWuf+6N9kwYUL4tbKzPsFHyhKLbxRcTo6sTe
hGTvXPukIjic3XtJv4an24nSyGdYh0BdR+ED3aU9L+h7M+8O9n/xgK1oaMjuYjZx
orcpNlGZZo/mnDawmH0A4uBC55sd+6alD0dZUJFxxygsGs11k16y9oZW9tFMMCcv
3QgpEtUwZajOnUcZSYFZFshFDduC6J6fgocBOmdDV0su8TlFOoZZGqNjIsTNECQC
EBPIECuJrkq7oJIEq/WRzfDFYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+gXeam
cozEh/cl9ilKkWR0L1gjMB8GA1UdIwQYMBaAFGh2PpKiwXhTFnV2ZRED+B9ZrNwa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDc1MC85MEQ1RUM1QURB
QkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVGTVdkWFpsRVFQNEgxbXMz
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FIWS1rcUxCZUZNV2RYWmxFUVA0SDFtczNCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDc1MC85MEQ1RUM1QURBQkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVG
TVdkWFpsRVFQNEgxbXMzQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALD51Wnd/+adt3kKclnnmfT/sPJx7RsqYfhjfu2L7CkBbgxaEimmbZqVI3wWO
N3zgLTASd2qurY0MhYFPsAnUFvD4ynPqPZPDThIwYwfktP1L3Px9Dq5uQZdOl9oZ
sWFOAtJJ/25rKbxKMUuKli6xA8+s/X8RNjhE9/q+SLk+BA0Kps+9qeQWFLbgHuna
6++iGyZ/olIAjRiEQUdvcVYrvCkVZReVqTQYutrdmeKET8v784oRjiwlZSS6ud+I
Kpn/JMjZcyAXTOEJ95h9h1RIMtRSZgUHO5YEOuAPPi5qyS2QbTXmqEOdxKMUmDvX
/T68EzoYPJe9XfQdhz/zfNkXfQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:44:17 2026 by rpki-client