
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File: m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier: wWmmi6vvZRD3mpOJjtbXOXz26XB4xKer0e89gd12gNw=
Subject key identifier: 59:80:2C:FE:47:11:A4:1C:F1:9A:3C:77:7E:92:1D:8B:A6:28:49:A1
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number: 0CA2
Signing time: Thu 24 Sep 2026 19:50:10 +0000
Manifest this update: Thu 24 Sep 2026 19:50:10 +0000
Manifest next update: Thu 01 Oct 2026 19:50:10 +0000
Files and hashes: 1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: 7xs5NeFy/6RfV835cA+lxBThQDgcdf0B7bJ3L9NPBTU=)
2: 5EB1F538B81611F190F6B0883811F970.roa (hash: AH6RwM13T7twAonrOktDKiu6jrp6+Tk5H+lvF6NM5yw=)
3: 3A703F22B81611F1BC709C823811F970.roa (hash: OmlOqd3zmhQvtJlIS9YKbkGy3BroYl5GUWxIbxDX+3c=)
4: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: LF2bKi2VQJjX8hqIZIkNiAJIYK/BhThU4HGuIaSHpaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Validity
Not Before: Sep 24 19:50:10 2026 GMT
Not After : Oct 1 19:50:10 2026 GMT
Subject: CN=6ab57ef2-19b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6a:94:5b:a8:21:6e:72:14:70:9e:26:56:a1:
81:d4:9d:59:7b:fd:a4:14:18:64:25:97:8f:f9:69:
f5:91:2a:ce:63:58:98:fa:6e:7e:89:84:2c:ca:f3:
63:d6:46:b3:d3:13:bf:a5:d8:6b:20:f7:d6:0b:77:
b9:9f:ad:04:ac:0b:60:54:14:46:d4:54:f7:55:04:
5c:66:32:62:a5:97:ca:a0:89:ac:8d:bc:91:ed:ae:
ef:aa:8a:5a:8c:a2:fd:24:27:56:7b:c5:60:8c:e7:
94:6e:44:5e:3d:0a:59:aa:e1:35:f0:60:6b:21:0a:
5f:44:5f:90:2f:29:ba:d1:9e:7e:02:e5:a4:3e:b7:
b2:84:2a:a4:44:3b:49:e4:36:2a:54:ae:72:ac:72:
71:f3:0e:3a:0a:60:67:cf:7a:70:b7:21:6e:9b:19:
9f:49:ce:b4:4d:60:5e:2f:f8:ad:8a:75:5f:ee:da:
4a:63:8b:47:24:08:d0:52:82:96:0d:c0:e3:dd:e0:
1e:97:54:d8:64:2e:eb:b8:32:c0:86:74:ad:40:5c:
2f:0e:b3:20:9e:64:a0:86:ab:1b:c4:f7:c6:f4:f7:
8b:0a:ef:0c:00:ee:b5:d9:d0:0d:a9:5b:a0:58:37:
4c:8a:dc:e6:a6:c9:fa:0a:ed:f0:c9:24:05:03:e2:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:2C:FE:47:11:A4:1C:F1:9A:3C:77:7E:92:1D:8B:A6:28:49:A1
X509v3 Authority Key Identifier:
keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fb:01:3f:55:38:16:9e:b5:e8:3b:8f:35:5a:35:ab:d8:12:
df:2c:46:52:dc:ea:e6:82:f2:99:52:71:01:51:bc:b9:a9:d6:
08:94:92:b1:3c:3d:67:06:45:3f:b1:0f:7c:3f:40:55:e8:89:
8b:2f:d5:4d:2c:cc:f2:d7:75:49:e7:03:07:21:29:77:87:d0:
4c:80:e7:6b:ef:8a:49:8e:16:9d:58:af:2b:da:7b:6f:7b:e1:
67:f9:05:60:a0:6c:18:ca:67:87:6c:d9:e4:72:51:8e:d4:42:
63:90:49:d9:21:ca:bd:f0:1f:3d:54:5a:8f:6d:98:a0:9c:6d:
19:c1:35:31:05:80:87:7c:31:50:e3:0c:76:db:45:2d:70:c0:
ed:10:ed:bd:b1:d7:3a:8a:2c:99:fc:cd:b9:82:37:6c:e9:89:
25:bc:fa:93:6d:95:2c:cb:3f:33:f5:7b:3b:25:2c:05:a7:86:
d0:14:20:cc:47:22:60:c7:2c:ed:44:d7:cf:30:ef:34:62:2c:
d1:f8:63:63:ce:90:4c:e2:0f:f1:ca:3a:19:78:6a:08:a0:13:
ab:ff:86:8b:1b:07:e5:86:06:18:ac:ef:47:1f:c4:cb:81:13:
d1:36:83:c5:25:4e:c6:7a:5b:0f:30:63:08:2d:93:d7:f5:75:
5e:78:3e:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdCNjgxMTAvBgNVBAUTKDlCNUE1MzY1REEyQjI1RkE2OThCNzAzMDkzQ0ZCREMy
QTJDMjNGQ0YwHhcNMjYwOTI0MTk1MDEwWhcNMjYxMDAxMTk1MDEwWjAYMRYwFAYD
VQQDEw02YWI1N2VmMi0xOWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+GqUW6ghbnIUcJ4mVqGB1J1Ze/2kFBhkJZeP+Wn1kSrOY1iY+m5+iYQsyvNj
1kaz0xO/pdhrIPfWC3e5n60ErAtgVBRG1FT3VQRcZjJipZfKoImsjbyR7a7vqopa
jKL9JCdWe8VgjOeUbkRePQpZquE18GBrIQpfRF+QLym60Z5+AuWkPreyhCqkRDtJ
5DYqVK5yrHJx8w46CmBnz3pwtyFumxmfSc60TWBeL/itinVf7tpKY4tHJAjQUoKW
DcDj3eAel1TYZC7ruDLAhnStQFwvDrMgnmSghqsbxPfG9PeLCu8MAO612dANqVug
WDdMitzmpsn6Cu3wySQFA+J48QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmALP5H
EaQc8Zo8d36SHYumKEmhMB8GA1UdIwQYMBaAFJtaU2XaKyX6aYtwMJPPvcKiwj/P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw
QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tMXBUWmRvckpmcHBpM0F3azgtOXdxTENQ
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL20xcFRaZG9ySmZwcGkzQXdrOC05d3FMQ1A4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tMXBUWmRvckpm
cHBpM0F3azgtOXdxTENQODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATPsBP1U4Fp616DuPNVo1q9gS3yxGUtzq5oLymVJxAVG8uanWCJSSsTw9ZwZF
P7EPfD9AVeiJiy/VTSzM8td1SecDByEpd4fQTIDna++KSY4WnVivK9p7b3vhZ/kF
YKBsGMpnh2zZ5HJRjtRCY5BJ2SHKvfAfPVRaj22YoJxtGcE1MQWAh3wxUOMMdttF
LXDA7RDtvbHXOoosmfzNuYI3bOmJJbz6k22VLMs/M/V7OyUsBaeG0BQgzEciYMcs
7UTXzzDvNGIs0fhjY86QTOIP8co6GXhqCKATq/+GixsH5YYGGKzvRx/Ey4ET0TaD
xSVOxnpbDzBjCC2T1/V1Xng+6g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:02:39 2026 by rpki-client