
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json)
Hash identifier: l7cXgU9eth4ZePvn+h3/wPZy1TUx0S8qOuk2SgE/zT4=
Subject key identifier: 6E:0A:CB:1A:06:E5:D9:EB:3D:84:DA:01:28:8C:4B:71:6F:9C:F6:BA
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
Manifest number: 0266
Signing time: Fri 25 Sep 2026 02:12:03 +0000
Manifest this update: Fri 25 Sep 2026 02:12:02 +0000
Manifest next update: Fri 02 Oct 2026 02:12:02 +0000
Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: VRUsqNlqEQ3AeHJH/r14xcajZ/sRrLFPy4AXBhzD/dE=)
2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: E1zUkI9TO0W/ED1pfVMhvoec/8ENjTvyLHbMDkKK8Fw=)
3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: Ti9PlBRZuakBk1+DVxnhOg3U/C4AJTP/aQFIX6lbwWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Validity
Not Before: Sep 25 02:12:02 2026 GMT
Not After : Oct 2 02:12:02 2026 GMT
Subject: CN=6ab5d872-8ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:8d:24:ff:e4:9f:d2:46:bc:71:d6:00:f6:
71:9f:dc:05:43:36:aa:91:b9:99:75:20:62:58:5c:
ce:ef:f4:53:fa:a8:d8:5b:7d:b6:45:15:65:b0:e4:
64:84:11:32:e6:aa:51:f3:a9:57:87:2d:4a:1b:a9:
3f:e4:d5:a0:49:7f:57:2a:31:c3:09:ce:34:78:82:
ff:c9:7b:e6:77:38:41:19:9c:58:47:a3:70:19:9a:
47:ad:a3:a6:ed:9f:67:87:0b:e0:dd:03:8c:71:97:
f6:ad:20:51:a4:df:f4:37:f9:d7:ca:40:57:04:32:
0c:30:c2:e5:fa:79:b4:14:e2:63:7e:b2:53:a7:f8:
14:26:22:24:18:d8:1e:0e:9f:65:6a:5c:ad:0f:fd:
12:cb:68:73:1f:34:b1:1a:26:82:06:85:de:04:aa:
43:02:7b:a1:9c:d2:ed:fc:29:02:87:49:6f:a5:6a:
6b:27:16:3e:ab:62:22:ca:e6:6a:35:e5:36:45:dd:
d2:0e:89:34:fb:85:d6:62:4c:a7:62:f7:79:9e:7c:
2e:8f:8c:e5:08:39:15:75:9e:21:d9:22:ba:62:e0:
8b:93:d5:a9:09:31:f6:7b:7c:b0:86:53:99:bd:1f:
23:28:85:1e:b2:a6:29:2e:79:81:58:8f:3e:00:29:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0A:CB:1A:06:E5:D9:EB:3D:84:DA:01:28:8C:4B:71:6F:9C:F6:BA
X509v3 Authority Key Identifier:
keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:13:03:01:2b:1c:0e:45:46:06:27:d7:ab:20:2e:32:ee:66:
1e:87:9b:a2:b9:aa:05:ac:ef:49:0c:79:4f:dc:b1:42:25:9e:
02:fc:ac:00:20:2f:01:f7:ab:3e:39:da:3f:82:1d:08:ba:2f:
f6:21:ab:13:ec:79:4e:30:b6:a1:cd:b0:b3:89:db:25:aa:86:
78:3c:04:3a:c7:60:03:62:4d:0c:03:a8:40:1e:95:f9:7f:4f:
e6:ec:90:6f:50:ab:f9:1f:62:e2:05:c8:33:fa:d2:71:fe:f3:
d0:1b:20:21:bc:19:78:15:7e:54:7d:e3:4a:34:65:00:3b:79:
e2:02:c0:50:24:91:b3:90:0d:a0:15:e2:48:d9:3a:84:68:90:
c7:5f:47:cd:e2:4a:b7:ea:f7:05:03:b9:a1:02:12:90:5b:c2:
e1:33:22:71:19:5a:34:39:13:75:df:28:4c:2a:df:ef:84:df:
fc:21:50:4e:8f:f4:a6:40:51:7e:14:79:df:16:46:2a:bf:51:
f7:43:eb:1d:a6:8b:32:b5:f4:bc:ce:88:c9:06:69:dd:04:cf:
2a:98:b4:a0:23:15:7a:7d:42:26:a7:c3:69:de:90:98:43:a2:
af:88:0d:fa:b7:20:42:d6:40:a1:28:b2:0d:1c:7e:2a:7f:44:
5f:43:5c:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M4NkYxMTAvBgNVBAUTKDZCQUREN0Q1RDExMjgxMTJENzBBQjRBMjQ1MjQwMTQy
OEY5RDA5N0IwHhcNMjYwOTI1MDIxMjAyWhcNMjYxMDAyMDIxMjAyWjAYMRYwFAYD
VQQDEw02YWI1ZDg3Mi04ZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppSNJP/kn9JGvHHWAPZxn9wFQzaqkbmZdSBiWFzO7/RT+qjYW322RRVlsORk
hBEy5qpR86lXhy1KG6k/5NWgSX9XKjHDCc40eIL/yXvmdzhBGZxYR6NwGZpHraOm
7Z9nhwvg3QOMcZf2rSBRpN/0N/nXykBXBDIMMMLl+nm0FOJjfrJTp/gUJiIkGNge
Dp9lalytD/0Sy2hzHzSxGiaCBoXeBKpDAnuhnNLt/CkCh0lvpWprJxY+q2IiyuZq
NeU2Rd3SDok0+4XWYkynYvd5nnwuj4zlCDkVdZ4h2SK6YuCLk9WpCTH2e3ywhlOZ
vR8jKIUesqYpLnmBWI8+ACnaKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4KyxoG
5dnrPYTaASiMS3FvnPa6MB8GA1UdIwQYMBaAFGut19XREoES1wq0okUkAUKPnQl7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzg2Ri80N0JBMjhBRTEz
RjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dSTFhDclNpUlNRQlFvLWRD
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E2M1gxZEVTZ1JMWENyU2lSU1FCUW8tZENYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Qzg2Ri80N0JBMjhBRTEzRjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dS
TFhDclNpUlNRQlFvLWRDWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAehMDASscDkVGBifXqyAuMu5mHoebormqBazvSQx5T9yxQiWeAvysACAvAfer
PjnaP4IdCLov9iGrE+x5TjC2oc2ws4nbJaqGeDwEOsdgA2JNDAOoQB6V+X9P5uyQ
b1Cr+R9i4gXIM/rScf7z0BsgIbwZeBV+VH3jSjRlADt54gLAUCSRs5ANoBXiSNk6
hGiQx19HzeJKt+r3BQO5oQISkFvC4TMicRlaNDkTdd8oTCrf74Tf/CFQTo/0pkBR
fhR53xZGKr9R90PrHaaLMrX0vM6IyQZp3QTPKpi0oCMVen1CJqfDad6QmEOir4gN
+rcgQtZAoSiyDRx+Kn9EX0Nc2Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:14:59 2026 by rpki-client