
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.mft
File: _9R0qbqMRmvzBtRaeHLucsCF8Oc.mft (raw, json)
Hash identifier: UnKpTZRZRUmmFxz8qht5ri9UU4cWH+tUvCBRSxqeJbA=
Subject key identifier: EF:4E:BE:D8:53:15:7C:AE:1C:E5:5F:14:52:F4:64:65:75:E8:5A:5C
Authority key identifier: FF:D4:74:A9:BA:8C:46:6B:F3:06:D4:5A:78:72:EE:72:C0:85:F0:E7
Certificate issuer: /CN=A91D404F/serialNumber=FFD474A9BA8C466BF306D45A7872EE72C085F0E7
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9R0qbqMRmvzBtRaeHLucsCF8Oc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.mft
Manifest number: 15
Signing time: Wed 23 Sep 2026 05:12:37 +0000
Manifest this update: Wed 23 Sep 2026 05:12:37 +0000
Manifest next update: Wed 30 Sep 2026 05:12:37 +0000
Files and hashes: 1: _9R0qbqMRmvzBtRaeHLucsCF8Oc.crl (hash: OlGNziVQ/LneHeyDBUYDLT1tQVpfD+lI1zAVDFCqWa8=)
2: 92ADC1469C3C11F1B75CE00D3B11F970.roa (hash: 9wr4MQF1Gn6/eeol1oR+vKF1RpXFFk/pYqT+ZjOiTfU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.crl
rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9R0qbqMRmvzBtRaeHLucsCF8Oc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D404F, serialNumber=FFD474A9BA8C466BF306D45A7872EE72C085F0E7
Validity
Not Before: Sep 23 05:12:37 2026 GMT
Not After : Sep 30 05:12:37 2026 GMT
Subject: CN=6ab35fc5-cdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:9d:27:28:62:cd:f4:05:53:e0:d2:b1:fa:
3d:d1:8b:d2:fd:24:ad:4e:67:ba:cc:32:ad:6e:9f:
48:80:b2:ee:18:14:d4:74:2d:10:86:91:52:3c:37:
a6:9a:87:ad:97:ca:a8:ed:b5:62:34:23:6a:f4:a5:
f0:45:08:e6:92:3b:80:b0:a1:6a:5c:24:10:1d:79:
b6:48:a9:b3:2d:3d:14:5f:81:6c:47:28:a2:da:30:
56:e2:fd:3b:a7:e7:ca:60:15:26:c1:3d:f9:70:89:
d8:5c:fc:5b:11:9e:0f:dd:c8:43:a0:39:6b:f2:ab:
e9:5a:ca:b5:a3:d1:33:1c:02:72:84:76:9a:90:f0:
75:61:6c:16:7a:ce:3f:e9:bc:1b:d3:eb:be:be:71:
49:a9:9d:c8:56:a5:e1:59:14:b2:e6:fa:81:fb:fe:
2e:0e:4f:f0:89:7f:89:8a:27:3a:f6:51:6e:c1:da:
75:59:7e:2f:d5:92:dd:97:e6:e0:92:dd:7c:32:08:
82:dd:4b:12:a0:fd:fd:5e:b1:f5:bf:2d:92:d4:f6:
6d:9c:31:30:ae:fc:23:54:13:ed:51:50:42:14:94:
91:1d:9f:57:a3:ed:03:9a:90:23:f9:4e:a3:96:41:
de:bb:8f:ff:f2:e7:6a:e2:0b:1b:ba:0a:09:ed:3a:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4E:BE:D8:53:15:7C:AE:1C:E5:5F:14:52:F4:64:65:75:E8:5A:5C
X509v3 Authority Key Identifier:
keyid:FF:D4:74:A9:BA:8C:46:6B:F3:06:D4:5A:78:72:EE:72:C0:85:F0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9R0qbqMRmvzBtRaeHLucsCF8Oc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/6C25F79E9C2A11F1BDCC8D493511F970/_9R0qbqMRmvzBtRaeHLucsCF8Oc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:67:7f:ca:2d:02:68:27:91:ea:96:63:81:72:cb:b2:2b:c6:
09:0e:35:98:76:c0:96:88:67:5a:bb:7d:e2:1e:d9:13:c3:c3:
ff:06:aa:a4:a7:f4:25:c8:26:0b:73:f6:14:ed:d6:76:37:6c:
1e:30:96:da:1f:da:4d:d9:84:b7:e7:a6:fc:0c:78:09:e1:bd:
38:68:5d:2d:22:99:27:aa:1f:51:36:1d:b7:17:a9:53:3b:f3:
e0:cd:42:45:8f:6e:29:3e:b1:78:53:54:48:4b:85:14:c9:6f:
5e:cc:a3:a5:4d:83:cf:11:3e:f4:d4:04:13:53:01:e0:03:2e:
0a:91:9f:b6:3c:30:a3:dc:84:37:68:85:89:14:46:2f:23:a7:
92:2f:2c:c1:be:74:13:06:23:94:9b:42:a0:5d:84:3b:59:28:
d8:63:1a:6a:2e:e0:10:62:94:24:22:ca:6d:09:e3:ec:a6:0e:
d7:02:e6:5c:31:92:4e:e6:13:13:2f:32:06:30:b6:0f:62:a6:
95:2a:2b:90:97:f8:96:67:1d:fd:da:59:d1:d7:95:02:c1:02:
d6:9e:ee:1b:9d:60:cc:89:15:36:77:28:22:04:8a:2c:f6:03:
d7:b6:60:45:7d:03:1f:96:82:05:9b:dd:d3:ca:a3:37:2a:ae:
ee:b0:0e:7d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NDA0RjExMC8GA1UEBRMoRkZENDc0QTlCQThDNDY2QkYzMDZENDVBNzg3MkVFNzJD
MDg1RjBFNzAeFw0yNjA5MjMwNTEyMzdaFw0yNjA5MzAwNTEyMzdaMBgxFjAUBgNV
BAMTDTZhYjM1ZmM1LWNkZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoyZ0nKGLN9AVT4NKx+j3Ri9L9JK1OZ7rMMq1un0iAsu4YFNR0LRCGkVI8N6aa
h62XyqjttWI0I2r0pfBFCOaSO4CwoWpcJBAdebZIqbMtPRRfgWxHKKLaMFbi/Tun
58pgFSbBPflwidhc/FsRng/dyEOgOWvyq+layrWj0TMcAnKEdpqQ8HVhbBZ6zj/p
vBvT676+cUmpnchWpeFZFLLm+oH7/i4OT/CJf4mKJzr2UW7B2nVZfi/Vkt2X5uCS
3XwyCILdSxKg/f1esfW/LZLU9m2cMTCu/CNUE+1RUEIUlJEdn1ej7QOakCP5TqOW
Qd67j//y52riCxu6CgntOqfXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU706+2FMV
fK4c5V8UUvRkZXXoWlwwHwYDVR0jBBgwFoAU/9R0qbqMRmvzBtRaeHLucsCF8Ocw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MDRGLzZDMjVGNzlFOUMy
QTExRjFCRENDOEQ0OTM1MTFGOTcwL185UjBxYnFNUm12ekJ0UmFlSEx1Y3NDRjhP
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvXzlSMHFicU1SbXZ6QnRSYWVITHVjc0NGOE9jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0
MDRGLzZDMjVGNzlFOUMyQTExRjFCRENDOEQ0OTM1MTFGOTcwL185UjBxYnFNUm12
ekJ0UmFlSEx1Y3NDRjhPYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAfZ3/KLQJoJ5HqlmOBcsuyK8YJDjWYdsCWiGdau33iHtkTw8P/Bqqkp/QlyCYL
c/YU7dZ2N2weMJbaH9pN2YS356b8DHgJ4b04aF0tIpknqh9RNh23F6lTO/PgzUJF
j24pPrF4U1RIS4UUyW9ezKOlTYPPET701AQTUwHgAy4KkZ+2PDCj3IQ3aIWJFEYv
I6eSLyzBvnQTBiOUm0KgXYQ7WSjYYxpqLuAQYpQkIsptCePspg7XAuZcMZJO5hMT
LzIGMLYPYqaVKiuQl/iWZx392lnR15UCwQLWnu4bnWDMiRU2dygiBIos9gPXtmBF
fQMfloIFm93TyqM3Kq7usA59
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:37:33 2026 by rpki-client