
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json)
Hash identifier: /iV9YgZlIF+TDYdDED50oWJHj4C2VVaUpuBcn39mp1Q=
Subject key identifier: 09:C6:F0:53:4F:E3:9B:38:09:C5:29:7D:CD:A4:6F:8F:BD:22:81:15
Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
Manifest number: 0100
Signing time: Wed 23 Sep 2026 05:57:37 +0000
Manifest this update: Wed 23 Sep 2026 05:57:36 +0000
Manifest next update: Wed 30 Sep 2026 05:57:36 +0000
Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: eqpDTzdDz09AGzgPv5n+j9bmiOBINqpLwsV9AWV5VAY=)
2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: FmGUR6A6isQJ9L9hlLM0YUZF7F/y7z9ZOrSFMldkQ/I=)
3: DoDVUOYbn17RhXJOVusNhDcVZZA.asa (hash: 9fRMjWn5zcLS6ITSHtsdgPuSk3k1zh47XF1gWEU6v/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Validity
Not Before: Sep 23 05:57:36 2026 GMT
Not After : Sep 30 05:57:36 2026 GMT
Subject: CN=6ab36a51-ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8c:d3:ef:d6:0b:2d:fb:ba:10:9a:a5:b7:26:
4d:37:c8:41:04:c2:7a:c3:c6:51:97:cd:a7:31:82:
71:ab:8f:c9:69:e0:c2:e2:fa:af:4b:ef:1f:2c:6f:
92:2b:d4:97:f4:bd:16:18:76:b5:b3:b5:27:5f:1c:
e9:5f:8a:8f:c0:c8:3d:87:d5:d9:ed:dd:10:e2:42:
14:cd:c4:06:80:45:1c:2e:98:be:64:bc:3a:d4:02:
11:82:1b:b1:c9:6e:c1:48:24:28:7c:34:9d:7a:29:
24:35:65:4a:24:18:6b:3b:7c:8a:dd:2f:b7:b3:93:
19:db:f0:cb:04:14:52:a1:9c:79:32:fe:2e:cc:18:
1a:78:3b:cd:ea:f1:83:d5:38:84:27:c1:94:e3:31:
8a:5f:79:15:7b:0e:bb:ae:15:b8:02:19:c6:60:5c:
6b:1e:92:5c:ea:98:d7:30:d9:41:9c:6f:10:99:1b:
17:2e:51:b8:1b:c8:15:f5:12:25:51:55:7a:c9:c5:
51:e0:64:6e:03:bd:59:32:f3:41:b8:59:e3:07:48:
2c:32:e5:f0:36:43:40:d6:7c:04:89:05:bb:d4:c7:
43:19:5c:fc:54:e5:d8:02:c9:9a:67:3c:4a:d6:13:
27:5e:ef:15:cb:b5:01:3f:32:9c:7d:63:e3:50:a0:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:F0:53:4F:E3:9B:38:09:C5:29:7D:CD:A4:6F:8F:BD:22:81:15
X509v3 Authority Key Identifier:
keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e4:24:4f:2e:36:dc:f5:34:a8:5c:98:3f:c9:5e:fd:0f:8d:
33:34:2e:a7:27:78:32:27:85:36:8d:fe:61:86:4b:15:22:3a:
8c:1e:82:4f:fe:52:6a:af:f6:b0:44:6d:12:c9:87:83:f0:d8:
5b:b0:d5:5d:41:bf:d8:fa:63:8e:a7:f6:a4:a9:54:21:3d:28:
ae:19:8d:bf:c1:d2:a5:5b:bf:c7:e8:1c:34:e3:c7:10:bc:70:
1a:46:7e:7d:ed:d1:4a:26:f3:4b:73:b0:e0:b8:8e:11:cf:15:
84:5f:cf:7a:57:e3:36:e8:2e:e9:12:7f:7f:d0:8e:30:e0:8b:
7a:55:20:32:e8:08:45:12:28:e6:81:35:6f:b4:69:60:47:48:
cc:48:91:73:51:0a:a6:21:35:c8:ef:62:ca:34:e7:ec:22:ad:
54:d5:21:8c:aa:97:80:3e:50:86:fa:04:23:0f:1d:da:99:60:
12:68:5e:11:a1:4c:ed:b8:86:e7:9e:f3:77:3a:22:ac:2f:d1:
68:68:bf:0e:ce:d8:9e:a8:58:43:47:04:ed:75:64:28:de:37:
13:8c:9e:a7:60:36:22:2c:94:9c:03:58:66:35:20:62:f8:f3:
2d:43:ef:ba:3a:a9:1e:1c:e6:57:fe:a2:46:c3:f3:f5:0a:39:
22:fc:fd:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhERDkxMTAvBgNVBAUTKDdGRkM4MDU2NTA3NDJDRUE1MDk4NkQxMUFCQ0I3M0Uw
RjU1MDU4RjkwHhcNMjYwOTIzMDU1NzM2WhcNMjYwOTMwMDU1NzM2WjAYMRYwFAYD
VQQDEw02YWIzNmE1MS1hYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3ozT79YLLfu6EJqltyZNN8hBBMJ6w8ZRl82nMYJxq4/JaeDC4vqvS+8fLG+S
K9SX9L0WGHa1s7UnXxzpX4qPwMg9h9XZ7d0Q4kIUzcQGgEUcLpi+ZLw61AIRghux
yW7BSCQofDSdeikkNWVKJBhrO3yK3S+3s5MZ2/DLBBRSoZx5Mv4uzBgaeDvN6vGD
1TiEJ8GU4zGKX3kVew67rhW4AhnGYFxrHpJc6pjXMNlBnG8QmRsXLlG4G8gV9RIl
UVV6ycVR4GRuA71ZMvNBuFnjB0gsMuXwNkNA1nwEiQW71MdDGVz8VOXYAsmaZzxK
1hMnXu8Vy7UBPzKcfWPjUKB/cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAnG8FNP
45s4CcUpfc2kb4+9IoEVMB8GA1UdIwQYMBaAFH/8gFZQdCzqUJhtEavLc+D1UFj5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEREOS9BMzg3Q0Y4RTJG
RDIxMUYwQTlBQzVFMkZDNEY5QUUwMi9mX3lBVmxCMExPcFFtRzBScTh0ejRQVlFX
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEREOS9BMzg3Q0Y4RTJGRDIxMUYwQTlBQzVFMkZDNEY5QUUwMi9mX3lBVmxCMExP
cFFtRzBScTh0ejRQVlFXUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALeQkTy423PU0qFyYP8le/Q+NMzQupyd4MieFNo3+YYZLFSI6jB6CT/5Saq/2
sERtEsmHg/DYW7DVXUG/2Ppjjqf2pKlUIT0orhmNv8HSpVu/x+gcNOPHELxwGkZ+
fe3RSibzS3Ow4LiOEc8VhF/PelfjNugu6RJ/f9COMOCLelUgMugIRRIo5oE1b7Rp
YEdIzEiRc1EKpiE1yO9iyjTn7CKtVNUhjKqXgD5QhvoEIw8d2plgEmheEaFM7biG
557zdzoirC/RaGi/Ds7YnqhYQ0cE7XVkKN43E4yep2A2IiyUnANYZjUgYvjzLUPv
ujqpHhzmV/6iRsPz9Qo5Ivz9dQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:16:27 2026 by rpki-client