
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File: A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier: dXN8W5Rq2m5eu9d8u2QFG9F9STfaWJl+jpX3sPkKYZ0=
Subject key identifier: 55:06:EA:5D:7B:66:6F:21:29:33:3E:85:BC:ED:67:6B:C7:28:00:07
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer: /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial: D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number: D4
Signing time: Fri 25 Sep 2026 06:47:14 +0000
Manifest this update: Fri 25 Sep 2026 06:47:13 +0000
Manifest next update: Fri 02 Oct 2026 06:47:13 +0000
Files and hashes: 1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: DiGZ9JzaRzWrP/CQmXXybOhv+/jXoXO5XVBgJ7h0Mck=)
2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: d5dQQKV6mBbhcnZfLSqq6nPzbtvHpYbUsS3qHsfGmHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Validity
Not Before: Sep 25 06:47:13 2026 GMT
Not After : Oct 2 06:47:13 2026 GMT
Subject: CN=6ab618f2-88ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:c1:38:c0:bd:f3:98:72:55:f1:30:67:ad:
8d:4c:df:f0:12:4e:c7:6f:b2:e2:ff:bf:f1:71:74:
ab:70:01:d0:51:4a:dc:47:f4:4b:7d:3d:58:30:de:
11:29:8a:d6:c9:2a:84:35:00:fb:71:c1:f6:1f:c7:
eb:c8:c3:92:0e:25:5a:3f:62:66:1b:40:3c:62:3d:
61:4c:5b:ed:5f:e6:4e:96:e7:92:a4:fb:0f:6d:25:
63:31:cd:9f:f8:b2:aa:7f:07:0e:61:27:ed:49:a0:
fe:24:91:10:0e:e0:e9:61:8c:d3:d2:95:07:71:38:
c3:b9:5a:02:50:97:a5:0a:bb:f0:d3:27:7f:cc:d4:
6d:d2:db:1c:59:dd:06:fa:a2:7d:70:14:fc:52:48:
de:85:2c:ef:4e:92:57:83:88:cc:d0:c7:6e:d4:9c:
d2:8f:d5:d1:85:7e:2b:1d:d3:ee:7e:38:e9:ce:dd:
2f:fa:19:a2:11:87:53:fd:0f:65:6e:2d:25:1c:5d:
27:cf:f4:06:f2:20:67:ec:0a:7a:6e:1f:22:43:ad:
47:9f:36:4a:4a:4c:a3:7c:57:af:5c:c3:0d:42:22:
2a:5e:3c:d6:02:a8:fc:2d:67:4d:bb:f2:2c:c1:76:
5a:59:2f:7b:2c:f8:97:83:1f:2e:44:f8:18:ce:b8:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:EA:5D:7B:66:6F:21:29:33:3E:85:BC:ED:67:6B:C7:28:00:07
X509v3 Authority Key Identifier:
keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:21:37:ed:6a:c8:1c:08:3a:c6:d2:69:f1:69:b3:af:e7:
c2:1e:d0:d3:91:f7:6b:ab:4f:f1:07:8d:8a:00:a5:75:ce:97:
12:c6:27:ee:42:51:cf:8e:7b:b7:4f:84:b2:5e:57:54:5f:b4:
3a:d9:1f:93:33:9b:88:a5:e3:ff:72:30:18:99:ef:b2:1b:a5:
ae:a9:e5:9f:9b:ab:17:62:ec:a9:50:0e:96:c3:3b:aa:c8:6c:
eb:8f:4f:55:e8:8a:a8:39:51:97:28:4e:b1:f3:48:5a:d2:07:
84:37:4d:ca:76:ed:12:27:9b:b2:48:f8:a4:d0:b5:2d:de:d3:
b5:02:75:b4:cd:e5:b6:f1:6b:55:c6:98:ef:87:22:9e:67:7f:
cf:99:ad:b5:86:17:7b:c5:ad:dd:37:c9:1b:f4:e0:8c:95:28:
bf:50:0c:2d:0d:39:8c:68:11:92:75:fe:cd:d3:7a:c8:49:eb:
47:0e:9f:66:4a:f3:4e:e7:9e:40:ad:37:96:b1:18:ea:57:fb:
28:a4:1b:30:6a:7e:76:8b:94:c6:f2:7c:c9:ca:b2:f4:ea:cd:
20:9c:2c:2b:dd:41:6a:4d:9d:3d:3f:5a:36:7a:8a:72:0e:e5:
6b:ec:a9:18:43:82:fb:ca:ae:0a:8b:bf:ba:fc:f0:3d:94:e7:
5c:de:0a:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkwMUUxMTAvBgNVBAUTKDAzRDg3NEZGMkY1RDMyMDhFN0VCNjI1QTc3MzdGQ0Q0
NENFRTJBQzIwHhcNMjYwOTI1MDY0NzEzWhcNMjYxMDAyMDY0NzEzWjAYMRYwFAYD
VQQDEw02YWI2MThmMi04OGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ZbBOMC985hyVfEwZ62NTN/wEk7Hb7Li/7/xcXSrcAHQUUrcR/RLfT1YMN4R
KYrWySqENQD7ccH2H8fryMOSDiVaP2JmG0A8Yj1hTFvtX+ZOlueSpPsPbSVjMc2f
+LKqfwcOYSftSaD+JJEQDuDpYYzT0pUHcTjDuVoCUJelCrvw0yd/zNRt0tscWd0G
+qJ9cBT8UkjehSzvTpJXg4jM0Mdu1JzSj9XRhX4rHdPufjjpzt0v+hmiEYdT/Q9l
bi0lHF0nz/QG8iBn7Ap6bh8iQ61HnzZKSkyjfFevXMMNQiIqXjzWAqj8LWdNu/Is
wXZaWS97LPiXgx8uRPgYzriiVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUG6l17
Zm8hKTM+hbztZ2vHKAAHMB8GA1UdIwQYMBaAFAPYdP8vXTII5+tiWnc3/NRM7irC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTAxRS9ERTJENjRFQTc4
REExMUYwQjBGQkUyMTZDNEY5QUUwMi9BOWgwX3k5ZE1nam42MkphZHpmODFFenVL
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0E5aDBfeTlkTWdqbjYySmFkemY4MUV6dUtzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTAxRS9ERTJENjRFQTc4REExMUYwQjBGQkUyMTZDNEY5QUUwMi9BOWgwX3k5ZE1n
am42MkphZHpmODFFenVLc0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACtMhN+1qyBwIOsbSafFps6/nwh7Q05H3a6tP8QeNigCldc6XEsYn7kJRz457
t0+Esl5XVF+0OtkfkzObiKXj/3IwGJnvshulrqnln5urF2LsqVAOlsM7qshs649P
VeiKqDlRlyhOsfNIWtIHhDdNynbtEiebskj4pNC1Ld7TtQJ1tM3ltvFrVcaY74ci
nmd/z5mttYYXe8Wt3TfJG/TgjJUov1AMLQ05jGgRknX+zdN6yEnrRw6fZkrzTuee
QK03lrEY6lf7KKQbMGp+douUxvJ8ycqy9OrNIJwsK91Bak2dPT9aNnqKcg7la+yp
GEOC+8quCou/uvzwPZTnXN4KLQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:19:54 2026 by rpki-client