
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json)
Hash identifier: P2qqJVLgq7eYndNHVuyDG4S/0hfVgMbex91AA2ONlLY=
Subject key identifier: 83:46:6A:FD:6B:9E:84:43:BB:2D:48:06:E7:28:F2:75:D8:2D:93:A6
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 0592
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
Manifest number: 0547
Signing time: Sat 14 Nov 2026 23:21:50 +0000
Manifest this update: Sat 14 Nov 2026 23:21:50 +0000
Manifest next update: Sat 21 Nov 2026 23:21:50 +0000
Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: g1PvXwzl45rZtmPjf0OQZq4EKsu9zz0AKRDZYbby7Bw=)
2: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: AHg9DsTKxOaninHAhkliigKskhrZ1Ztq8ng4d7+Zu8E=)
3: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=)
4: 04018F58A75A11F1998E3A213411F970.roa (hash: Br8VWReNn2kIUilsRcPk+KsT6Kue3Sa/9TUPm+SrlEU=)
5: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=)
6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=)
7: C81C448AAE0511F18D02DF5C4B11F970.roa (hash: lmYB0jIm/G2KR+F1EFuW8P13BJJlTqG79RhiSa3M/5Q=)
8: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=)
9: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=)
10: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1426 (0x592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Validity
Not Before: Nov 14 23:21:50 2026 GMT
Not After : Nov 21 23:21:50 2026 GMT
Subject: CN=6af8ed0e-38fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:f0:80:f1:f9:4e:22:ff:b3:50:f8:e9:a6:
b7:fc:3b:0d:0e:bc:2c:6e:84:f4:7d:8a:90:c6:8f:
df:d1:cd:8d:bf:ab:70:a3:d7:04:52:d0:d7:d2:67:
3f:ab:38:48:d7:29:a1:4f:aa:40:20:b6:52:22:ef:
45:ac:cc:f2:73:a0:cb:1f:1e:30:eb:ec:c3:b9:3e:
62:99:77:fc:3e:ee:fc:a2:76:55:42:cb:e5:30:f2:
72:ca:28:46:c2:78:3c:16:34:99:45:20:a2:13:18:
f2:93:87:e8:3b:2e:da:b6:bb:7b:58:84:a6:53:b1:
0b:a5:12:1c:a0:d8:68:24:d2:31:52:76:2e:0e:fb:
8c:89:18:19:3d:f2:e2:97:58:0e:66:81:f2:34:2c:
38:17:16:0d:83:22:75:cd:90:e8:a5:6a:c3:9f:88:
17:e2:0f:b4:d3:44:b1:63:3b:2f:e3:5b:2d:0d:b8:
0d:66:75:0a:87:f6:d0:1a:c3:46:01:97:b6:82:5d:
d7:78:23:8d:65:f4:b3:e4:2c:47:42:37:2c:14:32:
43:33:70:2e:49:a3:2a:5f:e4:30:6f:3f:54:bb:11:
d1:10:49:52:b2:2d:9a:a2:c0:63:64:14:d5:9a:a7:
56:66:54:d0:b9:e9:db:93:65:d4:b6:28:61:d2:0b:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:46:6A:FD:6B:9E:84:43:BB:2D:48:06:E7:28:F2:75:D8:2D:93:A6
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:06:2a:0f:97:69:88:be:8e:85:4a:62:a8:d8:8d:65:2b:0c:
1c:9f:04:bb:12:42:6d:00:a6:96:7a:af:96:a6:6b:10:ad:6f:
7f:8f:5b:93:2d:93:58:61:9d:d3:cc:49:d2:a7:39:62:e5:65:
08:8c:0f:ac:5c:3b:94:f7:83:2b:cb:72:73:8b:41:8d:a8:e1:
13:53:11:6e:d0:79:ee:2b:f5:a3:bf:ff:05:14:89:f8:92:a9:
ba:1e:a7:ad:a5:f3:a6:6c:e6:07:a1:a7:91:f1:83:08:7d:04:
a5:53:a7:55:6d:9e:3c:7a:6d:36:7f:61:cd:c3:bd:fe:8d:8c:
52:97:10:32:58:f3:9e:dd:0e:7b:82:e0:a0:be:b9:dc:b5:aa:
da:22:95:b0:26:df:f1:0c:7e:d9:52:0c:b5:93:66:b9:49:64:
9b:06:7b:06:77:ec:0b:17:46:c9:5e:73:b0:7c:c9:59:54:76:
52:79:d6:11:2f:2c:6b:2c:75:24:48:07:ff:02:bb:d5:03:e5:
11:4a:eb:fa:32:69:4c:db:5b:08:af:c5:9e:90:cd:83:6e:09:
b9:d8:fb:29:5f:95:21:82:dd:f1:27:97:dd:3d:08:22:d3:88:
33:ca:86:ed:95:3e:7c:57:ab:58:07:00:a2:b8:2e:84:18:3f:
5b:7a:da:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC
RUQ1RDk4OTIwHhcNMjYxMTE0MjMyMTUwWhcNMjYxMTIxMjMyMTUwWjAYMRYwFAYD
VQQDEw02YWY4ZWQwZS0zOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3XwgPH5TiL/s1D46aa3/DsNDrwsboT0fYqQxo/f0c2Nv6two9cEUtDX0mc/
qzhI1ymhT6pAILZSIu9FrMzyc6DLHx4w6+zDuT5imXf8Pu78onZVQsvlMPJyyihG
wng8FjSZRSCiExjyk4foOy7atrt7WISmU7ELpRIcoNhoJNIxUnYuDvuMiRgZPfLi
l1gOZoHyNCw4FxYNgyJ1zZDopWrDn4gX4g+000SxYzsv41stDbgNZnUKh/bQGsNG
AZe2gl3XeCONZfSz5CxHQjcsFDJDM3AuSaMqX+Qwbz9UuxHREElSsi2aosBjZBTV
mqdWZlTQuenbk2XUtihh0gt+QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINGav1r
noRDuy1IBuco8nXYLZOmMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw
RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt
SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR
cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZAYqD5dpiL6OhUpiqNiNZSsMHJ8EuxJCbQCmlnqvlqZrEK1vf49bky2TWGGd
08xJ0qc5YuVlCIwPrFw7lPeDK8tyc4tBjajhE1MRbtB57iv1o7//BRSJ+JKpuh6n
raXzpmzmB6GnkfGDCH0EpVOnVW2ePHptNn9hzcO9/o2MUpcQMljznt0Oe4LgoL65
3LWq2iKVsCbf8Qx+2VIMtZNmuUlkmwZ7BnfsCxdGyV5zsHzJWVR2UnnWES8sayx1
JEgH/wK71QPlEUrr+jJpTNtbCK/FnpDNg24Judj7KV+VIYLd8SeX3T0IItOIM8qG
7ZU+fFerWAcAorguhBg/W3razQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:50:11 2026 by rpki-client