
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier: LjIUFBie/QV/votgSsxmFXFkPeF0964CxrbgHz7b/lM=
Subject key identifier: 3A:BB:56:62:55:17:3E:11:42:05:A4:28:57:9D:0C:B9:07:7C:50:26
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 01E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number: 01D1
Signing time: Wed 23 Sep 2026 03:33:55 +0000
Manifest this update: Wed 23 Sep 2026 03:33:55 +0000
Manifest next update: Wed 30 Sep 2026 03:33:55 +0000
Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: i1V5/94zoRfxkO5nCubPU454Uq1dGeNuia1c7bg+COI=)
2: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: lyAz6AmqL0FZqwGyCahoG8Ef9FHjsOC+qJXgJmlZ/Zs=)
3: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: xj8NN+s9x7JUXPAPcowaNa0lG/ImYDGhQLE7d7PuyeI=)
4: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: i7o8yNPf+dFLOmHmy68U226YJmhJ/EmHULxlVRoo4Fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: Sep 23 03:33:55 2026 GMT
Not After : Sep 30 03:33:55 2026 GMT
Subject: CN=6ab348a3-f2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:1d:4d:e7:3b:36:49:7a:4f:34:37:9e:33:
04:c2:93:36:3d:f0:77:53:d5:d7:d6:ce:7c:7f:96:
45:c2:6a:53:6e:96:06:a0:98:4f:fe:6e:5f:9c:7c:
3c:1e:33:12:66:f3:aa:d1:fa:4e:9d:12:e3:1c:1c:
c6:97:0a:d1:af:ea:43:7d:32:9b:73:5d:5a:5e:13:
45:81:13:9b:a5:46:2e:e5:0a:9b:76:bb:f2:e4:e3:
19:6c:5d:a0:23:d4:6a:19:3f:c6:bf:be:f6:fb:a4:
86:11:7d:ee:97:61:07:40:98:02:d5:07:e7:32:56:
15:88:43:31:6a:c5:e3:00:61:9b:81:43:19:3f:0d:
b7:d3:0d:85:2b:d4:26:0a:08:90:dd:3e:ec:63:1f:
54:40:31:5f:15:8b:79:bc:3e:e5:99:58:e2:1f:38:
7b:78:a1:a6:54:13:be:e3:2e:2e:6b:1f:ac:85:88:
f7:e5:6e:30:f1:8f:22:e6:5b:29:c3:2f:9e:d8:7c:
9c:4b:85:0a:d9:e8:d5:6a:50:dc:30:c9:ca:86:af:
4c:7d:a5:39:cf:4f:17:f4:b9:92:ef:4a:58:1a:60:
8d:7e:c8:7e:7d:3b:a4:04:96:34:f3:46:a8:b3:93:
fd:a2:55:92:19:8e:e7:ab:84:9d:8b:a2:f9:74:af:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BB:56:62:55:17:3E:11:42:05:A4:28:57:9D:0C:B9:07:7C:50:26
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:47:a4:39:51:84:c6:58:de:19:2a:25:5a:dd:5d:03:5e:e8:
9b:bb:65:f7:c3:30:31:ba:4c:14:bb:f1:b4:61:07:bd:5d:bb:
55:84:3b:70:4d:d9:ca:e7:2f:0b:dc:96:af:ad:49:27:25:97:
c7:f4:da:0d:59:ae:d6:3d:75:a2:1c:bc:cf:fc:0e:78:c1:20:
c5:1b:86:dc:d3:63:9f:4b:62:69:51:ae:72:f9:38:c9:1e:ab:
f5:14:29:10:51:44:34:fa:c3:6d:4b:8c:5c:07:cd:c4:c5:fa:
41:6c:40:43:40:3c:ad:0c:03:ef:2e:ff:49:44:8b:cf:96:d8:
4b:cf:d2:0f:2b:ea:31:44:17:a8:de:3a:62:6c:5b:c9:21:f9:
fc:20:47:a6:2f:9b:13:71:48:70:d8:c6:59:b8:ec:27:98:f9:
7c:66:56:de:28:48:d9:69:18:83:c4:7a:74:0a:49:db:58:7d:
18:a4:4d:ff:18:f6:87:bb:57:4a:54:c3:d4:bb:f2:b2:7a:a0:
44:ac:03:cd:6c:fc:7c:00:f2:b0:92:d0:06:e5:b8:17:84:10:
b0:43:02:a5:41:04:36:7a:95:42:d1:dc:a4:49:5f:f1:fc:a0:
16:e9:cc:c2:85:3f:03:d9:5b:69:0c:86:40:7b:2d:76:33:9f:
e5:ee:3e:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC
RkNBQ0RDOTgwHhcNMjYwOTIzMDMzMzU1WhcNMjYwOTMwMDMzMzU1WjAYMRYwFAYD
VQQDEw02YWIzNDhhMy1mMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxk4dTec7Nkl6TzQ3njMEwpM2PfB3U9XX1s58f5ZFwmpTbpYGoJhP/m5fnHw8
HjMSZvOq0fpOnRLjHBzGlwrRr+pDfTKbc11aXhNFgRObpUYu5Qqbdrvy5OMZbF2g
I9RqGT/Gv772+6SGEX3ul2EHQJgC1QfnMlYViEMxasXjAGGbgUMZPw230w2FK9Qm
CgiQ3T7sYx9UQDFfFYt5vD7lmVjiHzh7eKGmVBO+4y4uax+shYj35W4w8Y8i5lsp
wy+e2HycS4UK2ejValDcMMnKhq9MfaU5z08X9LmS70pYGmCNfsh+fTukBJY080ao
s5P9olWSGY7nq4Sdi6L5dK8QNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDq7VmJV
Fz4RQgWkKFedDLkHfFAmMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy
RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK
bVdRM0hLN2lZZy1feXMzSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANkekOVGExljeGSolWt1dA17om7tl98MwMbpMFLvxtGEHvV27VYQ7cE3Zyucv
C9yWr61JJyWXx/TaDVmu1j11ohy8z/wOeMEgxRuG3NNjn0tiaVGucvk4yR6r9RQp
EFFENPrDbUuMXAfNxMX6QWxAQ0A8rQwD7y7/SUSLz5bYS8/SDyvqMUQXqN46Ymxb
ySH5/CBHpi+bE3FIcNjGWbjsJ5j5fGZW3ihI2WkYg8R6dApJ21h9GKRN/xj2h7tX
SlTD1LvysnqgRKwDzWz8fADysJLQBuW4F4QQsEMCpUEENnqVQtHcpElf8fygFunM
woU/A9lbaQyGQHstdjOf5e4+nQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:12 2026 by rpki-client