
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
File: RisW0yeXLqdxImoBWItSBe_qRJY.mft (raw, json)
Hash identifier: 6VzaHQhiE3smBsO8o+9uWgGdfxnJf62oRFNWuMVT5ao=
Subject key identifier: 00:8D:21:D4:09:74:03:AC:54:3E:D9:BF:D2:FA:4F:E8:17:5C:92:DA
Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
Certificate issuer: /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Certificate serial: 0763
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
Manifest number: 074E
Signing time: Sat 26 Sep 2026 21:58:36 +0000
Manifest this update: Sat 26 Sep 2026 21:58:36 +0000
Manifest next update: Sat 03 Oct 2026 21:58:36 +0000
Files and hashes: 1: RisW0yeXLqdxImoBWItSBe_qRJY.crl (hash: ZlrOMeXRbNOmvTgPSymuIg8MC+UguHLccWDhJlDmXNc=)
2: 7549B6D2744A11EDA8F69509C4F9AE02.roa (hash: 1nKRjvXdklpMw+vWcI5fLlyBSaUaXaU504BoI0QQ1yc=)
3: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (hash: Zjs8v8eEam0F6LCtNxLMi1GtL/fRrcWv4ZNVPQXnHkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl
rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496
Validity
Not Before: Sep 26 21:58:36 2026 GMT
Not After : Oct 3 21:58:36 2026 GMT
Subject: CN=6ab8400c-5059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:14:96:7a:cc:99:9d:1a:d4:fd:35:e2:db:
1d:52:c9:82:d7:85:2e:ef:5e:d9:82:9d:6e:00:49:
38:bd:8a:b1:45:b1:e6:c8:72:d2:e2:08:03:7b:7e:
f7:79:2d:04:52:71:c4:9c:d7:0b:62:a1:ac:07:f1:
1f:44:d8:a0:fd:1f:76:be:9f:fa:0e:8e:ec:9c:da:
bf:61:be:59:36:6d:4f:cb:05:4b:08:8a:c8:4c:e5:
ac:a8:a1:46:1e:44:56:99:c3:7b:d0:24:03:4f:db:
2e:a0:4b:d1:c5:0e:39:37:95:10:be:2f:59:2d:0b:
ce:8a:a1:66:fe:8b:83:71:46:05:a5:16:bd:53:da:
0e:93:17:a1:c0:57:bd:6a:3e:05:85:5a:50:7b:dc:
90:20:75:7b:6d:d5:eb:14:53:34:d2:0c:de:c7:74:
b6:e1:c5:7c:40:32:09:78:30:12:2d:dc:2a:40:93:
52:63:01:fa:22:9e:36:70:8b:32:ed:aa:df:c0:91:
e4:f2:7e:4a:f2:a6:c7:55:0c:31:3a:a5:50:02:15:
33:6e:a9:20:5b:40:54:e7:ec:62:c3:6a:2b:19:e6:
ea:c9:17:17:a5:83:33:0b:3a:c7:4e:9b:d9:46:fe:
56:f2:3f:ca:8c:f0:50:f9:b1:e1:46:c6:7c:6d:79:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:21:D4:09:74:03:AC:54:3E:D9:BF:D2:FA:4F:E8:17:5C:92:DA
X509v3 Authority Key Identifier:
keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:a7:23:2e:c2:9c:bc:14:ba:a0:3c:ab:63:66:93:a3:27:
53:c2:eb:fa:e5:87:f6:b8:f6:7d:c0:42:fc:11:74:2b:89:b9:
bf:6b:54:56:cc:bc:b1:98:3c:ff:fb:2c:6c:43:bc:cc:4f:7a:
20:5c:33:d5:a6:42:97:02:c3:03:85:00:c1:74:04:76:e9:0f:
90:4c:1a:9d:87:69:d7:3b:9f:fb:05:ea:2f:ea:28:dd:8c:b4:
38:7c:82:33:b4:5c:4b:d3:20:97:67:f0:59:77:e2:b6:61:42:
16:1e:cf:c2:95:85:e9:8e:38:d4:94:d4:93:a2:d8:2a:22:97:
56:aa:b5:f8:b4:8f:4a:07:e7:52:79:57:f7:4b:67:be:85:56:
75:28:83:95:59:5d:dd:8b:5e:20:ac:66:ac:a8:fb:f0:08:94:
51:c5:77:80:2a:4e:63:89:7a:36:d7:a4:41:26:a7:54:a2:1b:
25:78:ec:a0:b8:0e:99:93:73:58:d5:ad:7d:cb:f1:03:6a:26:
d5:04:9f:c2:f6:77:4e:f0:c2:f9:54:71:15:bc:c5:48:b3:ed:
25:a1:39:3f:d9:a3:bb:28:77:d0:0e:2e:e3:c8:8e:5a:ae:2b:
55:28:d3:27:4c:b9:7d:e4:d7:39:b1:0b:0a:a7:8a:c6:37:40:
79:9e:26:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI2OEIxMTAvBgNVBAUTKDQ2MkIxNkQzMjc5NzJFQTc3MTIyNkEwMTU4OEI1MjA1
RUZFQTQ0OTYwHhcNMjYwOTI2MjE1ODM2WhcNMjYxMDAzMjE1ODM2WjAYMRYwFAYD
VQQDEw02YWI4NDAwYy01MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAof0UlnrMmZ0a1P014tsdUsmC14Uu717Zgp1uAEk4vYqxRbHmyHLS4ggDe373
eS0EUnHEnNcLYqGsB/EfRNig/R92vp/6Do7snNq/Yb5ZNm1PywVLCIrITOWsqKFG
HkRWmcN70CQDT9suoEvRxQ45N5UQvi9ZLQvOiqFm/ouDcUYFpRa9U9oOkxehwFe9
aj4FhVpQe9yQIHV7bdXrFFM00gzex3S24cV8QDIJeDASLdwqQJNSYwH6Ip42cIsy
7arfwJHk8n5K8qbHVQwxOqVQAhUzbqkgW0BU5+xiw2orGebqyRcXpYMzCzrHTpvZ
Rv5W8j/KjPBQ+bHhRsZ8bXnD/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACNIdQJ
dAOsVD7Zv9L6T+gXXJLaMB8GA1UdIwQYMBaAFEYrFtMnly6ncSJqAViLUgXv6kSW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY4Qi80MjZGNTdDMDhE
MzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExxZHhJbW9CV0l0U0JlX3FS
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Jpc1cweWVYTHFkeEltb0JXSXRTQmVfcVJKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjY4Qi80MjZGNTdDMDhEMzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExx
ZHhJbW9CV0l0U0JlX3FSSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOzanIy7CnLwUuqA8q2Nmk6MnU8Lr+uWH9rj2fcBC/BF0K4m5v2tUVsy8sZg8
//ssbEO8zE96IFwz1aZClwLDA4UAwXQEdukPkEwanYdp1zuf+wXqL+oo3Yy0OHyC
M7RcS9Mgl2fwWXfitmFCFh7PwpWF6Y441JTUk6LYKiKXVqq1+LSPSgfnUnlX90tn
voVWdSiDlVld3YteIKxmrKj78AiUUcV3gCpOY4l6NtekQSanVKIbJXjsoLgOmZNz
WNWtfcvxA2om1QSfwvZ3TvDC+VRxFbzFSLPtJaE5P9mjuyh30A4u48iOWq4rVSjT
J0y5feTXObELCqeKxjdAeZ4m8w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:38:46 2026 by rpki-client