
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
File: bGgIQDgcHvMtPI2786zECCz2pbM.mft (raw, json)
Hash identifier: 7eLrFKsm7aGPnDeaD1JZYDelAbV45CnQzSCCf4zzgy8=
Subject key identifier: 59:B1:9B:98:78:D0:11:8D:70:2C:DE:11:F8:E3:34:42:14:10:54:CD
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial: 0B64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
Manifest number: 0B16
Signing time: Thu 24 Sep 2026 19:16:34 +0000
Manifest this update: Thu 24 Sep 2026 19:16:33 +0000
Manifest next update: Thu 01 Oct 2026 19:16:33 +0000
Files and hashes: 1: bGgIQDgcHvMtPI2786zECCz2pbM.crl (hash: l1nDA05BHlXdSXX1aamU8+rKdIzVKkCTZKhDZTImUyk=)
2: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (hash: O9t3MGde1CPLLyHzaHW4c/VnESPgcMHRUVCLnNs5iqg=)
3: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (hash: 00l1R5FwZcWzFUVZ2aqvW97Qwqjz6xknwlkADPfSXV8=)
4: 2131145E9E4C11EABF30421BC4F9AE02.roa (hash: L46lyNGF7xref2PgtpwYQAu20HQOQ2fkzes7fFR03pE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2916 (0xb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Validity
Not Before: Sep 24 19:16:33 2026 GMT
Not After : Oct 1 19:16:33 2026 GMT
Subject: CN=6ab57711-b3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:77:e1:fa:8a:4a:20:c0:41:16:e5:f3:cf:
ad:48:56:19:4b:e4:dd:97:51:28:94:70:08:f7:dd:
9f:54:bd:3a:08:25:7c:61:dc:8e:61:3d:95:f9:2a:
84:3c:78:99:a2:66:22:1f:6b:07:c2:e0:c4:15:03:
b5:35:72:70:ca:2b:a9:9e:40:5a:77:ea:08:3a:15:
c8:48:f6:51:37:be:ad:07:7f:d8:47:d6:e9:e7:07:
49:00:30:85:66:29:3d:77:f5:64:9a:87:a2:55:c2:
b6:cd:76:7f:84:8f:13:ec:f8:67:a8:fe:95:9f:22:
51:9a:f2:ed:a3:78:6e:bd:4f:bb:2a:c0:6e:6b:04:
e5:18:3b:d4:5d:27:7b:ee:cd:09:30:5e:df:fd:c3:
71:3b:b5:3e:ed:9e:f3:1c:59:d5:9f:e9:8b:b5:2b:
a6:bb:55:94:12:79:e9:31:2d:33:21:71:26:a1:df:
07:ab:4a:39:10:7b:7e:1d:ca:6b:3d:30:d3:d8:a1:
b7:16:02:44:a3:5e:ae:03:7b:85:32:c6:f8:99:0a:
6d:bc:32:c6:25:ec:62:6f:35:2d:f7:61:6f:a3:9d:
51:49:4a:d2:08:cd:90:da:01:6c:bc:cf:0f:df:26:
ee:ed:7b:32:66:e8:5b:e0:23:c5:d8:c9:45:72:de:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B1:9B:98:78:D0:11:8D:70:2C:DE:11:F8:E3:34:42:14:10:54:CD
X509v3 Authority Key Identifier:
keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:07:03:f7:4d:73:07:ff:59:f4:48:b9:43:f4:39:a4:9d:fd:
5a:54:b9:d6:69:6e:e9:3d:9f:03:8a:8a:60:15:8c:22:8c:83:
6a:1e:1a:a9:4e:d5:13:75:c2:d5:66:3b:ee:39:6c:0e:b8:45:
f2:1d:aa:39:2f:e1:eb:3c:71:f8:d5:59:65:a9:bb:fe:ef:7c:
fd:0c:f9:0c:60:a2:7e:1e:d9:1a:b9:5f:42:f2:1e:71:9e:7f:
a9:22:6d:c3:32:91:db:0e:88:81:e6:d5:a1:92:96:5d:69:28:
6a:94:aa:1d:7f:67:6a:1b:0f:e1:a3:c9:5c:a3:c6:fe:39:45:
97:0b:46:0e:73:e5:8b:79:6a:70:31:b3:9e:45:da:62:21:70:
5b:6a:d4:5c:dc:26:74:a6:e2:66:88:cc:f2:71:6c:a1:1a:3c:
aa:b3:e3:2d:d0:9c:59:3c:72:1a:4e:1a:aa:c3:4c:16:f5:40:
fd:1b:20:91:70:94:92:c2:6c:de:fb:7e:48:e2:f7:40:32:0e:
78:3a:96:fe:90:0e:6d:e7:72:a0:7b:4a:90:3e:9c:3a:c1:1d:
84:78:81:61:ed:08:12:96:a8:de:e3:59:dc:65:96:a3:49:85:
d3:8b:53:9d:a5:68:9f:5f:8f:2c:70:ae:5e:af:ad:05:f8:83:
2c:f9:53:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4
MkNGNkE1QjMwHhcNMjYwOTI0MTkxNjMzWhcNMjYxMDAxMTkxNjMzWjAYMRYwFAYD
VQQDEw02YWI1NzcxMS1iM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWd34fqKSiDAQRbl88+tSFYZS+Tdl1EolHAI992fVL06CCV8YdyOYT2V+SqE
PHiZomYiH2sHwuDEFQO1NXJwyiupnkBad+oIOhXISPZRN76tB3/YR9bp5wdJADCF
Zik9d/VkmoeiVcK2zXZ/hI8T7PhnqP6VnyJRmvLto3huvU+7KsBuawTlGDvUXSd7
7s0JMF7f/cNxO7U+7Z7zHFnVn+mLtSumu1WUEnnpMS0zIXEmod8Hq0o5EHt+Hcpr
PTDT2KG3FgJEo16uA3uFMsb4mQptvDLGJexibzUt92Fvo51RSUrSCM2Q2gFsvM8P
3ybu7XsyZuhb4CPF2MlFct4sRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmxm5h4
0BGNcCzeEfjjNEIUEFTNMB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz
QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzM0Qy9BNzMyMzVFQzczQzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2
TXRQSTI3ODZ6RUNDejJwYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJgcD901zB/9Z9Ei5Q/Q5pJ39WlS51mlu6T2fA4qKYBWMIoyDah4aqU7VE3XC
1WY77jlsDrhF8h2qOS/h6zxx+NVZZam7/u98/Qz5DGCifh7ZGrlfQvIecZ5/qSJt
wzKR2w6IgebVoZKWXWkoapSqHX9nahsP4aPJXKPG/jlFlwtGDnPli3lqcDGznkXa
YiFwW2rUXNwmdKbiZojM8nFsoRo8qrPjLdCcWTxyGk4aqsNMFvVA/RsgkXCUksJs
3vt+SOL3QDIOeDqW/pAObedyoHtKkD6cOsEdhHiBYe0IEpao3uNZ3GWWo0mF04tT
naVon1+PLHCuXq+tBfiDLPlTMw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:08:10 2026 by rpki-client