
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
File: b9CIejkD49bhe7nP2O8mknC6ywc.mft (raw, json)
Hash identifier: OdftPFgH6wKnxBe8z8iHgZPk2b756PRSEMaORAFocUc=
Subject key identifier: 2A:6E:A4:60:49:C8:A0:D5:2B:19:95:F3:94:A8:A5:66:4E:18:75:04
Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07
Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
Manifest number: 0152
Signing time: Wed 23 Sep 2026 05:07:55 +0000
Manifest this update: Wed 23 Sep 2026 05:07:54 +0000
Manifest next update: Wed 30 Sep 2026 05:07:54 +0000
Files and hashes: 1: b9CIejkD49bhe7nP2O8mknC6ywc.crl (hash: zUGCpH6hyNZDwSW7loIv2x305CNcnzM9svHcJDoIDQ4=)
2: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (hash: 7y7RETYbuZ100fvQ4OZzDzZF974c+TgTdz2U9WNxBsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl
rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
Validity
Not Before: Sep 23 05:07:54 2026 GMT
Not After : Sep 30 05:07:54 2026 GMT
Subject: CN=6ab35eaa-b964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a1:23:5c:79:97:7f:d8:82:6f:aa:ba:0b:b4:
45:4b:1a:97:57:91:fb:8d:bc:3f:50:ac:a5:b4:12:
ed:5a:34:87:99:b2:79:e8:9b:75:4a:35:4f:18:22:
d3:37:98:20:93:0e:14:b9:dc:43:96:cf:b7:08:c5:
b4:ad:e4:24:10:74:51:9e:05:c3:82:f0:f2:e7:d5:
b9:56:c6:30:b4:2d:d6:5b:a7:d7:0e:4b:90:23:9f:
d2:0c:d0:e0:76:53:d6:41:bd:61:a5:ef:3d:f8:f0:
9c:39:a1:de:a8:b8:1c:18:ab:af:7d:3c:a0:71:1d:
d3:38:a8:39:9b:1f:43:ca:78:9a:99:11:5d:cf:a5:
ed:4d:ee:c2:6b:66:ad:1a:b1:c6:c2:b4:14:12:61:
13:3a:44:4d:15:07:23:50:97:31:05:af:f8:7d:5a:
59:87:c6:d1:95:da:44:de:aa:4c:a9:e0:40:aa:fc:
1e:e7:8b:9a:52:31:e4:c8:5d:47:c1:56:bc:8c:bb:
a5:4b:0e:66:dc:22:38:b9:af:fd:5c:98:10:e2:38:
68:d7:79:a7:68:f8:60:7b:d1:a2:3b:0c:5d:4d:a3:
ad:4d:e8:09:6f:2c:5f:2a:3c:d9:b0:49:b3:87:99:
f0:d1:b4:b5:d5:55:7d:93:3f:eb:fc:c2:f1:07:bf:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:A4:60:49:C8:A0:D5:2B:19:95:F3:94:A8:A5:66:4E:18:75:04
X509v3 Authority Key Identifier:
keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:21:de:d4:c1:cb:e1:d6:02:be:0e:df:ad:fb:88:90:9f:61:
dd:74:b8:35:55:5c:6a:1e:0f:49:c5:da:48:7b:51:13:81:92:
8b:84:f1:d1:45:e4:b3:39:4b:81:85:59:36:71:46:f1:73:c8:
48:ab:f3:44:c8:f4:be:99:2d:11:e6:6d:5a:87:76:a8:1f:d3:
8f:ff:f7:99:2d:13:d5:2f:e2:f8:1a:20:12:93:e4:33:fe:ed:
2b:6e:e3:3e:e1:5b:a4:ff:85:cd:58:9b:56:dc:ae:e7:a0:b4:
94:ee:3c:71:ad:82:5e:2e:db:80:53:d3:09:45:9a:08:19:d4:
bd:85:df:41:c8:96:22:26:a2:8e:ad:68:b1:16:b7:32:ba:cb:
4b:f6:ad:33:c5:37:f6:8e:db:ef:89:fe:f2:48:d5:30:e5:77:
bc:a1:a6:8e:d2:dd:2f:02:f2:b6:da:c5:d7:96:bb:5f:f9:d6:
b1:80:3f:b4:78:c8:5e:e8:d2:b5:81:a3:a9:17:af:81:a7:be:
e9:1b:d7:a5:17:78:0b:41:cf:8f:e2:4e:03:fe:ff:05:5c:a6:
09:e4:a1:14:07:18:85:30:83:f8:a2:86:71:0c:d1:29:b4:21:
be:4f:64:4d:15:07:92:05:48:03:41:ac:17:2a:46:5f:de:f2:
1c:c0:8a:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCRTMxMTAvBgNVBAUTKDZGRDA4ODdBMzkwM0UzRDZFMTdCQjlDRkQ4RUYyNjky
NzBCQUNCMDcwHhcNMjYwOTIzMDUwNzU0WhcNMjYwOTMwMDUwNzU0WjAYMRYwFAYD
VQQDEw02YWIzNWVhYS1iOTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjaEjXHmXf9iCb6q6C7RFSxqXV5H7jbw/UKyltBLtWjSHmbJ56Jt1SjVPGCLT
N5ggkw4UudxDls+3CMW0reQkEHRRngXDgvDy59W5VsYwtC3WW6fXDkuQI5/SDNDg
dlPWQb1hpe89+PCcOaHeqLgcGKuvfTygcR3TOKg5mx9DyniamRFdz6XtTe7Ca2at
GrHGwrQUEmETOkRNFQcjUJcxBa/4fVpZh8bRldpE3qpMqeBAqvwe54uaUjHkyF1H
wVa8jLulSw5m3CI4ua/9XJgQ4jho13mnaPhge9GiOwxdTaOtTegJbyxfKjzZsEmz
h5nw0bS11VV9kz/r/MLxB78ufwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCpupGBJ
yKDVKxmV85SopWZOGHUEMB8GA1UdIwQYMBaAFG/QiHo5A+PW4Xu5z9jvJpJwussH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FNkU2QkU0NEJG
OUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5YmhlN25QMk84bWtuQzZ5
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEJFMy9FNkU2QkU0NEJGOUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5
YmhlN25QMk84bWtuQzZ5d2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeyHe1MHL4dYCvg7frfuIkJ9h3XS4NVVcah4PScXaSHtRE4GSi4Tx0UXkszlL
gYVZNnFG8XPISKvzRMj0vpktEeZtWod2qB/Tj//3mS0T1S/i+BogEpPkM/7tK27j
PuFbpP+FzVibVtyu56C0lO48ca2CXi7bgFPTCUWaCBnUvYXfQciWIiaijq1osRa3
MrrLS/atM8U39o7b74n+8kjVMOV3vKGmjtLdLwLyttrF15a7X/nWsYA/tHjIXujS
tYGjqRevgae+6RvXpRd4C0HPj+JOA/7/BVymCeShFAcYhTCD+KKGcQzRKbQhvk9k
TRUHkgVIA0GsFypGX97yHMCK5g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:07:00 2026 by rpki-client