
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier: q5mzDBnDV4ie7XsFc7fYM4XHV0L4tucdACyIA1RuGlE=
Subject key identifier: 01:6B:0A:0F:43:22:4E:29:9C:83:9C:9E:3F:E3:23:2D:4F:B1:79:23
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial: 097F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number: 0922
Signing time: Thu 24 Sep 2026 20:17:25 +0000
Manifest this update: Thu 24 Sep 2026 20:17:24 +0000
Manifest next update: Thu 01 Oct 2026 20:17:24 +0000
Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: tm0iNQd8MMG4Xirbf+rrljS++UW5R+MWVNUhgM6e58w=)
2: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=)
3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=)
4: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=)
5: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=)
6: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=)
7: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=)
8: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Validity
Not Before: Sep 24 20:17:24 2026 GMT
Not After : Oct 1 20:17:24 2026 GMT
Subject: CN=6ab58555-ba76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:58:40:03:21:61:4b:69:5e:c8:97:4c:f8:
45:f3:9b:1e:d2:2f:67:4c:aa:5c:56:3a:c3:44:2c:
2f:0b:5d:57:94:d9:e8:13:9b:2f:69:87:6e:88:b7:
a8:c3:1f:1c:e8:56:df:91:5c:70:ef:32:6e:0c:bc:
5b:ef:b0:11:21:f4:8c:8c:93:0d:5d:a0:10:71:2c:
5d:0c:16:8e:ac:a8:67:e8:2d:dc:a1:ae:cf:b9:1c:
23:a5:15:59:4a:bd:06:c7:bf:8f:30:2e:bd:51:77:
97:6c:64:99:f1:ba:f8:2a:a5:d5:2a:76:01:1b:d9:
0e:b5:8c:3b:b0:ba:a7:b4:b9:25:00:9b:1f:25:cb:
22:e0:17:3e:24:7b:29:e8:13:33:ed:d0:d7:ba:c5:
ba:e8:fb:5f:83:ee:8a:7a:56:9e:55:4b:f0:9b:ce:
3d:46:38:16:15:26:30:f6:5b:7d:52:df:b9:e4:a5:
5a:83:ca:a2:03:d8:5f:cb:5f:dc:5e:cd:97:8c:71:
23:81:d0:63:20:12:87:32:3a:c1:bd:c1:59:31:14:
9d:b3:55:b5:95:6e:6d:c2:34:35:9e:80:f4:d2:d7:
7d:47:b4:78:5c:98:62:b7:2c:4c:6f:fc:cc:8f:d6:
01:0b:07:c1:4a:ed:31:29:6c:9c:5c:13:b5:25:30:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:0A:0F:43:22:4E:29:9C:83:9C:9E:3F:E3:23:2D:4F:B1:79:23
X509v3 Authority Key Identifier:
keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ab:96:08:c0:48:34:4f:2f:1e:77:02:c9:4c:26:df:d9:a0:
cf:39:72:ee:ae:40:67:14:48:8c:47:6a:91:be:fd:c9:2f:71:
33:0c:9b:3a:92:51:9e:cc:2a:16:13:c2:17:b3:b9:5f:a3:92:
93:08:e9:6e:a7:2e:ec:02:52:8d:98:c6:f1:3d:fb:f2:ec:ea:
fd:10:d1:53:07:5e:88:27:8b:98:59:76:ad:06:f8:a8:d0:38:
5a:27:ac:f5:58:8a:1e:e4:40:5a:5b:6b:e1:69:ff:96:2d:76:
35:40:ce:5d:51:1c:f1:4d:a4:8f:5e:ab:e5:6f:b2:e0:d7:01:
12:e2:e2:f8:64:8b:91:1b:a3:15:4b:82:d0:e2:62:8c:64:89:
0d:8c:3b:ad:b3:5d:00:33:5a:2e:8d:e0:0a:fe:d4:74:18:60:
27:c9:f6:ee:53:c8:7e:91:47:6e:04:77:8e:ed:33:db:21:8c:
c0:8e:8e:6e:c7:89:59:ff:38:c0:b6:c1:1c:5e:c2:2b:34:cd:
4e:e8:6d:9f:22:69:f0:35:a6:ac:f6:14:85:39:71:83:18:83:
eb:ba:21:e5:1f:f3:1f:00:bf:6a:93:de:63:86:95:e3:12:ae:
d8:f6:dd:f1:28:e6:20:90:be:7e:e2:8f:4c:c2:de:58:d1:0b:
e2:ed:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:17:04 2026 by rpki-client