
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
File: IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json)
Hash identifier: NZbRO5wzdykit0eHg7VC7U4cW5xAjkVsdseXQr0FpWE=
Subject key identifier: 9E:54:EE:0D:8D:BC:C6:81:27:9D:6B:1B:AE:9F:9C:DB:67:DD:40:14
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial: 289F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
Manifest number: 2836
Signing time: Thu 24 Sep 2026 15:36:06 +0000
Manifest this update: Thu 24 Sep 2026 15:36:06 +0000
Manifest next update: Thu 01 Oct 2026 15:36:06 +0000
Files and hashes: 1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: bm8Xqd3KQByDiP3V36UxQUG21y9OPnFWW78Rj1kToVg=)
2: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: qkXdXLQp+uDmXhIoNcP8Qn/TVeC/aH88oGW781yxvcY=)
3: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: ZJYaPsTMO3Cea4Hqz4wOhF/LU5hO3CBOLG+2o7dGQng=)
4: AE887848662211E7BC7E2636C4F9AE02.roa (hash: Je1W247OTPgG5j2EStSR2tsSnqzHQNrvzMKG91jUwPw=)
5: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: BMqNg3S+vVRbcjj4gtej8V0T5DqfpOPrq+PFV3hoy/s=)
6: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: 768uBhCuBq3slVPURG8JxN+/BsuzFS5sZEwWCDdjApw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10399 (0x289f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Validity
Not Before: Sep 24 15:36:06 2026 GMT
Not After : Oct 1 15:36:06 2026 GMT
Subject: CN=6ab54366-f60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:d8:b1:98:5f:94:29:6b:fa:7a:10:96:a3:
45:e5:88:06:f0:8f:4e:16:40:33:48:d7:ef:e3:31:
30:9f:c9:37:29:b9:16:e0:00:f0:c7:b2:cf:4d:eb:
cd:8c:b8:f0:35:68:63:ff:2c:1e:e4:ea:7b:5b:59:
22:40:31:19:e5:b0:35:37:0b:d2:cc:3a:f1:95:e4:
62:0a:7b:5e:4c:bf:6b:f0:76:38:53:31:3f:0f:34:
03:73:e0:36:6d:77:57:bb:2b:66:7b:3e:78:4b:32:
af:81:b2:36:1a:68:a0:34:3d:16:cd:86:14:ac:7b:
a9:69:51:35:4b:0a:0f:8c:50:1a:3c:eb:50:7a:72:
23:b1:8a:36:90:e8:4c:94:a1:fd:4a:8a:de:96:27:
f2:a7:d2:22:be:61:e6:c5:a0:7d:6f:96:2f:e3:6b:
b9:25:3a:ce:61:1f:59:cb:2c:1d:f6:e2:73:9e:6a:
20:a9:aa:a0:66:0e:07:48:41:04:ee:f1:62:31:d6:
f4:41:f4:34:09:11:22:08:0e:00:52:e0:44:50:2e:
12:4d:43:02:f0:ba:8a:5e:e3:78:12:63:40:77:8b:
35:61:5a:ef:4e:33:6c:e0:81:1e:a9:34:9f:16:7e:
4e:d8:83:8d:5b:fc:68:d1:31:5f:a4:45:aa:2e:e8:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:54:EE:0D:8D:BC:C6:81:27:9D:6B:1B:AE:9F:9C:DB:67:DD:40:14
X509v3 Authority Key Identifier:
keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3e:32:ac:55:aa:4a:fa:51:7d:74:3c:72:95:4e:61:9e:ef:
f7:74:0f:37:2c:fc:78:b2:04:cd:21:8d:73:8c:c1:06:c7:cc:
49:85:5a:77:c1:33:a4:90:36:4c:fe:b5:e5:b7:d7:be:c0:ec:
73:18:f3:ae:14:16:03:3e:70:1b:18:e8:98:b9:c3:29:62:44:
47:fd:ce:b0:9d:b9:88:5e:c7:66:d1:da:e6:3e:ba:13:37:1a:
f3:f7:13:76:6a:04:65:27:a6:62:78:05:5b:76:f4:0c:0b:f4:
82:53:8f:76:cb:22:06:d3:b1:b9:05:1d:67:8e:49:91:5e:ed:
7c:0c:bb:24:4e:dc:3a:80:1a:88:a1:a5:e3:ec:8c:bb:a9:ea:
84:17:81:f8:18:79:21:21:c7:bf:a7:3f:2e:c4:36:b1:bc:d0:
07:cf:c1:8b:82:2f:84:a5:36:38:4c:d2:68:ec:e1:63:12:14:
fa:52:c6:a1:3e:99:0e:ed:b7:3f:db:5a:a0:4c:24:a8:ce:f0:
14:24:27:b4:3e:c0:fb:0b:ca:65:86:4d:87:ce:42:c9:cd:34:
7a:ac:1e:bb:70:fb:a1:30:be:ea:41:91:0d:fb:e0:0e:42:f4:
dd:82:99:f8:61:66:a6:ae:d2:c8:a8:90:66:9c:57:f8:5a:c4:
8f:03:10:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE
RjgwN0NEODEwHhcNMjYwOTI0MTUzNjA2WhcNMjYxMDAxMTUzNjA2WjAYMRYwFAYD
VQQDEw02YWI1NDM2Ni1mNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnHLYsZhflClr+noQlqNF5YgG8I9OFkAzSNfv4zEwn8k3KbkW4ADwx7LPTevN
jLjwNWhj/ywe5Op7W1kiQDEZ5bA1NwvSzDrxleRiCnteTL9r8HY4UzE/DzQDc+A2
bXdXuytmez54SzKvgbI2GmigND0WzYYUrHupaVE1SwoPjFAaPOtQenIjsYo2kOhM
lKH9Sorelifyp9IivmHmxaB9b5Yv42u5JTrOYR9Zyywd9uJznmogqaqgZg4HSEEE
7vFiMdb0QfQ0CREiCA4AUuBEUC4STUMC8LqKXuN4EmNAd4s1YVrvTjNs4IEeqTSf
Fn5O2IONW/xo0TFfpEWqLugM6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5U7g2N
vMaBJ51rG66fnNtn3UAUMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3
Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG
Y25WWXhNZFcyeURmZ0h6WUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnj4yrFWqSvpRfXQ8cpVOYZ7v93QPNyz8eLIEzSGNc4zBBsfMSYVad8EzpJA2
TP615bfXvsDscxjzrhQWAz5wGxjomLnDKWJER/3OsJ25iF7HZtHa5j66Ezca8/cT
dmoEZSemYngFW3b0DAv0glOPdssiBtOxuQUdZ45JkV7tfAy7JE7cOoAaiKGl4+yM
u6nqhBeB+Bh5ISHHv6c/LsQ2sbzQB8/Bi4IvhKU2OEzSaOzhYxIU+lLGoT6ZDu23
P9taoEwkqM7wFCQntD7A+wvKZYZNh85Cyc00eqweu3D7oTC+6kGRDfvgDkL03YKZ
+GFmpq7SyKiQZpxX+FrEjwMQng==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:21:38 2026 by rpki-client