
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json)
Hash identifier: hSRLTlkc5xOu4GH+pfqpIL+bPruNW3UUfjWaUfq9eYw=
Subject key identifier: F9:17:66:A0:FE:08:2B:49:97:CD:9D:E8:6C:D0:CC:E1:DF:0A:F2:47
Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Certificate serial: 0565
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
Manifest number: 055E
Signing time: Mon 28 Sep 2026 23:30:25 +0000
Manifest this update: Mon 28 Sep 2026 23:30:24 +0000
Manifest next update: Mon 05 Oct 2026 23:30:24 +0000
Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: prIAEoIl9ijRhpLy6/nTQbN3xF1VwKESihpsYYaRzBs=)
2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: jGT9DPCJHSotVx11OyuLlszzlR3EFrAj5UdwSuwi13Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl
rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 23:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65
Validity
Not Before: Sep 28 23:30:24 2026 GMT
Not After : Oct 5 23:30:24 2026 GMT
Subject: CN=6abaf891-e45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:7e:9e:ef:64:8c:5a:af:b8:9d:18:95:d4:
27:7a:63:01:c7:c3:b1:69:31:51:87:9f:d2:e2:ec:
63:d0:20:b0:8e:77:41:23:04:c5:65:41:d0:3e:a8:
46:46:69:1b:54:c0:fc:03:59:43:ea:92:2e:34:2c:
59:31:ae:f9:e0:ea:e5:5a:2c:c0:e1:0e:cf:11:a8:
3b:f6:93:63:32:d8:51:74:2e:1a:4b:30:a3:b3:26:
d5:74:bd:78:aa:ac:a5:3d:0a:75:38:93:ed:c3:74:
c7:6c:2f:be:0c:3d:5d:b1:94:54:92:34:7f:ce:50:
d8:aa:68:da:34:32:50:5f:29:6c:0f:28:87:47:37:
d4:10:22:9d:ee:52:7d:95:1e:1f:73:40:fe:0c:e5:
f3:b1:ee:6d:bf:96:d1:c0:80:97:13:80:cb:09:7e:
5e:cc:b7:8d:1d:66:83:be:0e:e0:fc:a6:9a:9a:95:
e2:48:3b:a2:56:3b:68:a1:8f:ad:c8:9f:41:01:27:
62:7f:d0:fb:43:63:7f:ad:77:a7:25:d9:ec:f3:97:
66:f4:58:2e:41:99:40:d0:cc:b1:fb:e9:10:fe:d0:
42:68:bb:57:91:b2:37:d8:76:32:70:9c:44:2c:ed:
47:17:48:4e:a6:ca:b7:03:0b:4c:34:b6:ef:30:8c:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:66:A0:FE:08:2B:49:97:CD:9D:E8:6C:D0:CC:E1:DF:0A:F2:47
X509v3 Authority Key Identifier:
keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:70:44:f7:78:e3:47:54:89:0c:63:bb:e6:ee:46:03:57:e3:
8d:71:3a:13:5e:91:5d:73:c2:f7:7f:7f:7c:61:9d:59:27:44:
f0:b4:bc:b6:6d:18:f6:b3:83:c7:10:cd:0b:70:e1:f7:65:88:
35:85:65:2f:a7:e6:03:00:dc:87:dd:a9:7d:f3:e1:43:1e:bc:
b7:a1:08:d4:ee:be:c5:a2:5e:de:33:9b:1a:ac:de:94:f4:6a:
a5:7a:3e:c8:e7:40:19:ce:23:e6:10:c4:da:f8:1c:a3:fe:1b:
42:00:d7:65:51:99:b5:7a:53:d0:7f:ae:87:21:e7:14:66:79:
14:a8:2f:a3:06:3e:e3:df:dc:35:3f:9f:ce:a0:1f:f9:14:63:
21:92:86:3e:2c:56:13:8f:e8:21:61:52:72:7d:64:94:3d:61:
73:e2:37:60:ae:85:fb:92:9b:30:a6:5d:d0:df:05:f6:13:b5:
9d:87:88:1e:81:f8:36:ee:3b:61:da:b8:ff:14:5c:9e:6a:9a:
82:fe:b2:6b:d7:22:8f:77:b8:56:9e:a1:73:0a:97:2a:a1:18:
14:25:eb:91:4f:49:f3:23:3e:41:cd:75:ce:47:cb:51:62:e7:
5b:03:4f:8b:8e:c4:16:91:ba:da:45:6e:69:1e:62:35:7e:cc:
62:e8:44:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0
NTEwNDVBNjUwHhcNMjYwOTI4MjMzMDI0WhcNMjYxMDA1MjMzMDI0WjAYMRYwFAYD
VQQDEw02YWJhZjg5MS1lNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAldN+nu9kjFqvuJ0YldQnemMBx8OxaTFRh5/S4uxj0CCwjndBIwTFZUHQPqhG
RmkbVMD8A1lD6pIuNCxZMa754OrlWizA4Q7PEag79pNjMthRdC4aSzCjsybVdL14
qqylPQp1OJPtw3THbC++DD1dsZRUkjR/zlDYqmjaNDJQXylsDyiHRzfUECKd7lJ9
lR4fc0D+DOXzse5tv5bRwICXE4DLCX5ezLeNHWaDvg7g/KaampXiSDuiVjtooY+t
yJ9BASdif9D7Q2N/rXenJdns85dm9FguQZlA0Myx++kQ/tBCaLtXkbI32HYycJxE
LO1HF0hOpsq3AwtMNLbvMIztrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkXZqD+
CCtJl82d6GzQzOHfCvJHMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD
RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX
bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4
QjA5NkxwQmRuNFZGRUVXbVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlXBE93jjR1SJDGO75u5GA1fjjXE6E16RXXPC939/fGGdWSdE8LS8tm0Y9rOD
xxDNC3Dh92WINYVlL6fmAwDch92pffPhQx68t6EI1O6+xaJe3jObGqzelPRqpXo+
yOdAGc4j5hDE2vgco/4bQgDXZVGZtXpT0H+uhyHnFGZ5FKgvowY+49/cNT+fzqAf
+RRjIZKGPixWE4/oIWFScn1klD1hc+I3YK6F+5KbMKZd0N8F9hO1nYeIHoH4Nu47
Ydq4/xRcnmqagv6ya9cij3e4Vp6hcwqXKqEYFCXrkU9J8yM+Qc11zkfLUWLnWwNP
i47EFpG62kVuaR5iNX7MYuhErA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:24:50 2026 by rpki-client