
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json)
Hash identifier: JyBgAtb40JfNvitcgYFwZk2PyhWuXetlkzWZp8mlb2Y=
Subject key identifier: 4E:9F:FD:EC:C0:00:E8:A8:D6:59:DF:F1:CA:57:E8:86:7A:6C:F4:7D
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
Manifest number: 0146
Signing time: Mon 05 Oct 2026 05:48:25 +0000
Manifest this update: Mon 05 Oct 2026 05:48:24 +0000
Manifest next update: Mon 12 Oct 2026 05:48:24 +0000
Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: RKy/Pk3DfwM9vB6UgM3WpS+0EqS96/qRv8vCqJQSnDs=)
2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: h/SmLSS017YgGA7zYy4/07yQ0L9fFewbCCdQwU4sBFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Validity
Not Before: Oct 5 05:48:24 2026 GMT
Not After : Oct 12 05:48:24 2026 GMT
Subject: CN=6ac33a29-3195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:c4:f8:ae:69:f3:65:b7:e5:31:1c:59:46:
ef:9e:d5:ab:3d:a5:d2:47:54:ee:26:b8:c5:55:a5:
c4:bc:39:6f:2f:8c:af:43:cf:1a:46:fa:98:99:bd:
55:10:e4:fe:72:93:2a:dc:ed:6d:0a:51:f4:5c:35:
45:25:bd:c5:91:79:e1:76:da:60:75:74:5c:82:95:
11:18:47:a7:e0:d9:d3:68:3f:7f:d6:77:cc:8c:08:
ab:48:b9:90:de:2d:42:29:7c:5e:1d:85:73:04:22:
99:7a:05:81:73:a5:6f:32:2d:f2:4c:00:2d:7b:5e:
ae:7b:75:83:b3:9b:00:e6:57:11:fa:04:71:ae:bd:
02:22:07:3d:22:5e:db:60:0c:fe:29:a6:a9:c4:57:
51:e2:40:52:a0:ad:58:93:6c:ad:c0:6e:cd:f0:56:
4f:ab:64:cf:8c:70:bd:8f:20:90:f9:dc:4a:a8:fc:
96:26:1b:09:64:e2:c7:93:10:43:b1:05:75:a4:dc:
7f:3b:4b:36:b7:68:4d:fe:84:1f:46:5a:da:93:45:
6f:43:44:2d:fc:10:cb:5b:f1:a3:23:fe:13:79:f7:
dc:8d:ba:35:d0:c6:d6:53:e5:14:0e:e3:2b:5d:75:
6e:f1:c4:d4:d7:6d:cb:64:c8:76:f5:c4:ec:60:e7:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:FD:EC:C0:00:E8:A8:D6:59:DF:F1:CA:57:E8:86:7A:6C:F4:7D
X509v3 Authority Key Identifier:
keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:b6:1a:5d:2c:f9:ca:26:41:88:63:ab:a7:ed:73:8a:6e:e3:
fe:79:22:1f:e8:7c:2e:8c:60:ca:c8:2c:0e:3a:94:fc:8e:cb:
e3:0e:88:0d:9f:a5:5c:5d:8e:03:ba:d6:23:86:1b:97:44:80:
3a:7f:d7:5f:c9:82:c7:77:72:e8:e8:e1:1a:57:13:53:74:ec:
9b:5f:67:3d:01:08:f0:7f:19:be:33:da:e4:95:a9:66:32:0b:
1a:8f:14:cd:8a:59:ff:df:b0:8d:e2:f0:77:03:02:29:5c:78:
96:59:65:24:93:3b:21:1d:bd:fa:c3:96:9c:66:81:eb:79:ff:
dd:dd:74:ee:62:92:2a:a3:18:b6:eb:95:48:06:83:96:c6:3b:
b0:3f:61:fe:91:51:9c:85:f8:4c:03:2e:40:54:5e:5c:91:af:
29:0d:95:28:cc:c8:ac:7c:ed:9a:fb:de:71:72:97:cf:96:fc:
3a:5a:38:d2:a3:f7:65:a8:fa:1d:ba:1d:77:d8:46:1f:14:27:
73:24:f5:96:77:7d:cb:f8:c2:ef:6b:57:a8:25:6e:98:c0:2b:
df:79:b2:78:e4:a7:76:47:56:c3:94:64:f5:26:0e:63:d2:57:
ef:1d:41:a0:5f:1a:8e:c2:99:ea:55:ee:e8:da:08:c4:8c:8e:
8a:9b:5c:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJEOTMxMTAvBgNVBAUTKEZCQUU0REI5MzkyQzgxOTMyMUFGNTExREM2QjJCNUFB
ODk5ODE5RkEwHhcNMjYxMDA1MDU0ODI0WhcNMjYxMDEyMDU0ODI0WjAYMRYwFAYD
VQQDEw02YWMzM2EyOS0zMTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnq/E+K5p82W35TEcWUbvntWrPaXSR1TuJrjFVaXEvDlvL4yvQ88aRvqYmb1V
EOT+cpMq3O1tClH0XDVFJb3FkXnhdtpgdXRcgpURGEen4NnTaD9/1nfMjAirSLmQ
3i1CKXxeHYVzBCKZegWBc6VvMi3yTAAte16ue3WDs5sA5lcR+gRxrr0CIgc9Il7b
YAz+KaapxFdR4kBSoK1Yk2ytwG7N8FZPq2TPjHC9jyCQ+dxKqPyWJhsJZOLHkxBD
sQV1pNx/O0s2t2hN/oQfRlrak0VvQ0Qt/BDLW/GjI/4Teffcjbo10MbWU+UUDuMr
XXVu8cTU123LZMh29cTsYOcIuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6f/ezA
AOio1lnf8cpX6IZ6bPR9MB8GA1UdIwQYMBaAFPuuTbk5LIGTIa9RHcaytaqJmBn6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkQ5My84MThGREI3OEQ0
NEQxMUVGQjE2MDBCMjhDNEY5QUUwMi8tNjVOdVRrc2daTWhyMUVkeHJLMXFvbVlH
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkQ5My84MThGREI3OEQ0NEQxMUVGQjE2MDBCMjhDNEY5QUUwMi8tNjVOdVRrc2da
TWhyMUVkeHJLMXFvbVlHZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMrYaXSz5yiZBiGOrp+1zim7j/nkiH+h8LoxgysgsDjqU/I7L4w6IDZ+lXF2O
A7rWI4Ybl0SAOn/XX8mCx3dy6OjhGlcTU3Tsm19nPQEI8H8ZvjPa5JWpZjILGo8U
zYpZ/9+wjeLwdwMCKVx4llllJJM7IR29+sOWnGaB63n/3d107mKSKqMYtuuVSAaD
lsY7sD9h/pFRnIX4TAMuQFReXJGvKQ2VKMzIrHztmvvecXKXz5b8Olo40qP3Zaj6
Hbodd9hGHxQncyT1lnd9y/jC72tXqCVumMAr33myeOSndkdWw5Rk9SYOY9JX7x1B
oF8ajsKZ6lXu6NoIxIyOiptcXw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:53 2026 by rpki-client