
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json)
Hash identifier: fBf3LO8+ypLLq5D1+btd20FwyiI7yrRzV0w9cCoHnHs=
Subject key identifier: 9D:87:4E:F2:2A:D9:BF:B7:36:F6:82:DC:04:F8:4B:CB:6F:BD:73:51
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial: 0512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
Manifest number: 04FC
Signing time: Tue 22 Sep 2026 23:19:33 +0000
Manifest this update: Tue 22 Sep 2026 23:19:33 +0000
Manifest next update: Tue 29 Sep 2026 23:19:33 +0000
Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: gprwo/2sVaI+2S8JAwQ7Sf8G1Lpv+aWhgwBVwEINI1I=)
2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: niq2x+TSIaVr2M9Yq4uJinm2FfqqQeskl0ZKo8P7pbQ=)
3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: jt8czHkqDAiIWpmhFez0BMJFRbxnxmNlnLH67Wuq05Y=)
4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: BviysmdqRD5SHQtytVhZ+gVShXWPkwicoPT5mAKuO60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Validity
Not Before: Sep 22 23:19:33 2026 GMT
Not After : Sep 29 23:19:33 2026 GMT
Subject: CN=6ab30d05-6032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:5e:99:0f:89:d6:67:dd:9f:33:ae:ab:26:
d1:1b:e4:f5:2f:66:46:9d:90:9f:70:a1:2d:e7:50:
52:47:af:47:70:9c:0f:e1:8c:82:43:8f:36:55:2c:
c2:d0:46:64:cc:3a:cc:70:0e:95:e0:e2:78:eb:e1:
4c:25:f9:3e:19:50:21:31:5b:82:b4:08:0f:b4:33:
8f:bf:51:c1:df:2e:f2:d0:0d:70:7c:37:9c:23:41:
1e:54:28:95:05:05:eb:50:0d:f2:eb:6e:e3:da:0b:
f2:31:a6:a1:99:b4:a8:4f:98:ed:93:d7:81:e1:9a:
fd:7a:b1:0e:e2:59:bd:36:45:c4:52:aa:39:d2:70:
54:25:07:35:21:d1:c4:74:77:16:7a:09:80:3f:39:
09:ca:3c:cf:a8:f7:da:f8:9e:93:00:df:4b:95:7a:
59:b6:21:83:82:b3:fd:43:28:33:27:65:d5:29:e0:
9c:22:36:6a:6a:3b:39:31:9a:34:05:7f:19:65:be:
fd:e8:0a:69:4d:bd:67:5e:88:0d:26:54:62:b2:22:
35:e4:3c:4d:2c:0f:6c:86:18:51:44:79:32:9a:7f:
f6:12:d7:d1:dd:a9:b9:00:0c:9f:30:c0:91:ce:9f:
8d:bf:44:e1:77:61:9e:e4:b7:9f:1a:43:86:3e:58:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:4E:F2:2A:D9:BF:B7:36:F6:82:DC:04:F8:4B:CB:6F:BD:73:51
X509v3 Authority Key Identifier:
keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:b3:9b:92:5c:ef:2c:83:f0:a8:dd:7a:d8:ad:b9:14:64:df:
69:cf:92:59:1b:7e:04:b4:34:55:65:f2:48:42:8f:fc:a3:47:
80:40:f8:69:8f:c2:98:54:4a:bc:e0:13:8e:d5:79:c5:5d:53:
db:f2:eb:9a:8b:b6:25:6d:28:c9:52:0d:11:70:96:68:a9:79:
30:39:45:fd:8c:fb:cd:d7:16:25:14:56:f9:21:4f:80:e9:85:
85:08:dc:a9:8b:e2:05:00:b5:8b:13:5a:b5:83:45:c4:cc:c0:
11:bd:17:ca:02:9a:d8:ce:77:dc:6d:07:88:71:82:05:99:f6:
55:f6:c7:da:bf:82:fc:00:54:c9:7c:81:c8:27:8b:46:b1:45:
27:bf:84:d0:b1:61:60:ef:ed:ca:9c:f7:89:d2:1e:1d:55:2a:
99:30:43:4a:1c:29:87:d1:90:14:b8:e7:58:08:54:3a:7b:23:
00:54:dd:d2:8c:fd:31:62:a5:9d:4f:52:4f:e5:7b:0b:37:f4:
96:a5:d2:1c:0d:99:72:82:ab:38:4c:ca:72:0a:8f:10:45:db:
f7:e4:53:21:a8:9f:92:94:0d:45:23:0a:f0:90:99:b1:0c:36:
f7:ab:d6:9f:d3:9c:2b:d3:dc:1f:68:76:4d:28:a3:6c:df:0b:
c5:1b:3b:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB
MEVCOThBMjYwHhcNMjYwOTIyMjMxOTMzWhcNMjYwOTI5MjMxOTMzWjAYMRYwFAYD
VQQDEw02YWIzMGQwNS02MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxixemQ+J1mfdnzOuqybRG+T1L2ZGnZCfcKEt51BSR69HcJwP4YyCQ482VSzC
0EZkzDrMcA6V4OJ46+FMJfk+GVAhMVuCtAgPtDOPv1HB3y7y0A1wfDecI0EeVCiV
BQXrUA3y627j2gvyMaahmbSoT5jtk9eB4Zr9erEO4lm9NkXEUqo50nBUJQc1IdHE
dHcWegmAPzkJyjzPqPfa+J6TAN9LlXpZtiGDgrP9QygzJ2XVKeCcIjZqajs5MZo0
BX8ZZb796AppTb1nXogNJlRisiI15DxNLA9shhhRRHkymn/2EtfR3am5AAyfMMCR
zp+Nv0Thd2Ge5LefGkOGPljqAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2HTvIq
2b+3NvaC3AT4S8tvvXNRMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0
NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp
aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY
QlB0V0tUTGdxMktnNjVpaVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY7ObklzvLIPwqN162K25FGTfac+SWRt+BLQ0VWXySEKP/KNHgED4aY/CmFRK
vOATjtV5xV1T2/Lrmou2JW0oyVINEXCWaKl5MDlF/Yz7zdcWJRRW+SFPgOmFhQjc
qYviBQC1ixNatYNFxMzAEb0XygKa2M533G0HiHGCBZn2VfbH2r+C/ABUyXyByCeL
RrFFJ7+E0LFhYO/typz3idIeHVUqmTBDShwph9GQFLjnWAhUOnsjAFTd0oz9MWKl
nU9ST+V7Czf0lqXSHA2ZcoKrOEzKcgqPEEXb9+RTIaifkpQNRSMK8JCZsQw296vW
n9OcK9PcH2h2TSijbN8LxRs7JA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:16:36 2026 by rpki-client