
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier: PNOAQ54yaK7XAwInOnHlzKQdVT2mgJGjpzvpOSiBY/Y=
Subject key identifier: 45:02:17:39:3D:B5:18:C7:45:7F:52:44:BA:33:93:AA:C1:2E:A0:3F
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number: 024F
Signing time: Wed 23 Sep 2026 02:12:36 +0000
Manifest this update: Wed 23 Sep 2026 02:12:35 +0000
Manifest next update: Wed 30 Sep 2026 02:12:35 +0000
Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: mTxBMCalL6fQ8ouDouspr9CX39BA4GxBqwNhecMZHVc=)
2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: 9qjTDIESmxEjzI0WcDUL/9pvn6/XAMgDdbhrxTlivHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Validity
Not Before: Sep 23 02:12:35 2026 GMT
Not After : Sep 30 02:12:35 2026 GMT
Subject: CN=6ab33594-71d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:3d:a2:bb:c2:c7:01:51:f8:e6:f2:78:9f:
ea:61:46:b1:70:59:9d:9f:1b:be:18:24:f7:76:f6:
59:fc:5e:e2:fa:35:1c:ab:e6:cf:85:cb:8e:ee:57:
5a:06:e8:86:1b:ae:39:92:a5:21:24:16:3b:91:33:
68:42:df:7a:14:ea:c0:54:64:aa:19:ba:91:4f:fd:
14:55:c4:90:b1:e5:70:92:73:ca:b4:b7:8c:47:7a:
77:82:94:a3:82:c9:6d:eb:b2:8f:c6:81:7b:91:67:
32:df:4a:d1:55:03:92:a1:1c:64:0e:7f:2d:07:6f:
0d:b4:96:e5:11:49:8f:cf:68:5e:e3:20:53:17:76:
a4:0c:8a:7b:7e:51:c3:bf:6d:ae:7c:92:76:56:7e:
bb:ed:2f:0e:88:a4:01:9b:7e:44:2a:4c:3a:e2:7f:
ed:9a:6e:7d:7f:00:53:30:da:05:41:8f:8c:97:b3:
58:4b:e9:f7:38:4e:15:99:68:21:21:bf:d6:df:71:
d5:c9:d8:24:0d:d8:53:95:0c:3c:3a:8a:f1:1c:bd:
e6:94:7c:97:28:b1:aa:8a:f7:9d:13:bf:23:ac:6b:
ae:b0:c3:68:a6:1e:85:63:b4:73:cf:23:91:8c:78:
9b:cd:70:55:7c:d9:3b:fa:f2:6b:1e:66:f8:f3:91:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:02:17:39:3D:B5:18:C7:45:7F:52:44:BA:33:93:AA:C1:2E:A0:3F
X509v3 Authority Key Identifier:
keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:37:04:cc:e6:6b:8d:40:09:c7:21:0d:4c:18:09:6c:85:8e:
f0:6a:a3:43:c7:3c:30:54:f7:40:ff:61:41:93:c1:dc:af:10:
9d:6e:d1:91:e3:7a:f4:d9:03:e9:65:35:ff:bf:7a:6e:ad:e8:
68:7f:ce:20:f9:29:6c:bc:68:96:57:9c:47:d4:d3:b8:d1:05:
b3:3a:89:3e:66:4d:68:df:f6:cc:4c:19:22:b5:d3:e4:3f:b3:
f5:12:25:21:6f:68:8d:d3:34:0f:24:73:32:8e:a5:2e:06:9b:
93:de:45:86:7d:94:f6:d2:41:2f:7a:62:bb:e9:7c:8b:1d:15:
8e:82:60:37:2e:79:eb:f2:18:70:96:2e:08:30:c7:4e:9c:cf:
98:4a:dd:92:c2:be:f2:2d:56:2d:5e:86:f2:c6:62:77:97:ed:
2a:a3:30:bd:f9:86:74:df:20:bf:e9:57:51:07:c0:45:6b:92:
8a:6c:43:0c:90:71:44:65:6d:d8:66:a3:56:b6:bb:7d:62:5f:
28:f7:67:c2:09:ae:77:f8:4d:1d:b5:1d:27:d5:89:ca:47:f0:
aa:d0:8f:51:c7:5f:e6:d2:51:71:4f:d0:fd:44:4f:51:0d:51:
d4:2e:db:cd:78:13:b1:48:f8:37:08:a9:fa:2c:76:d7:00:b4:
32:1d:2b:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4
MURBNEIzMUMwHhcNMjYwOTIzMDIxMjM1WhcNMjYwOTMwMDIxMjM1WjAYMRYwFAYD
VQQDEw02YWIzMzU5NC03MWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkZM9orvCxwFR+ObyeJ/qYUaxcFmdnxu+GCT3dvZZ/F7i+jUcq+bPhcuO7lda
BuiGG645kqUhJBY7kTNoQt96FOrAVGSqGbqRT/0UVcSQseVwknPKtLeMR3p3gpSj
gslt67KPxoF7kWcy30rRVQOSoRxkDn8tB28NtJblEUmPz2he4yBTF3akDIp7flHD
v22ufJJ2Vn677S8OiKQBm35EKkw64n/tmm59fwBTMNoFQY+Ml7NYS+n3OE4VmWgh
Ib/W33HVydgkDdhTlQw8OorxHL3mlHyXKLGqivedE78jrGuusMNoph6FY7RzzyOR
jHibzXBVfNk7+vJrHmb485Hu2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUCFzk9
tRjHRX9SRLozk6rBLqA/MB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx
RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq
M2E1amRsWlBqVmFCMmtzeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUzcEzOZrjUAJxyENTBgJbIWO8GqjQ8c8MFT3QP9hQZPB3K8QnW7RkeN69NkD
6WU1/796bq3oaH/OIPkpbLxollecR9TTuNEFszqJPmZNaN/2zEwZIrXT5D+z9RIl
IW9ojdM0DyRzMo6lLgabk95Fhn2U9tJBL3piu+l8ix0VjoJgNy556/IYcJYuCDDH
TpzPmErdksK+8i1WLV6G8sZid5ftKqMwvfmGdN8gv+lXUQfARWuSimxDDJBxRGVt
2GajVra7fWJfKPdnwgmud/hNHbUdJ9WJykfwqtCPUcdf5tJRcU/Q/URPUQ1R1C7b
zXgTsUj4Nwip+ix21wC0Mh0r6A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:48:03 2026 by rpki-client