
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
File: 0RpQ1ePqDchJb47JVhvb5mrHnUw.mft (raw, json)
Hash identifier: 7i0wUOzXQmIQe4cAhyA+ehT1c6tS9CzJg7nE/Y9siGg=
Subject key identifier: 2F:B2:64:3D:49:50:7D:F8:A4:47:A6:88:D0:BA:21:7C:30:E2:80:5A
Authority key identifier: D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C
Certificate issuer: /CN=A91FE67F/serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
Manifest number: 5E
Signing time: Fri 25 Sep 2026 08:16:49 +0000
Manifest this update: Fri 25 Sep 2026 08:16:48 +0000
Manifest next update: Fri 02 Oct 2026 08:16:48 +0000
Files and hashes: 1: 0RpQ1ePqDchJb47JVhvb5mrHnUw.crl (hash: wkWfF1+fIs6lS/unMV6CNFOMRg3Em8vqTVCampJJaaU=)
2: PUyk8l38UZAs2q5bx3LHQpw-TtM.asa (hash: V7Ud7WPr6qHSLXc+8OdONBmElsZqv1id7Jc60RmsL14=)
3: 7D1805702E4211F18DDF32E693833773.roa (hash: eAvktFFlPMI5ncO/3br/ixgJ8aaCullrYEFRoA4e5b0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl
rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE67F, serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
Validity
Not Before: Sep 25 08:16:48 2026 GMT
Not After : Oct 2 08:16:48 2026 GMT
Subject: CN=6ab62df1-bb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:04:94:90:5d:2a:df:c9:82:3f:98:47:69:
e1:fe:63:38:39:ab:ad:70:f6:8f:8c:53:b2:15:06:
f5:3a:6f:6d:82:07:2f:91:99:3a:73:23:d3:ed:5c:
b9:45:b5:16:8d:97:26:6f:87:a4:8a:bb:b0:8d:92:
cc:95:62:c8:72:fa:b9:d3:45:54:b1:68:88:31:83:
5f:62:ee:55:9c:2a:90:ce:ff:f8:c4:db:8a:5a:66:
b4:b1:5d:21:d8:d1:53:9b:8e:3b:15:d1:28:fa:1a:
40:36:6d:13:e4:2f:43:ef:a5:dc:50:79:76:80:0f:
7b:c8:6c:d1:06:6b:a6:d8:81:62:00:06:52:3a:c7:
a4:ea:84:02:b9:ff:33:02:d0:d6:3c:0f:98:44:3e:
1f:d3:a1:85:a2:93:f1:6e:99:ac:5b:44:46:58:bf:
94:ad:25:72:55:61:93:ec:7f:86:20:d3:d7:b7:79:
f1:93:9a:8a:c1:58:1c:ab:77:fe:e0:9f:30:3d:e8:
3f:43:b1:18:93:4f:11:0c:de:a7:37:c9:11:60:56:
75:bf:48:df:93:d8:b3:c1:22:6c:87:22:4b:ec:e6:
58:8b:b1:05:5d:2f:c4:f6:e0:e5:e5:5a:da:ec:71:
98:0a:00:77:bd:fe:9c:bf:10:41:1a:25:88:e9:ca:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B2:64:3D:49:50:7D:F8:A4:47:A6:88:D0:BA:21:7C:30:E2:80:5A
X509v3 Authority Key Identifier:
keyid:D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:f8:e9:b3:cc:3d:2a:6f:56:62:51:2f:0e:8e:25:b3:b2:5e:
9c:6f:c2:ac:a2:d1:8d:6b:a4:29:c1:e7:23:0d:94:31:e8:d2:
71:05:85:09:6e:e0:89:1f:85:9e:9e:9f:4f:33:cf:72:d8:73:
a0:bc:45:73:f2:ee:71:29:79:bb:a3:c0:0a:ae:b4:c2:c3:42:
36:52:8f:46:72:18:be:7d:a0:85:49:3d:55:65:34:7f:6e:c5:
61:8b:9f:67:b3:15:54:00:56:f9:8a:cc:7a:4c:03:25:0e:c7:
f1:27:bb:b0:20:46:57:1a:fd:50:3a:c6:b7:c5:43:77:2a:64:
d4:23:3a:66:87:40:5f:18:3e:1f:3f:98:60:85:18:f6:98:6d:
db:58:61:38:d1:c8:46:b6:95:fb:98:28:c2:52:90:3c:2c:e8:
5c:5a:0e:97:e8:71:b0:d7:f9:47:ab:9d:4a:90:08:e4:40:6a:
1a:84:0d:7f:ae:f3:59:09:0c:48:ad:d5:d2:c8:fa:cb:d4:0c:
5c:fa:11:17:f2:27:be:10:4e:1b:0e:47:db:30:55:14:be:24:
55:56:d4:2a:0e:f7:5d:7b:f6:36:4e:29:c9:27:4d:54:f5:1c:
7c:2c:d7:79:61:f4:9d:cd:b6:90:27:70:27:68:ef:fc:56:bf:
4d:74:d5:6a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RTY3RjExMC8GA1UEBRMoRDExQTUwRDVFM0VBMERDODQ5NkY4RUM5NTYxQkRCRTY2
QUM3OUQ0QzAeFw0yNjA5MjUwODE2NDhaFw0yNjEwMDIwODE2NDhaMBgxFjAUBgNV
BAMTDTZhYjYyZGYxLWJiMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF4wSUkF0q38mCP5hHaeH+Yzg5q61w9o+MU7IVBvU6b22CBy+RmTpzI9PtXLlF
tRaNlyZvh6SKu7CNksyVYshy+rnTRVSxaIgxg19i7lWcKpDO//jE24paZrSxXSHY
0VObjjsV0Sj6GkA2bRPkL0PvpdxQeXaAD3vIbNEGa6bYgWIABlI6x6TqhAK5/zMC
0NY8D5hEPh/ToYWik/FumaxbREZYv5StJXJVYZPsf4Yg09e3efGTmorBWByrd/7g
nzA96D9DsRiTTxEM3qc3yRFgVnW/SN+T2LPBImyHIkvs5liLsQVdL8T24OXlWtrs
cZgKAHe9/py/EEEaJYjpypKHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL7JkPUlQ
ffikR6aI0LohfDDigFowHwYDVR0jBBgwFoAU0RpQ1ePqDchJb47JVhvb5mrHnUww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNjdGLzc4NTFGRTM0MkU0
MTExRjE4MzVFODkzNzkzODMzNzczLzBScFExZVBxRGNoSmI0N0pWaHZiNW1ySG5V
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMFJwUTFlUHFEY2hKYjQ3SlZodmI1bXJIblV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF
NjdGLzc4NTFGRTM0MkU0MTExRjE4MzVFODkzNzkzODMzNzczLzBScFExZVBxRGNo
SmI0N0pWaHZiNW1ySG5Vdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBF+OmzzD0qb1ZiUS8OjiWzsl6cb8KsotGNa6QpwecjDZQx6NJxBYUJbuCJH4We
np9PM89y2HOgvEVz8u5xKXm7o8AKrrTCw0I2Uo9Gchi+faCFST1VZTR/bsVhi59n
sxVUAFb5isx6TAMlDsfxJ7uwIEZXGv1QOsa3xUN3KmTUIzpmh0BfGD4fP5hghRj2
mG3bWGE40chGtpX7mCjCUpA8LOhcWg6X6HGw1/lHq51KkAjkQGoahA1/rvNZCQxI
rdXSyPrL1Axc+hEX8ie+EE4bDkfbMFUUviRVVtQqDvdde/Y2TinJJ01U9Rx8LNd5
YfSdzbaQJ3AnaO/8Vr9NdNVq
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:32 2026 by rpki-client