
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json)
Hash identifier: VNGN5Vb2N5Y1pd+NB1IY8XvtAULjmF/ZeWawt6cPLQo=
Subject key identifier: F9:90:1E:71:46:88:0E:45:14:D6:86:34:48:74:C1:5C:57:5E:C7:15
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
Manifest number: 0198
Signing time: Tue 13 Oct 2026 04:55:56 +0000
Manifest this update: Tue 13 Oct 2026 04:55:56 +0000
Manifest next update: Tue 20 Oct 2026 04:55:56 +0000
Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: bWaQ49EWPmmnPBPgdDCsSnxhMG7LgqdBaxpEJQlq+Qo=)
2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: EDFQEdiEmOIwcAFLSsj8eYAZyjqk/sVRS9qA9gJE9Ok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 04:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Validity
Not Before: Oct 13 04:55:56 2026 GMT
Not After : Oct 20 04:55:56 2026 GMT
Subject: CN=6acdb9dc-f8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:9e:ff:43:57:b1:00:07:17:36:7b:63:2d:
af:f7:36:af:7f:58:b7:c3:e8:df:cb:c0:70:de:2b:
87:b8:56:2d:f6:b4:33:66:40:a7:40:59:73:a5:fa:
9b:46:83:8b:2c:93:54:a5:c8:b3:85:4c:b6:51:a9:
50:db:af:0c:67:3d:f5:3d:3d:f8:0b:55:46:ba:e7:
13:2c:70:cb:f1:a0:10:87:98:33:03:d1:1d:c9:93:
cb:96:69:7d:28:67:c3:99:e0:27:b0:f6:41:d6:7d:
39:8d:4f:38:16:db:b5:df:ea:cc:60:54:1a:1e:4f:
74:05:60:81:7d:78:43:08:4a:31:f4:f2:43:38:5a:
76:75:86:f8:5f:c4:cc:c7:84:29:3d:e3:5d:43:18:
51:42:48:8a:74:17:f3:96:ed:ea:85:2e:83:9d:68:
6c:c7:dc:a1:61:20:e5:87:5e:02:dd:ed:83:ab:f7:
ab:0f:46:11:36:84:08:10:84:a5:e2:9a:76:10:f2:
1e:bd:7f:99:30:ed:d4:f8:9f:df:e8:dc:be:6f:d0:
2a:18:a4:06:6f:99:35:a3:be:8d:98:83:20:0b:80:
28:51:ca:91:74:ac:32:9a:87:ee:9d:49:b9:ac:25:
61:dc:6a:11:cd:e0:fc:63:d4:3a:e8:2b:c2:ea:8f:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:1E:71:46:88:0E:45:14:D6:86:34:48:74:C1:5C:57:5E:C7:15
X509v3 Authority Key Identifier:
keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:bf:e7:88:d6:32:6e:0a:18:35:39:1e:fd:0d:15:9b:1b:a4:
43:52:6a:4b:02:0f:36:d8:94:a8:ad:0e:da:96:28:d5:9f:85:
19:6b:d5:79:bf:81:e1:9e:b7:af:82:01:85:82:2f:2b:07:4b:
d6:c1:c8:44:74:a2:c7:0e:46:f5:6c:cb:39:3e:2c:35:55:6d:
87:f3:84:8a:8b:63:93:27:99:0e:77:00:e8:b0:f8:ef:c5:72:
41:78:e7:40:05:0c:56:d4:0a:4a:ee:3b:c4:76:64:5b:d6:e7:
5f:32:03:2c:c0:db:12:87:36:c7:1a:13:dd:91:53:49:e4:21:
06:c9:d0:bc:fb:a7:c7:06:71:d8:a4:91:b8:2b:d7:d7:c7:2d:
e3:85:f9:ca:56:68:43:3c:b5:5e:20:9d:27:ff:b4:f6:f4:21:
e1:29:a7:da:4c:8f:f2:20:aa:07:9f:22:43:96:25:08:db:a6:
e0:5e:d6:14:bb:35:d2:cf:7f:5e:46:3d:91:11:a6:bb:e0:d1:
46:0f:de:26:ba:d2:2d:e0:e1:ad:cf:f4:32:ba:68:2b:c8:1a:
36:46:36:e2:57:a5:06:62:72:fe:56:7a:d6:3c:4f:bd:57:38:
26:df:b4:39:e2:2f:7e:3d:e3:31:25:d5:29:b3:7d:a2:3a:77:
3b:46:1e:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0
OUM1Q0FDMTcwHhcNMjYxMDEzMDQ1NTU2WhcNMjYxMDIwMDQ1NTU2WjAYMRYwFAYD
VQQDEw02YWNkYjlkYy1mOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyHCe/0NXsQAHFzZ7Yy2v9zavf1i3w+jfy8Bw3iuHuFYt9rQzZkCnQFlzpfqb
RoOLLJNUpcizhUy2UalQ268MZz31PT34C1VGuucTLHDL8aAQh5gzA9EdyZPLlml9
KGfDmeAnsPZB1n05jU84Ftu13+rMYFQaHk90BWCBfXhDCEox9PJDOFp2dYb4X8TM
x4QpPeNdQxhRQkiKdBfzlu3qhS6DnWhsx9yhYSDlh14C3e2Dq/erD0YRNoQIEISl
4pp2EPIevX+ZMO3U+J/f6Ny+b9AqGKQGb5k1o76NmIMgC4AoUcqRdKwymofunUm5
rCVh3GoRzeD8Y9Q66CvC6o8oUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmQHnFG
iA5FFNaGNEh0wVxXXscVMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC
OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy
QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk
UGY2RHJyN3k2akZKeGNyQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWb/niNYybgoYNTke/Q0VmxukQ1JqSwIPNtiUqK0O2pYo1Z+FGWvVeb+B4Z63
r4IBhYIvKwdL1sHIRHSixw5G9WzLOT4sNVVth/OEiotjkyeZDncA6LD478VyQXjn
QAUMVtQKSu47xHZkW9bnXzIDLMDbEoc2xxoT3ZFTSeQhBsnQvPunxwZx2KSRuCvX
18ct44X5ylZoQzy1XiCdJ/+09vQh4Smn2kyP8iCqB58iQ5YlCNum4F7WFLs10s9/
XkY9kRGmu+DRRg/eJrrSLeDhrc/0MrpoK8gaNkY24lelBmJy/lZ61jxPvVc4Jt+0
OeIvfj3jMSXVKbN9ojp3O0YewA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:23:19 2026 by rpki-client