
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
File: 1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json)
Hash identifier: mJ4VamgjL4JfhiprUhp7r6hXekCWDZ+T3JwjWKSbmEQ=
Subject key identifier: 00:E0:46:22:DA:FB:47:4A:D4:E1:E9:BB:96:B1:D8:20:0D:74:1A:B6
Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
Certificate issuer: /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
Manifest number: BD
Signing time: Fri 25 Sep 2026 07:00:26 +0000
Manifest this update: Fri 25 Sep 2026 07:00:25 +0000
Manifest next update: Fri 02 Oct 2026 07:00:25 +0000
Files and hashes: 1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: SyF5KiPSw/IhiOWuHSmtXbl+hkbPX2Savc0bRfBsJH8=)
2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Pc2Gm0El6C7yNRFdvtcnQRtp9swqk0Qn5OUm8Fjkbqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Validity
Not Before: Sep 25 07:00:25 2026 GMT
Not After : Oct 2 07:00:25 2026 GMT
Subject: CN=6ab61c09-faf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:49:70:74:59:dd:33:ac:50:b7:26:07:ff:
7e:e8:54:6f:7a:f3:8f:b8:4a:6a:3f:62:de:fc:9b:
2c:ad:b0:61:cb:68:5c:f4:d2:2b:7e:e0:c5:db:ce:
72:ba:97:e9:14:e0:e0:3e:6f:0b:ad:e7:dd:61:b0:
d1:c7:69:89:a7:5c:ee:4a:7c:f6:14:9d:5b:10:35:
68:48:95:67:95:03:ae:ae:66:e3:ed:4e:ee:2d:e1:
2d:d4:13:9c:3c:6b:60:3e:c9:68:88:ed:49:35:fd:
5b:ba:70:94:5b:f8:7a:d6:1b:fe:e1:33:da:14:83:
fd:52:3e:12:6f:2c:35:26:a2:09:14:ef:59:14:e4:
1b:9b:32:1e:dc:03:cd:e4:76:aa:a4:cb:a8:3d:c5:
0d:58:49:56:1d:ca:ac:bf:4c:a9:c1:4d:a6:ca:af:
65:b5:b1:03:8c:2a:62:e7:da:d1:cb:52:76:3c:45:
ec:12:19:79:09:a2:3c:ab:fd:cc:bd:77:50:74:53:
01:27:4b:b2:f3:3f:e4:e6:62:eb:3d:89:8d:91:66:
77:36:ee:4e:9a:14:96:bf:9d:bc:9f:f5:b8:33:7b:
c3:22:74:77:51:ca:1f:0c:84:d9:8e:cf:74:6b:0d:
2b:b7:ef:02:6e:84:73:32:d2:ea:26:ae:0c:1d:7c:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E0:46:22:DA:FB:47:4A:D4:E1:E9:BB:96:B1:D8:20:0D:74:1A:B6
X509v3 Authority Key Identifier:
keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:16:1f:68:d6:d5:05:32:b7:41:47:af:65:b2:59:58:b9:34:
f5:d8:98:8c:5b:0f:b8:01:c7:fd:96:b0:13:3b:e8:5e:5e:1b:
60:d9:42:1a:90:90:4f:40:4e:14:29:54:6b:7f:f3:a7:b7:e0:
bd:91:08:9e:34:7c:f2:9a:d9:c5:41:98:5c:12:c6:f8:47:2d:
10:d6:ad:cf:75:59:f3:64:81:4d:6d:bd:95:fe:8d:2a:52:6c:
b0:c4:78:8e:8f:1c:2d:04:5e:47:97:dd:c6:14:3f:a9:1b:66:
49:dc:2b:08:58:5c:74:02:79:dd:73:cf:79:c1:e8:0a:69:9e:
74:e3:88:a7:c8:a7:05:11:b4:46:7b:07:ea:8e:b8:e3:01:e9:
81:e1:e8:ec:58:93:19:61:ad:4f:cd:9f:ad:8a:b2:3c:16:fb:
30:59:00:33:64:27:05:7a:ae:46:60:94:6b:8c:83:2d:8d:39:
dd:c6:d3:78:ed:cb:02:63:7f:36:ee:ee:df:a0:9a:7d:20:db:
f0:55:a7:25:c8:d4:76:63:18:6e:66:67:89:44:c6:c6:95:7f:
38:c6:ae:90:a1:02:5f:9c:cc:f5:1b:dc:4f:5a:a6:3f:fd:a5:
52:cd:03:e2:d2:a0:8e:91:8f:95:72:50:d3:28:2e:f4:98:3b:
45:7c:94:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZDMUYxMTAvBgNVBAUTKEQ0QTRGMEI2MDAwREUwMjI0OEM0NjU3QUY5REQyNkIw
MjNDNUY2NzkwHhcNMjYwOTI1MDcwMDI1WhcNMjYxMDAyMDcwMDI1WjAYMRYwFAYD
VQQDEw02YWI2MWMwOS1mYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhZRJcHRZ3TOsULcmB/9+6FRvevOPuEpqP2Le/JssrbBhy2hc9NIrfuDF285y
upfpFODgPm8LrefdYbDRx2mJp1zuSnz2FJ1bEDVoSJVnlQOurmbj7U7uLeEt1BOc
PGtgPsloiO1JNf1bunCUW/h61hv+4TPaFIP9Uj4Sbyw1JqIJFO9ZFOQbmzIe3APN
5HaqpMuoPcUNWElWHcqsv0ypwU2myq9ltbEDjCpi59rRy1J2PEXsEhl5CaI8q/3M
vXdQdFMBJ0uy8z/k5mLrPYmNkWZ3Nu5OmhSWv528n/W4M3vDInR3UcofDITZjs90
aw0rt+8CboRzMtLqJq4MHXznXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADgRiLa
+0dK1OHpu5ax2CANdBq2MB8GA1UdIwQYMBaAFNSk8LYADeAiSMRlevndJrAjxfZ5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkMxRi9FNkE3RjZCODlB
ODUxMUYwOTdDMjQ2ODZDNEY5QUUwMi8xS1R3dGdBTjRDSkl4R1Y2LWQwbXNDUEY5
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFLVHd0Z0FONENKSXhHVjYtZDBtc0NQRjluay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkMxRi9FNkE3RjZCODlBODUxMUYwOTdDMjQ2ODZDNEY5QUUwMi8xS1R3dGdBTjRD
Skl4R1Y2LWQwbXNDUEY5bmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABBYfaNbVBTK3QUevZbJZWLk09diYjFsPuAHH/ZawEzvoXl4bYNlCGpCQT0BO
FClUa3/zp7fgvZEInjR88prZxUGYXBLG+EctENatz3VZ82SBTW29lf6NKlJssMR4
jo8cLQReR5fdxhQ/qRtmSdwrCFhcdAJ53XPPecHoCmmedOOIp8inBRG0RnsH6o64
4wHpgeHo7FiTGWGtT82frYqyPBb7MFkAM2QnBXquRmCUa4yDLY053cbTeO3LAmN/
Nu7u36CafSDb8FWnJcjUdmMYbmZniUTGxpV/OMaukKECX5zM9RvcT1qmP/2lUs0D
4tKgjpGPlXJQ0ygu9Jg7RXyUTw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:16:49 2026 by rpki-client