
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
File: 66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json)
Hash identifier: a5a4brZZ+DSrB0L1+s/zgzmKdGYEnGq/PEeGBx4cbPg=
Subject key identifier: 92:BE:36:65:18:8F:4E:CC:76:AF:50:E7:AE:0B:03:AE:49:29:97:84
Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
Certificate issuer: /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
Manifest number: 01A7
Signing time: Mon 21 Sep 2026 04:07:01 +0000
Manifest this update: Mon 21 Sep 2026 04:07:01 +0000
Manifest next update: Mon 28 Sep 2026 04:07:01 +0000
Files and hashes: 1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: WO7HghFSn3iPU16Gz9amju+P15OpX9KQZdoe5m+TLDs=)
2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: TP1lZPycmwhzIV9eyCEIRMOWox0jw70KYaYid67Sq48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Validity
Not Before: Sep 21 04:07:01 2026 GMT
Not After : Sep 28 04:07:01 2026 GMT
Subject: CN=6ab0ad65-9db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:7f:d9:a6:b1:05:98:82:3f:af:2c:b3:a0:
d2:89:e9:05:e6:da:4a:ea:d1:d6:89:57:d6:27:3a:
3f:87:3b:85:96:d5:e0:e0:a7:2f:37:14:53:64:44:
1c:d6:94:a0:bd:8e:60:6e:69:cf:41:14:20:09:cb:
d6:ec:49:96:8c:a7:0e:e3:d8:6b:d6:69:4a:0a:3e:
84:32:6d:46:71:c3:27:0f:5c:49:de:ec:71:06:42:
35:a2:96:93:75:9b:e2:b4:05:62:24:6f:b0:08:1d:
eb:a6:0a:97:44:d3:2b:a4:75:91:cb:bb:21:49:14:
eb:70:8c:0b:55:c0:cb:b0:1b:3b:25:ea:31:0b:a8:
c1:b4:13:26:aa:b5:6d:8e:04:4b:d3:98:1f:ae:c4:
18:c0:ea:20:c4:e5:09:9c:29:39:5a:8a:6e:ba:9a:
18:9f:eb:68:23:7b:ff:5a:35:84:5b:c4:29:87:1a:
fb:eb:f7:55:f5:7a:6c:3f:e6:8f:40:93:63:74:5b:
78:15:1b:92:60:45:e9:48:22:b5:f1:f7:73:cb:a3:
2d:95:f7:f1:50:cd:51:f3:f4:6b:5a:7c:29:0b:24:
c9:1a:dd:02:f8:58:b8:7c:b0:ca:68:36:5a:6a:a2:
da:53:df:49:ae:85:ae:c5:1c:64:f4:0d:b8:fa:de:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:36:65:18:8F:4E:CC:76:AF:50:E7:AE:0B:03:AE:49:29:97:84
X509v3 Authority Key Identifier:
keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d3:f4:a1:23:23:2a:27:e6:ca:19:87:f9:31:61:57:f5:f1:
d6:da:26:6f:9b:eb:56:9c:2b:49:c4:d0:8b:a8:26:26:ed:32:
90:e8:c9:99:c7:23:5d:11:49:a7:5f:ea:34:bb:2d:d8:63:16:
22:cb:5e:a3:49:df:8a:31:f0:b2:c8:99:ea:a4:9c:54:cf:be:
76:0c:aa:37:09:95:9c:78:19:d3:65:5f:19:06:01:9c:5b:65:
49:49:d0:a1:88:35:79:78:34:c2:f5:11:c7:d3:df:f0:35:78:
97:b1:47:cf:61:b6:73:da:ae:fb:31:f3:14:6c:53:b6:6d:f4:
16:28:21:2a:bd:1f:17:15:dd:f1:cd:ad:46:1a:ca:8b:26:ab:
4d:d1:4c:2f:aa:78:ae:f0:6c:28:8d:50:33:98:a4:d6:fb:1c:
6c:6e:6e:b3:28:88:71:6e:81:4f:84:8f:53:91:fb:a1:1f:e6:
99:48:fd:64:5d:b7:99:90:14:46:86:20:ba:f3:db:10:e8:a7:
3e:90:ef:cd:c7:5d:62:53:02:3c:76:59:01:a3:29:cd:a3:ef:
e5:9f:03:df:d6:f1:a2:d7:d7:2d:5d:11:fc:91:9d:4a:43:7b:
b4:a8:f1:76:1e:3b:a5:fc:3f:97:e2:18:b0:f5:bd:4c:65:77:
19:75:fe:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA0RDYxMTAvBgNVBAUTKEVCQUE0QzQ0RjI0ODkzNzE0QTFENUIzNjBBMkQ3QjJE
ODYwNUIxNjMwHhcNMjYwOTIxMDQwNzAxWhcNMjYwOTI4MDQwNzAxWjAYMRYwFAYD
VQQDEw02YWIwYWQ2NS05ZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGV/2aaxBZiCP68ss6DSiekF5tpK6tHWiVfWJzo/hzuFltXg4KcvNxRTZEQc
1pSgvY5gbmnPQRQgCcvW7EmWjKcO49hr1mlKCj6EMm1GccMnD1xJ3uxxBkI1opaT
dZvitAViJG+wCB3rpgqXRNMrpHWRy7shSRTrcIwLVcDLsBs7JeoxC6jBtBMmqrVt
jgRL05gfrsQYwOogxOUJnCk5WopuupoYn+toI3v/WjWEW8Qphxr76/dV9XpsP+aP
QJNjdFt4FRuSYEXpSCK18fdzy6MtlffxUM1R8/RrWnwpCyTJGt0C+Fi4fLDKaDZa
aqLaU99JroWuxRxk9A24+t7HNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJK+NmUY
j07Mdq9Q564LA65JKZeEMB8GA1UdIwQYMBaAFOuqTETySJNxSh1bNgotey2GBbFj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9BRDBDQUMxRTMx
QTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWszRktIVnMyQ2kxN0xZWUZz
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzY2cE1SUEpJazNGS0hWczJDaTE3TFlZRnNXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDRENi9BRDBDQUMxRTMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWsz
RktIVnMyQ2kxN0xZWUZzV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAStP0oSMjKifmyhmH+TFhV/Xx1tomb5vrVpwrScTQi6gmJu0ykOjJmccjXRFJ
p1/qNLst2GMWIsteo0nfijHwssiZ6qScVM++dgyqNwmVnHgZ02VfGQYBnFtlSUnQ
oYg1eXg0wvURx9Pf8DV4l7FHz2G2c9qu+zHzFGxTtm30FighKr0fFxXd8c2tRhrK
iyarTdFML6p4rvBsKI1QM5ik1vscbG5usyiIcW6BT4SPU5H7oR/mmUj9ZF23mZAU
RoYguvPbEOinPpDvzcddYlMCPHZZAaMpzaPv5Z8D39bxotfXLV0R/JGdSkN7tKjx
dh47pfw/l+IYsPW9TGV3GXX+xQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:24:42 2026 by rpki-client