
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File: 0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier: GF/5IQjutcLeGVtwsy2P5l+eM3GNknAzRlwoZJrnIS8=
Subject key identifier: 3C:38:E6:7D:44:96:9B:5A:4E:71:D2:AD:EB:08:DD:DC:F5:5C:BE:FD
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer: /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial: 07F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number: 07D4
Signing time: Sun 20 Sep 2026 21:21:07 +0000
Manifest this update: Sun 20 Sep 2026 21:21:06 +0000
Manifest next update: Sun 27 Sep 2026 21:21:06 +0000
Files and hashes: 1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: 1tvBochfFDoLs/tza65E6Uk+DDbo67ctjo59dz5wqH0=)
2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: a0yVbOyKmzsc8MOg+dTg0w6gn2yodW2h3rxYL00GULI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2032 (0x7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Validity
Not Before: Sep 20 21:21:06 2026 GMT
Not After : Sep 27 21:21:06 2026 GMT
Subject: CN=6ab04e43-4ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:a0:0d:8b:0c:d1:7d:fb:63:e0:6d:33:67:
66:ef:43:06:1f:a6:2e:72:2d:53:77:f7:cc:fd:1e:
fc:93:63:69:88:8c:02:9a:14:e8:f4:54:3b:3a:ec:
22:29:fc:53:18:bb:c1:17:1c:5a:fe:68:b8:a3:82:
de:02:0e:bd:53:fc:0e:96:5a:8a:d8:bf:90:6f:fe:
6a:90:c2:d4:7f:e9:53:88:8b:84:50:a0:8c:0b:16:
e0:e7:a6:8d:a4:06:64:88:73:67:5e:a9:35:e4:8b:
e9:56:3c:7f:17:89:cc:b0:4a:81:cd:f0:54:ff:81:
94:27:b1:76:78:d8:a1:a9:66:28:66:aa:30:88:69:
d7:53:71:ee:8b:b9:4a:4b:17:cd:88:30:0a:5f:bd:
7b:e0:e3:42:9c:24:8c:e2:cf:92:63:f3:22:fb:96:
20:4d:0b:da:67:80:16:62:54:04:60:ed:18:86:60:
e0:11:fe:6a:bf:90:e8:20:09:d0:1f:0f:fb:da:37:
35:3b:67:05:6d:b4:60:63:27:59:bf:a2:17:38:b1:
3a:7d:a8:71:e5:b8:d8:72:5e:d6:6c:f9:d9:9b:53:
37:09:9e:62:b6:d3:61:03:bf:ae:b0:63:c8:b1:12:
3c:c7:0f:df:58:e6:68:9e:2f:1f:49:86:b3:0f:a8:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:E6:7D:44:96:9B:5A:4E:71:D2:AD:EB:08:DD:DC:F5:5C:BE:FD
X509v3 Authority Key Identifier:
keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:dc:a1:26:4b:d9:1d:a4:0d:5b:2b:60:74:61:5e:ca:d9:10:
9d:99:4d:35:41:91:8f:d3:75:c8:03:4a:d4:9d:2e:00:73:c9:
70:8a:bb:d1:cd:9f:25:e3:56:36:38:35:40:83:83:e7:3b:a9:
57:95:ce:be:82:8a:29:53:df:bc:9c:be:e9:ba:24:97:06:ce:
77:24:e0:a2:8c:e2:35:52:ed:22:55:9f:8c:da:51:4c:16:1a:
40:01:9b:4d:68:56:a0:fa:a1:9b:18:3a:6c:31:cf:d3:34:b9:
ba:ed:28:45:7a:8f:80:05:0d:41:91:54:a2:bb:a4:62:8e:17:
60:fa:99:c0:ae:63:da:27:ad:ac:b6:15:9a:38:93:28:da:91:
1a:a0:1c:f2:ee:5a:ef:4d:55:da:c4:29:49:5f:41:8e:b7:ed:
bf:e5:f8:c4:91:9c:60:1b:84:e9:5f:d4:6f:c2:67:e1:e3:1d:
b3:e5:cb:b9:b5:c9:ec:bb:0e:94:91:83:8b:1f:2f:7f:f0:9c:
a3:ea:dc:98:48:87:c8:e9:ad:96:26:21:a5:cd:25:f5:f1:79:
eb:b1:16:43:4a:48:41:86:ee:81:17:0d:be:0d:d1:11:65:d6:
98:68:09:5d:59:4b:a4:ed:ee:14:40:ce:0a:05:d7:3d:df:a1:
1b:5a:aa:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA2QUYxMTAvBgNVBAUTKEQxRTdDMjRBNzQ0MTRDQkREQ0ZDRDg4RTQ2QzVENUNE
M0IzRUFFRDcwHhcNMjYwOTIwMjEyMTA2WhcNMjYwOTI3MjEyMTA2WjAYMRYwFAYD
VQQDEw02YWIwNGU0My00Y2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkmgDYsM0X37Y+BtM2dm70MGH6Yuci1Td/fM/R78k2NpiIwCmhTo9FQ7Ouwi
KfxTGLvBFxxa/mi4o4LeAg69U/wOllqK2L+Qb/5qkMLUf+lTiIuEUKCMCxbg56aN
pAZkiHNnXqk15IvpVjx/F4nMsEqBzfBU/4GUJ7F2eNihqWYoZqowiGnXU3Hui7lK
SxfNiDAKX7174ONCnCSM4s+SY/Mi+5YgTQvaZ4AWYlQEYO0YhmDgEf5qv5DoIAnQ
Hw/72jc1O2cFbbRgYydZv6IXOLE6fahx5bjYcl7WbPnZm1M3CZ5ittNhA7+usGPI
sRI8xw/fWOZoni8fSYazD6itrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDw45n1E
lptaTnHSresI3dz1XL79MB8GA1UdIwQYMBaAFNHnwkp0QUy93PzYjkbF1c07Pq7X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDZBRi9BMDk1OEYzMDVF
Q0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRMM2NfTmlPUnNYVnpUcy1y
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBlZkNTblJCVEwzY19OaU9Sc1hWelRzLXJ0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDZBRi9BMDk1OEYzMDVFQ0QxMUVCOTA4NzYzNzJDNEY5QUUwMi8wZWZDU25SQlRM
M2NfTmlPUnNYVnpUcy1ydGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaNyhJkvZHaQNWytgdGFeytkQnZlNNUGRj9N1yANK1J0uAHPJcIq70c2fJeNW
Njg1QIOD5zupV5XOvoKKKVPfvJy+6boklwbOdyTgooziNVLtIlWfjNpRTBYaQAGb
TWhWoPqhmxg6bDHP0zS5uu0oRXqPgAUNQZFUorukYo4XYPqZwK5j2ietrLYVmjiT
KNqRGqAc8u5a701V2sQpSV9Bjrftv+X4xJGcYBuE6V/Ub8Jn4eMds+XLubXJ7LsO
lJGDix8vf/Cco+rcmEiHyOmtliYhpc0l9fF567EWQ0pIQYbugRcNvg3REWXWmGgJ
XVlLpO3uFEDOCgXXPd+hG1qq2Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:52:59 2026 by rpki-client