
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier: 5VnwZ4VSu9wZWr4uLQ12CfsXl99Goxb5UhjfdHVW5RA=
Subject key identifier: 7D:1E:60:C8:39:73:47:EE:42:80:9A:3B:27:79:2C:0E:04:B8:D3:0C
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial: 0D21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number: 0D08
Signing time: Thu 24 Sep 2026 18:22:44 +0000
Manifest this update: Thu 24 Sep 2026 18:22:44 +0000
Manifest next update: Thu 01 Oct 2026 18:22:44 +0000
Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: sZTYzU3cxX8ioy2r9dc/Mh5q3zvcDdM1VGPGNU+zRGM=)
2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: mKkuVSeTZtVuG7BfqaqUZzcHeF9XMKmK1adCEnjlrRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Validity
Not Before: Sep 24 18:22:44 2026 GMT
Not After : Oct 1 18:22:44 2026 GMT
Subject: CN=6ab56a74-6676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:e9:3d:6a:37:9f:62:63:43:68:01:05:0c:
15:d8:9e:a5:25:ec:cb:9c:d2:30:20:60:45:23:f6:
3a:43:fe:37:68:a9:22:0f:cb:c5:49:6a:41:bf:d4:
a9:eb:5e:b5:82:ac:59:10:75:3b:4e:85:4d:7d:c8:
72:0f:be:5a:bc:92:e0:78:08:9e:73:b2:21:46:f4:
3f:13:93:93:05:8b:39:40:fa:59:ed:fa:a8:75:82:
a4:2f:d8:f7:35:59:9c:9e:e2:99:4c:32:33:b3:76:
7b:80:b5:10:a1:cd:43:6b:36:5a:70:d1:f7:af:fd:
f3:05:b7:95:7d:6b:2d:73:c6:8f:20:ba:ea:0e:cb:
19:e9:ae:e7:45:12:e2:61:df:4c:28:d2:4c:06:fa:
c2:ad:15:10:84:f2:91:03:8a:02:17:4b:c5:49:b2:
85:25:48:a7:43:c3:71:7a:29:3d:93:e3:25:6b:db:
7e:f5:79:af:48:31:da:42:90:25:df:df:ee:2c:eb:
3f:ab:a2:aa:8c:51:b8:a4:2b:af:51:38:20:25:4a:
7d:c5:42:a4:c6:08:d3:4e:97:6b:65:a7:90:e0:f0:
27:52:c5:06:c2:d4:5d:1e:cb:cb:77:77:3a:2f:c0:
b0:51:19:70:f6:11:18:ff:3f:af:11:51:6f:10:ed:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:60:C8:39:73:47:EE:42:80:9A:3B:27:79:2C:0E:04:B8:D3:0C
X509v3 Authority Key Identifier:
keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:d0:21:a6:0b:dd:71:c7:cd:ef:1a:9a:84:83:b4:0d:45:ba:
74:44:41:d4:ca:ee:d8:f6:a7:59:04:be:98:44:7c:5c:a9:59:
10:f7:52:d2:dd:19:a7:34:df:32:81:9c:ea:43:f6:48:a5:d4:
83:74:c2:0c:39:fb:0f:c1:e6:02:4f:c4:35:c7:1b:a7:a7:68:
95:88:ae:9b:ef:b1:40:da:2c:d2:e4:bf:b9:b2:e9:0f:2e:79:
06:5c:c1:14:a6:19:3c:6d:4c:f1:96:d8:bf:2f:36:4e:a8:e0:
51:e0:28:b1:55:94:a9:c1:ed:be:85:e1:e0:77:07:73:7e:df:
a2:4b:a0:22:bf:e4:9c:73:99:ca:70:35:8d:87:8f:42:81:c7:
82:cf:83:b0:1e:fb:1b:04:68:bf:07:29:11:9b:2d:86:39:63:
67:0d:1e:8b:14:a0:a4:ac:7f:55:d7:1c:99:31:22:e4:14:56:
56:57:17:78:4d:cf:f4:10:cd:9e:63:a9:9e:3a:4f:ac:17:1a:
41:76:31:13:dd:41:58:2f:80:cf:d4:2a:33:07:04:7e:d9:45:
c5:e4:35:9c:20:3c:f4:a8:4b:06:a3:fd:27:11:f9:b9:8d:ee:
84:1b:8b:53:7e:dc:1c:69:ba:23:19:f5:ab:d3:40:d8:82:72:
a0:d8:dc:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5
OTI1RkJENEYwHhcNMjYwOTI0MTgyMjQ0WhcNMjYxMDAxMTgyMjQ0WjAYMRYwFAYD
VQQDEw02YWI1NmE3NC02Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufDpPWo3n2JjQ2gBBQwV2J6lJezLnNIwIGBFI/Y6Q/43aKkiD8vFSWpBv9Sp
6161gqxZEHU7ToVNfchyD75avJLgeAiec7IhRvQ/E5OTBYs5QPpZ7fqodYKkL9j3
NVmcnuKZTDIzs3Z7gLUQoc1DazZacNH3r/3zBbeVfWstc8aPILrqDssZ6a7nRRLi
Yd9MKNJMBvrCrRUQhPKRA4oCF0vFSbKFJUinQ8Nxeik9k+Mla9t+9XmvSDHaQpAl
39/uLOs/q6KqjFG4pCuvUTggJUp9xUKkxgjTTpdrZaeQ4PAnUsUGwtRdHsvLd3c6
L8CwURlw9hEY/z+vEVFvEO39hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0eYMg5
c0fuQoCaOyd5LA4EuNMMMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0
MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj
TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdtAhpgvdccfN7xqahIO0DUW6dERB1Mru2PanWQS+mER8XKlZEPdS0t0ZpzTf
MoGc6kP2SKXUg3TCDDn7D8HmAk/ENccbp6dolYium++xQNos0uS/ubLpDy55BlzB
FKYZPG1M8ZbYvy82TqjgUeAosVWUqcHtvoXh4HcHc37fokugIr/knHOZynA1jYeP
QoHHgs+DsB77GwRovwcpEZsthjljZw0eixSgpKx/VdccmTEi5BRWVlcXeE3P9BDN
nmOpnjpPrBcaQXYxE91BWC+Az9QqMwcEftlFxeQ1nCA89KhLBqP9JxH5uY3uhBuL
U37cHGm6Ixn1q9NA2IJyoNjcgg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:28:26 2026 by rpki-client