
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json)
Hash identifier: rdEOQiylLFVy+8zOmg4E8anTol8kcOV7sFnqyYnFjVI=
Subject key identifier: DF:75:84:4C:EF:4A:0D:41:ED:21:88:E4:FC:2D:9E:80:9C:03:0F:5F
Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Certificate serial: 0147
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
Manifest number: 013F
Signing time: Fri 25 Sep 2026 05:31:22 +0000
Manifest this update: Fri 25 Sep 2026 05:31:21 +0000
Manifest next update: Fri 02 Oct 2026 05:31:21 +0000
Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: OWzE4LUzeouOIDirV/OJpQk8rs9d+JLTm/PQ2dN+vNs=)
2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58
Validity
Not Before: Sep 25 05:31:21 2026 GMT
Not After : Oct 2 05:31:21 2026 GMT
Subject: CN=6ab6072a-6272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:c4:bf:b8:74:fa:45:83:bb:9f:b6:cb:2b:
e6:2a:37:3e:89:bc:7a:a8:18:c8:c0:ce:01:3f:b8:
07:f4:90:5d:f0:9c:00:7b:5e:55:29:f1:37:31:bd:
b0:d1:fc:21:82:5b:d8:91:a9:34:51:83:6e:eb:43:
6f:8c:4f:ae:e4:56:48:d9:50:36:4d:41:1a:bb:6f:
14:bf:7f:7b:b4:de:72:3a:3d:80:65:b2:75:8d:a3:
75:78:98:08:0e:56:32:af:2c:e9:b9:c9:24:2e:94:
a4:76:48:ef:7b:46:d9:64:34:05:14:c5:4c:36:55:
0f:7b:56:4c:d2:9d:d6:09:14:a5:7d:13:41:76:aa:
d2:a0:23:f1:d0:52:ec:f6:7c:45:45:cf:f8:fc:73:
dc:0a:95:22:2b:85:e5:42:1f:20:05:b2:c8:b9:f5:
13:cf:f9:90:58:28:c5:78:91:83:fa:68:0e:bf:04:
b6:25:8d:35:4e:60:7f:b5:1c:9c:7c:34:a8:8e:69:
2f:a0:61:3a:ec:54:4e:95:58:ec:47:2a:78:69:03:
d7:bf:25:cc:9d:ee:cd:9e:d4:12:5a:55:28:64:8a:
52:1e:d6:2b:91:b0:a7:a1:72:21:27:fe:29:2a:40:
23:91:45:53:91:fe:92:82:1c:6b:e8:33:e4:28:c9:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:84:4C:EF:4A:0D:41:ED:21:88:E4:FC:2D:9E:80:9C:03:0F:5F
X509v3 Authority Key Identifier:
keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:83:3d:f2:49:27:d5:bb:95:b1:f4:31:b9:70:84:f3:d6:41:
5a:0d:ee:06:60:2a:43:06:db:cb:29:85:46:fb:73:c6:0f:9d:
dc:c0:af:90:34:3d:67:06:d5:0d:2b:05:59:fd:fb:8f:56:87:
85:9d:0e:16:28:5c:e2:c3:6b:e5:01:bc:fa:da:1a:08:cf:fb:
8f:a5:11:ff:0f:b3:c2:91:8f:05:d6:82:2a:96:2b:4b:ab:ef:
a4:7a:a5:f0:ac:38:5f:e3:c5:59:5f:3e:8c:e5:9b:1f:70:b0:
ac:67:6a:c2:f3:94:54:b7:52:aa:ad:f3:fa:a5:28:24:c5:4c:
25:e4:e7:eb:59:7a:eb:f4:f6:86:69:1f:10:31:b8:56:81:32:
1b:ca:11:da:15:13:3e:59:b2:ae:02:a6:ae:cf:21:91:d0:75:
96:72:a6:45:97:fb:10:3e:22:1b:3f:b0:78:e5:59:9f:98:c1:
92:ce:d9:5c:04:14:3e:21:1e:21:53:87:17:8a:a2:ad:74:8d:
a7:04:91:79:63:85:89:83:eb:31:a6:f7:f7:91:eb:19:be:41:
4d:ec:6a:8c:ba:21:20:b2:dc:59:03:21:59:8a:6a:81:ea:ec:
30:3d:2f:a2:2b:d4:80:c6:aa:ce:d9:b2:23:7f:a8:a9:e7:5d:
22:14:e1:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1
NjAwRDlBNTgwHhcNMjYwOTI1MDUzMTIxWhcNMjYxMDAyMDUzMTIxWjAYMRYwFAYD
VQQDEw02YWI2MDcyYS02MjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVTEv7h0+kWDu5+2yyvmKjc+ibx6qBjIwM4BP7gH9JBd8JwAe15VKfE3Mb2w
0fwhglvYkak0UYNu60NvjE+u5FZI2VA2TUEau28Uv397tN5yOj2AZbJ1jaN1eJgI
DlYyryzpuckkLpSkdkjve0bZZDQFFMVMNlUPe1ZM0p3WCRSlfRNBdqrSoCPx0FLs
9nxFRc/4/HPcCpUiK4XlQh8gBbLIufUTz/mQWCjFeJGD+mgOvwS2JY01TmB/tRyc
fDSojmkvoGE67FROlVjsRyp4aQPXvyXMne7NntQSWlUoZIpSHtYrkbCnoXIhJ/4p
KkAjkUVTkf6Sghxr6DPkKMkKHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN91hEzv
Sg1B7SGI5PwtnoCcAw9fMB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy
MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJj
ZlF2RWJ6WTBUM0ZXQU5tbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACIM98kkn1buVsfQxuXCE89ZBWg3uBmAqQwbbyymFRvtzxg+d3MCvkDQ9ZwbV
DSsFWf37j1aHhZ0OFihc4sNr5QG8+toaCM/7j6UR/w+zwpGPBdaCKpYrS6vvpHql
8Kw4X+PFWV8+jOWbH3CwrGdqwvOUVLdSqq3z+qUoJMVMJeTn61l66/T2hmkfEDG4
VoEyG8oR2hUTPlmyrgKmrs8hkdB1lnKmRZf7ED4iGz+weOVZn5jBks7ZXAQUPiEe
IVOHF4qirXSNpwSReWOFiYPrMab395HrGb5BTexqjLohILLcWQMhWYpqgersMD0v
oivUgMaqztmyI3+oqeddIhThsA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:25:31 2026 by rpki-client