
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json)
Hash identifier: 5Whux/gSztuzen+3Vs8Xt0sTauOp0ruReX8gVPUyO0U=
Subject key identifier: 25:43:3B:DE:B4:AB:15:7C:0E:EF:55:57:6D:B9:CF:50:B8:B4:65:D2
Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Certificate serial: 04A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
Manifest number: 0660
Signing time: Sun 20 Sep 2026 23:44:36 +0000
Manifest this update: Sun 20 Sep 2026 23:44:35 +0000
Manifest next update: Sun 27 Sep 2026 23:44:35 +0000
Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: x1e+b3HgXl/aZFei3czaaGL4VABdyQBrM18N20muEV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1191 (0x4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46
Validity
Not Before: Sep 20 23:44:35 2026 GMT
Not After : Sep 27 23:44:35 2026 GMT
Subject: CN=6ab06fe4-3c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:9e:84:c8:45:08:51:cb:0d:e8:8a:24:9b:
d0:0d:4f:83:e1:88:17:c1:6d:f1:3a:be:e1:f8:4e:
4d:54:51:22:c9:c5:86:31:46:6e:3f:e3:06:b3:da:
48:6b:99:4d:45:27:ca:16:4d:c4:da:0f:06:58:6a:
20:d7:2d:c5:e6:a8:b9:b1:84:e9:ee:17:9f:36:34:
7b:3f:05:d2:58:9d:95:86:07:58:ac:73:2a:da:e6:
90:76:46:88:7d:88:fa:cd:36:2a:54:11:62:cc:99:
20:db:dc:cc:2a:78:77:c8:90:21:de:12:e4:78:88:
3d:b8:98:36:f3:37:3e:24:50:9a:34:3e:35:a3:f7:
7b:42:29:9f:cc:d6:42:d3:78:cb:31:3e:d3:6e:9d:
4b:3a:ab:05:c1:24:31:5b:74:fa:6f:bc:87:9d:77:
a9:3b:90:a7:e9:e5:40:20:ed:83:b3:40:ae:27:1c:
ea:1b:76:b0:84:f0:66:ad:eb:ca:21:49:19:a2:b2:
70:8f:80:ec:c7:72:8d:0b:64:dc:32:6b:1a:d2:6a:
27:9d:0b:c9:0e:2a:d0:c9:2e:52:23:de:36:7d:f8:
7a:a0:29:2e:cc:37:69:eb:94:9e:1d:e0:e4:cf:ca:
cc:be:5d:d6:f4:60:f3:e6:65:9c:82:8d:b2:d1:6d:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:43:3B:DE:B4:AB:15:7C:0E:EF:55:57:6D:B9:CF:50:B8:B4:65:D2
X509v3 Authority Key Identifier:
keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:57:54:44:3c:88:a5:cf:16:16:8d:be:78:c5:b3:40:f1:cb:
05:13:58:68:b1:60:76:ae:6f:c5:74:7b:ac:b7:25:24:c0:8e:
90:28:14:c2:60:18:9c:49:90:24:07:91:46:72:3d:ec:da:96:
c1:5d:0f:61:54:68:4e:3b:d2:09:87:bd:f3:20:3f:f3:3b:17:
2e:b2:61:ee:ab:ac:74:b3:c6:46:c5:e8:c4:5d:20:27:21:c7:
e1:e1:80:4c:25:8c:8c:90:ec:d9:9b:27:e1:b5:88:49:8f:df:
2b:ba:5a:dd:8c:c7:0a:67:a0:1d:49:4c:47:5d:f8:65:5a:6c:
81:3c:25:44:eb:df:03:19:00:ae:d8:c0:b1:f9:74:74:e6:61:
bc:10:91:34:5a:b5:64:11:b3:a5:c9:ca:69:f3:c0:27:70:4d:
17:72:09:50:cb:5d:9a:79:9b:8c:65:dc:3f:eb:1d:14:ee:05:
26:55:53:93:2f:61:5e:97:1d:02:96:8e:b8:39:6a:de:28:0e:
66:4e:44:b1:54:ba:00:88:96:c1:bd:c5:61:8a:a8:c2:98:78:
e3:74:7a:04:05:b1:78:78:04:d4:7f:d5:64:1d:e3:44:66:a5:
4c:b6:2f:ab:38:ca:77:aa:4a:08:50:b5:4c:0a:aa:46:bd:20:
66:e6:ad:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw
NTBGRDFENDYwHhcNMjYwOTIwMjM0NDM1WhcNMjYwOTI3MjM0NDM1WjAYMRYwFAYD
VQQDEw02YWIwNmZlNC0zYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxamehMhFCFHLDeiKJJvQDU+D4YgXwW3xOr7h+E5NVFEiycWGMUZuP+MGs9pI
a5lNRSfKFk3E2g8GWGog1y3F5qi5sYTp7hefNjR7PwXSWJ2VhgdYrHMq2uaQdkaI
fYj6zTYqVBFizJkg29zMKnh3yJAh3hLkeIg9uJg28zc+JFCaND41o/d7QimfzNZC
03jLMT7Tbp1LOqsFwSQxW3T6b7yHnXepO5Cn6eVAIO2Ds0CuJxzqG3awhPBmrevK
IUkZorJwj4Dsx3KNC2TcMmsa0monnQvJDirQyS5SI942ffh6oCkuzDdp65SeHeDk
z8rMvl3W9GDz5mWcgo2y0W3VbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVDO960
qxV8Du9VV225z1C4tGXSMB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1
NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF
MGM2MTA1bWxBYllGRDlIVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWldURDyIpc8WFo2+eMWzQPHLBRNYaLFgdq5vxXR7rLclJMCOkCgUwmAYnEmQ
JAeRRnI97NqWwV0PYVRoTjvSCYe98yA/8zsXLrJh7qusdLPGRsXoxF0gJyHH4eGA
TCWMjJDs2Zsn4bWISY/fK7pa3YzHCmegHUlMR134ZVpsgTwlROvfAxkArtjAsfl0
dOZhvBCRNFq1ZBGzpcnKafPAJ3BNF3IJUMtdmnmbjGXcP+sdFO4FJlVTky9hXpcd
ApaOuDlq3igOZk5EsVS6AIiWwb3FYYqowph443R6BAWxeHgE1H/VZB3jRGalTLYv
qzjKd6pKCFC1TAqqRr0gZuathg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:34:46 2026 by rpki-client