
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
File: Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json)
Hash identifier: plhB8B0KsvB6lVHepoMDgOJBFYii/sTIUgKIaAT/4gU=
Subject key identifier: 79:35:20:D8:AF:0D:7C:B4:7A:3D:58:E5:B1:C3:2C:B4:DC:FC:E6:6A
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial: 2A1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
Manifest number: 29F6
Signing time: Thu 08 Oct 2026 15:36:28 +0000
Manifest this update: Thu 08 Oct 2026 15:36:28 +0000
Manifest next update: Thu 15 Oct 2026 15:36:28 +0000
Files and hashes: 1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: q61rhj62cU5O/xvSdixzhvPXnTs9vDssmk0jbBD7sPg=)
2: 58292E96774111F0A079543BC4F9AE02.roa (hash: +OItqlvFi/OJz28aPTkH59gdOncbNOxJz2Bk3pv0y/8=)
3: F4246CDA561811E98A165872C4F9AE02.roa (hash: 2dvRnm4pfzjCtWstN3B5/ymv7Hda5U6DYqNjAuMZVLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10779 (0x2a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Validity
Not Before: Oct 8 15:36:28 2026 GMT
Not After : Oct 15 15:36:28 2026 GMT
Subject: CN=6ac7b87c-530a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:79:d0:14:23:4a:4e:8b:34:1f:71:37:6f:
e6:8d:16:59:73:8d:cb:28:c0:74:d4:8a:4c:3b:62:
b7:9a:d5:65:c8:90:85:25:7c:64:15:8b:a8:0c:33:
a0:32:e5:c8:97:ec:6f:82:1e:7a:38:f4:f0:59:df:
7d:56:11:56:f9:42:fa:e4:21:72:8f:20:c9:cc:60:
51:8f:86:7f:6d:59:4b:38:a7:a8:7f:03:f8:fd:3d:
38:d9:54:1e:89:b4:a1:7e:2f:32:a4:e2:b9:36:9a:
1f:09:80:3d:08:69:50:c6:77:23:f9:71:2a:4c:ff:
1d:fe:ca:89:6e:c6:8b:3c:af:0a:2f:19:6c:f4:8d:
22:cf:e6:39:78:c2:79:01:9f:e0:f8:1a:c8:03:ba:
22:6b:4b:ea:f0:07:a5:47:8a:a9:bd:41:00:fb:1f:
b8:01:22:e3:bb:2a:05:4c:2d:7f:ff:5b:d0:bc:2d:
b6:a3:f7:3b:1c:16:9f:65:75:fa:f6:ad:1c:53:70:
61:5b:97:ea:39:4d:7b:0a:b9:90:90:43:03:4e:c6:
22:16:bf:6b:1d:63:55:41:a7:af:8e:2b:40:4c:27:
7b:ab:71:9c:68:22:84:44:ab:fc:5c:b4:d1:89:88:
a6:39:88:b2:57:bf:03:ec:3f:34:51:31:22:53:25:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:35:20:D8:AF:0D:7C:B4:7A:3D:58:E5:B1:C3:2C:B4:DC:FC:E6:6A
X509v3 Authority Key Identifier:
keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:87:a1:c9:79:90:72:fb:57:6e:ff:be:6b:49:90:4a:6c:5e:
2c:77:f0:a2:ca:e7:c7:8c:2a:56:4b:6e:bd:75:78:32:7b:2e:
0f:4d:fd:07:d0:3a:00:8e:53:d7:80:ad:b2:0d:9b:40:6d:f5:
82:8d:82:36:35:34:eb:6c:28:d3:ac:68:c4:80:09:36:f5:fe:
42:f2:49:bf:e7:33:59:3f:ca:99:45:2e:39:64:fc:2b:a8:01:
cf:67:02:24:0a:c7:3c:b6:14:b4:b4:ed:6b:da:05:a9:4d:c3:
e5:9b:5f:f4:c8:95:2e:99:00:4e:38:6a:2d:4a:f0:e0:db:76:
95:ab:cc:94:60:cb:b3:ef:90:c7:c0:27:1a:52:0e:a6:57:40:
68:d4:88:46:4f:d3:ed:10:15:74:76:c7:a2:f3:3d:e3:fc:a2:
9c:8b:bf:8b:19:ef:0a:1f:0b:b4:96:c8:7b:1f:47:d3:51:97:
1f:21:94:65:ea:37:60:38:34:ec:89:f3:b5:4a:29:59:0f:14:
62:9d:cc:53:25:78:0e:70:2f:3b:a5:04:e0:9e:33:72:2f:b0:
62:40:6e:b1:4c:6a:63:f0:ca:a8:a6:95:bf:cc:3a:ae:e3:78:
85:71:84:7c:ab:fb:dc:56:8e:e5:bf:2d:3d:55:85:a5:43:f2:
13:60:4a:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ1MTcxMTAvBgNVBAUTKDY3NUYzQkExRjk2QTlFMUVDMkIwMTM3NjYyQzc1NERC
MUQxRTAwNzMwHhcNMjYxMDA4MTUzNjI4WhcNMjYxMDE1MTUzNjI4WjAYMRYwFAYD
VQQDEw02YWM3Yjg3Yy01MzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGB50BQjSk6LNB9xN2/mjRZZc43LKMB01IpMO2K3mtVlyJCFJXxkFYuoDDOg
MuXIl+xvgh56OPTwWd99VhFW+UL65CFyjyDJzGBRj4Z/bVlLOKeofwP4/T042VQe
ibShfi8ypOK5NpofCYA9CGlQxncj+XEqTP8d/sqJbsaLPK8KLxls9I0iz+Y5eMJ5
AZ/g+BrIA7oia0vq8AelR4qpvUEA+x+4ASLjuyoFTC1//1vQvC22o/c7HBafZXX6
9q0cU3BhW5fqOU17CrmQkEMDTsYiFr9rHWNVQaevjitATCd7q3GcaCKERKv8XLTR
iYimOYiyV78D7D80UTEiUyUZ/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHk1INiv
DXy0ej1Y5bHDLLTc/OZqMB8GA1UdIwQYMBaAFGdfO6H5ap4ewrATdmLHVNsdHgBz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDUxNy80MDZGOTA0QzZB
RTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5oN0NzQk4yWXNkVTJ4MGVB
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1oxODdvZmxxbmg3Q3NCTjJZc2RVMngwZUFITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDUxNy80MDZGOTA0QzZBRTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5o
N0NzQk4yWXNkVTJ4MGVBSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACYehyXmQcvtXbv++a0mQSmxeLHfwosrnx4wqVktuvXV4MnsuD039B9A6AI5T
14Ctsg2bQG31go2CNjU062wo06xoxIAJNvX+QvJJv+czWT/KmUUuOWT8K6gBz2cC
JArHPLYUtLTta9oFqU3D5Ztf9MiVLpkATjhqLUrw4Nt2lavMlGDLs++Qx8AnGlIO
pldAaNSIRk/T7RAVdHbHovM94/yinIu/ixnvCh8LtJbIex9H01GXHyGUZeo3YDg0
7InztUopWQ8UYp3MUyV4DnAvO6UE4J4zci+wYkBusUxqY/DKqKaVv8w6ruN4hXGE
fKv73FaO5b8tPVWFpUPyE2BKUg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:57:10 2026 by rpki-client