
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json)
Hash identifier: AbuEMlIZUuy44fSbSkcmUXB+xEQIgn0TOpPSc9lN3Ew=
Subject key identifier: 31:4E:94:FC:F9:69:6C:7B:0F:1E:BC:91:33:EC:55:3C:2C:01:05:56
Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
Certificate serial: 0DA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
Manifest number: 0D98
Signing time: Thu 24 Sep 2026 17:53:43 +0000
Manifest this update: Thu 24 Sep 2026 17:53:42 +0000
Manifest next update: Thu 01 Oct 2026 17:53:42 +0000
Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: 7MxHWhQEvTawa/sdxpjfcnMsF0HSBhCQH555kImiPc4=)
2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: fffjJpFpj/z4UNsYvzkaYrSCN55neJCtG8ZFfHxTto8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl
rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3492 (0xda4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
Validity
Not Before: Sep 24 17:53:42 2026 GMT
Not After : Oct 1 17:53:42 2026 GMT
Subject: CN=6ab563a6-8a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:13:f5:23:89:81:62:a6:b0:58:ca:c9:c0:
2f:e8:14:25:3d:72:3e:58:57:98:aa:af:f0:36:23:
1e:94:a5:57:21:53:1d:35:6f:75:6c:23:f4:eb:08:
c6:c3:4a:4e:0d:2f:77:f5:6b:e2:76:23:19:94:f4:
b9:52:fb:c7:6e:63:49:ea:23:e7:a9:f1:05:70:76:
9d:4f:ac:1a:82:70:58:33:e9:a6:28:00:ca:90:9c:
7d:81:f7:a9:44:76:50:d2:21:fa:08:93:7b:67:e0:
2d:f8:1b:82:6b:cc:74:c4:16:d6:b1:f9:aa:05:21:
f8:d5:35:bb:97:37:a8:1c:df:6f:b7:41:3c:8c:b9:
dc:f3:ab:f4:9c:02:ce:da:4d:11:45:4a:25:52:1a:
1e:bb:49:02:5d:4e:b4:27:a5:d8:ac:1e:57:ca:8a:
4b:2e:06:c8:49:46:f3:77:56:1b:be:71:8c:d7:df:
3a:65:dd:cb:ef:67:53:ac:8b:08:78:c1:94:bb:9c:
b9:16:43:59:3f:77:e6:fa:7a:b1:12:e6:97:bb:d4:
62:04:07:ba:70:c3:35:4d:ae:da:6e:4a:e9:4f:37:
42:46:04:15:e2:df:d2:50:43:5b:6b:92:bc:1b:13:
25:f6:ea:bb:aa:4d:ec:b1:06:eb:df:70:6b:a0:32:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4E:94:FC:F9:69:6C:7B:0F:1E:BC:91:33:EC:55:3C:2C:01:05:56
X509v3 Authority Key Identifier:
keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:6f:5a:dc:53:cd:35:49:33:ac:63:ea:3d:19:6a:0f:c1:90:
11:4d:b5:c4:aa:21:b1:82:f2:ff:61:b0:5a:93:2a:94:59:62:
5a:6b:04:7d:a7:a6:23:a4:ad:72:89:ca:1e:30:6a:69:b2:7b:
65:52:73:7a:7c:0f:39:22:10:51:10:38:f0:e6:de:af:4a:4e:
00:35:a1:a7:b5:f6:8a:d3:94:e5:56:34:24:56:65:44:b6:a6:
3d:c8:da:c1:d3:13:bf:04:bf:a2:8c:a9:bf:5d:c7:a8:16:0a:
f6:cb:e1:8d:0a:73:93:ad:44:c4:71:0d:cf:1b:54:54:94:52:
5d:c1:48:06:a2:73:8a:a9:e4:dd:d8:81:21:00:7b:25:d6:cb:
c6:78:97:a7:3c:bc:a5:6c:20:13:39:93:37:10:a2:b1:20:a8:
c1:d9:e3:eb:4e:e0:23:31:26:0d:02:e7:20:ad:e4:c9:fc:f5:
9b:a2:58:f1:13:69:e4:fa:81:cd:bc:8e:a5:1a:ab:62:32:8f:
f4:12:47:4c:ac:9c:f3:fe:94:68:64:17:1d:d9:d4:24:3e:df:
75:3f:3e:44:74:99:6c:44:15:3b:b0:66:98:45:ed:24:67:5a:
5a:fa:c8:3b:fc:ca:fe:cd:3d:24:d3:2e:3f:10:86:1a:7a:24:
5a:d2:1a:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx
QjU1NUE0NDkwHhcNMjYwOTI0MTc1MzQyWhcNMjYxMDAxMTc1MzQyWjAYMRYwFAYD
VQQDEw02YWI1NjNhNi04YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuy0T9SOJgWKmsFjKycAv6BQlPXI+WFeYqq/wNiMelKVXIVMdNW91bCP06wjG
w0pODS939WvidiMZlPS5UvvHbmNJ6iPnqfEFcHadT6wagnBYM+mmKADKkJx9gfep
RHZQ0iH6CJN7Z+At+BuCa8x0xBbWsfmqBSH41TW7lzeoHN9vt0E8jLnc86v0nALO
2k0RRUolUhoeu0kCXU60J6XYrB5XyopLLgbISUbzd1YbvnGM1986Zd3L72dTrIsI
eMGUu5y5FkNZP3fm+nqxEuaXu9RiBAe6cMM1Ta7abkrpTzdCRgQV4t/SUENba5K8
GxMl9uq7qk3ssQbr33BroDIgfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFOlPz5
aWx7Dx68kTPsVTwsAQVWMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0
QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5
WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJm9a3FPNNUkzrGPqPRlqD8GQEU21xKohsYLy/2GwWpMqlFliWmsEfaemI6St
conKHjBqabJ7ZVJzenwPOSIQURA48Ober0pOADWhp7X2itOU5VY0JFZlRLamPcja
wdMTvwS/ooypv13HqBYK9svhjQpzk61ExHENzxtUVJRSXcFIBqJziqnk3diBIQB7
JdbLxniXpzy8pWwgEzmTNxCisSCowdnj607gIzEmDQLnIK3kyfz1m6JY8RNp5PqB
zbyOpRqrYjKP9BJHTKyc8/6UaGQXHdnUJD7fdT8+RHSZbEQVO7BmmEXtJGdaWvrI
O/zK/s09JNMuPxCGGnokWtIavw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:57:14 2026 by rpki-client