
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json)
Hash identifier: ai82XOVY6524264DotD9+hlnp1nAH8NNUaEhC3veVL0=
Subject key identifier: 5B:0C:D4:0C:E0:73:85:6E:F9:CC:6E:5E:C3:38:A0:04:C6:63:D8:E5
Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Certificate serial: 02F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
Manifest number: 02DF
Signing time: Tue 13 Oct 2026 01:36:34 +0000
Manifest this update: Tue 13 Oct 2026 01:36:33 +0000
Manifest next update: Tue 20 Oct 2026 01:36:33 +0000
Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: NSPehGSY7gH4RKCRf4QMoGCkPu7no0H9OLd1ibk1CfY=)
2: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: P6xx3LV0yIZz7Bt3wASwzM1QkFL56uH39jrYrM1xsJw=)
3: 680147B486F311F1B8F66003A7EE528E.roa (hash: vd6Z39KPLKcomn09hEZQiUw+JqJNW7KhM+nNsWSg93s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754 (0x2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Validity
Not Before: Oct 13 01:36:33 2026 GMT
Not After : Oct 20 01:36:33 2026 GMT
Subject: CN=6acd8b21-f1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:51:1c:7d:bb:7b:b8:f9:10:37:88:9f:ee:
12:dd:5b:9b:8b:10:52:46:55:5d:27:47:71:b8:0e:
0d:36:af:18:f2:ff:a9:29:6d:55:6d:f8:1a:c6:ae:
25:d5:da:d9:97:9c:cf:29:fe:e5:f5:4b:58:79:9b:
39:91:2b:e8:14:3c:7e:28:f5:4e:1f:5f:df:28:61:
94:58:68:ca:c1:5c:d0:4f:00:81:b7:11:80:05:8e:
9f:74:8a:96:db:3c:7e:e9:fd:66:ac:68:2f:b5:f4:
0e:16:b5:0b:d4:e9:dd:d7:0f:fa:70:e8:cd:45:3f:
3d:bd:ef:45:6d:e4:f4:a1:f1:4d:0f:dc:88:9c:f8:
f7:63:6d:6b:ca:0c:d1:a6:6c:4f:2a:c4:bb:e9:73:
68:13:3c:fa:2c:70:e6:34:6e:35:f7:19:01:b5:6e:
6e:a2:34:79:67:cd:d5:8d:e9:25:82:70:88:a1:4c:
f9:8c:3e:3d:f0:f2:65:71:77:30:52:f8:85:e9:4f:
2f:f3:3c:cc:93:e5:fd:be:8e:70:ae:78:9c:f9:13:
7d:63:ae:79:cb:d0:16:13:9a:44:8b:42:b3:79:a8:
68:1b:ab:95:84:b7:0b:d1:a9:ca:31:0a:73:75:8a:
4f:92:4f:16:8d:ed:bf:93:b6:c0:bf:a6:ca:1b:86:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0C:D4:0C:E0:73:85:6E:F9:CC:6E:5E:C3:38:A0:04:C6:63:D8:E5
X509v3 Authority Key Identifier:
keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:70:81:93:e3:1a:4d:c2:77:e1:f8:6f:5a:a5:a0:68:61:be:
a8:26:65:cc:37:14:a3:cd:9c:b2:85:e7:51:a6:79:6e:06:e2:
ac:b1:28:42:ae:1c:fe:bd:d0:45:52:a3:80:c8:c6:01:94:58:
fe:da:aa:ed:c4:07:20:c1:d0:25:0f:21:8f:5b:1c:59:40:11:
d3:25:d4:d5:35:2e:16:3a:a6:ce:6e:e8:47:ab:cf:bd:55:e0:
30:99:08:e8:07:1e:54:4f:94:f7:db:59:98:7e:bb:3a:89:1a:
67:ce:14:ac:5c:ad:98:7a:e5:4d:78:42:17:c4:56:2e:ec:39:
63:da:da:b9:a4:fa:4c:b1:52:10:b6:cf:b7:df:7c:a0:60:d1:
96:81:3a:0b:fe:dd:57:d5:d0:4c:a4:53:26:e1:8d:de:9d:dc:
56:25:5f:e4:ea:0b:b2:01:27:1e:ff:7a:f6:2f:a8:25:0c:13:
8f:03:ce:b9:89:19:08:78:e6:54:99:16:fa:89:05:e7:08:fb:
de:5c:09:e7:67:fd:ce:56:6e:61:fd:e5:d8:7c:88:3f:e0:9b:
5e:08:27:1d:e2:fe:09:25:dd:ae:fd:56:51:01:80:7b:58:70:
01:10:2e:1c:e2:8b:87:83:19:56:be:3c:b2:90:50:53:25:cb:
46:fb:de:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB
REJGMUY1NDAwHhcNMjYxMDEzMDEzNjMzWhcNMjYxMDIwMDEzNjMzWjAYMRYwFAYD
VQQDEw02YWNkOGIyMS1mMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxsxRHH27e7j5EDeIn+4S3VubixBSRlVdJ0dxuA4NNq8Y8v+pKW1Vbfgaxq4l
1drZl5zPKf7l9UtYeZs5kSvoFDx+KPVOH1/fKGGUWGjKwVzQTwCBtxGABY6fdIqW
2zx+6f1mrGgvtfQOFrUL1Ond1w/6cOjNRT89ve9FbeT0ofFND9yInPj3Y21rygzR
pmxPKsS76XNoEzz6LHDmNG419xkBtW5uojR5Z83VjeklgnCIoUz5jD498PJlcXcw
UviF6U8v8zzMk+X9vo5wrnic+RN9Y655y9AWE5pEi0KzeahoG6uVhLcL0anKMQpz
dYpPkk8Wje2/k7bAv6bKG4ZNkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFsM1Azg
c4Vu+cxuXsM4oATGY9jlMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw
QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254
anVuR1h6c0JNbkd0dng5VUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGXCBk+MaTcJ34fhvWqWgaGG+qCZlzDcUo82csoXnUaZ5bgbirLEoQq4c/r3Q
RVKjgMjGAZRY/tqq7cQHIMHQJQ8hj1scWUAR0yXU1TUuFjqmzm7oR6vPvVXgMJkI
6AceVE+U99tZmH67OokaZ84UrFytmHrlTXhCF8RWLuw5Y9rauaT6TLFSELbPt998
oGDRloE6C/7dV9XQTKRTJuGN3p3cViVf5OoLsgEnHv969i+oJQwTjwPOuYkZCHjm
VJkW+okF5wj73lwJ52f9zlZuYf3l2HyIP+CbXggnHeL+CSXdrv1WUQGAe1hwARAu
HOKLh4MZVr48spBQUyXLRvvekQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:15:24 2026 by rpki-client