
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json)
Hash identifier: 3DI6cnPE7Nj+zbfJdLbkxkQx7tzrKHbTQLpUjhpq2dg=
Subject key identifier: 69:83:D1:85:F0:EF:33:90:57:21:27:DC:51:7E:08:62:6A:C5:2D:84
Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Certificate serial: 03A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
Manifest number: 0399
Signing time: Mon 21 Sep 2026 00:29:05 +0000
Manifest this update: Mon 21 Sep 2026 00:29:04 +0000
Manifest next update: Mon 28 Sep 2026 00:29:04 +0000
Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: kyfIXfI0HO5Gaxg2Y/+Onxj+rk7/V7xoC6PXVLh+dmQ=)
2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: D722CR8ebcqKNXrK+mpZqBYonCFXKUy8xzYz+EwUymM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Validity
Not Before: Sep 21 00:29:04 2026 GMT
Not After : Sep 28 00:29:04 2026 GMT
Subject: CN=6ab07a50-102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:05:3c:f5:d8:a0:02:3f:e9:00:2b:6b:ad:e4:
e2:81:3f:32:87:84:90:4f:76:db:35:66:94:20:75:
a8:36:58:dc:dc:83:ac:78:84:27:f9:f3:c9:36:b0:
8b:95:d3:32:ba:06:cc:2a:0a:97:7d:85:49:b8:74:
20:db:35:85:1e:f0:29:9f:b1:39:9b:c7:7e:b8:be:
1c:8b:85:64:e0:d5:88:6c:70:a8:5b:1f:19:2f:2e:
c4:2b:80:87:11:9c:9f:c0:c0:0e:c8:3e:a8:db:de:
35:6a:df:b1:5e:25:d8:c1:77:87:f0:0e:d9:37:62:
6f:a7:7d:1b:40:6c:90:88:e5:8b:87:dc:be:56:aa:
5d:a0:5f:b8:90:1a:86:97:0b:0b:61:84:c1:e4:a2:
07:c7:f1:9f:94:bd:34:ad:12:62:04:d9:f6:1f:7a:
16:9e:25:50:86:a6:ef:e8:e3:c8:61:5e:eb:2c:e4:
cb:7f:2a:fa:50:2f:ad:03:f4:88:ee:47:28:bd:c8:
60:b3:d7:70:b6:c4:5b:c4:a2:83:66:14:f2:5e:35:
ac:8e:c3:30:35:40:c2:99:58:09:30:55:1d:90:74:
09:3f:de:a2:ea:82:ec:01:82:46:6c:08:66:78:28:
90:cf:1d:b6:d1:c0:d1:a1:6b:84:90:98:b3:d6:50:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:D1:85:F0:EF:33:90:57:21:27:DC:51:7E:08:62:6A:C5:2D:84
X509v3 Authority Key Identifier:
keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ff:08:3b:30:16:ed:f7:1d:2b:2e:d3:a6:5e:55:c9:ed:3b:
8d:d8:42:2b:73:ac:ae:e6:ac:26:05:d5:1b:3f:47:2e:b0:a1:
3d:c4:87:33:86:71:a2:ae:01:69:af:26:c0:af:90:8d:de:27:
25:d4:82:64:4a:71:dc:78:36:e7:ed:e0:b4:1e:e9:8e:1b:30:
e3:d0:b7:f4:0d:a8:a6:97:c8:d7:8c:10:09:b4:4c:5e:a4:c6:
d3:99:e8:f0:5b:42:2d:28:e0:16:fc:13:b0:09:df:50:c4:5b:
19:24:70:66:a0:8f:37:b2:7f:4a:1a:e3:68:d6:01:74:c8:d4:
a5:c8:7b:ab:d5:c8:fa:29:86:1c:c0:e5:a1:77:3d:a4:ed:4e:
c4:f2:87:41:ec:15:58:c0:cd:62:77:01:0c:3d:b6:82:42:95:
66:36:9b:1d:cd:32:c0:a7:e3:9e:31:23:c7:c6:3a:9c:f6:14:
86:77:2e:f0:67:91:44:87:9f:6e:f1:c9:00:7a:5c:bd:b3:9c:
21:86:49:fe:d4:ab:96:65:64:ea:7b:49:ce:c1:16:73:e6:b1:
62:5d:de:80:90:3f:d7:2e:1c:f6:8f:81:48:e9:0a:f1:4d:92:
c0:af:90:5d:8b:d3:0b:c4:22:57:4a:2f:2e:3b:0b:78:3e:db:
17:9d:45:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx
Rjk3NDE4M0YwHhcNMjYwOTIxMDAyOTA0WhcNMjYwOTI4MDAyOTA0WjAYMRYwFAYD
VQQDEw02YWIwN2E1MC0xMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9AU89digAj/pACtrreTigT8yh4SQT3bbNWaUIHWoNljc3IOseIQn+fPJNrCL
ldMyugbMKgqXfYVJuHQg2zWFHvApn7E5m8d+uL4ci4Vk4NWIbHCoWx8ZLy7EK4CH
EZyfwMAOyD6o2941at+xXiXYwXeH8A7ZN2Jvp30bQGyQiOWLh9y+VqpdoF+4kBqG
lwsLYYTB5KIHx/GflL00rRJiBNn2H3oWniVQhqbv6OPIYV7rLOTLfyr6UC+tA/SI
7kcovchgs9dwtsRbxKKDZhTyXjWsjsMwNUDCmVgJMFUdkHQJP96i6oLsAYJGbAhm
eCiQzx220cDRoWuEkJiz1lCUDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmD0YXw
7zOQVyEn3FF+CGJqxS2EMB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE
MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW
anl6X3N5cmRsRWNmbDBHRDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXf8IOzAW7fcdKy7Tpl5Vye07jdhCK3OsruasJgXVGz9HLrChPcSHM4Zxoq4B
aa8mwK+Qjd4nJdSCZEpx3Hg25+3gtB7pjhsw49C39A2oppfI14wQCbRMXqTG05no
8FtCLSjgFvwTsAnfUMRbGSRwZqCPN7J/ShrjaNYBdMjUpch7q9XI+imGHMDloXc9
pO1OxPKHQewVWMDNYncBDD22gkKVZjabHc0ywKfjnjEjx8Y6nPYUhncu8GeRRIef
bvHJAHpcvbOcIYZJ/tSrlmVk6ntJzsEWc+axYl3egJA/1y4c9o+BSOkK8U2SwK+Q
XYvTC8QiV0ovLjsLeD7bF51FLQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:36:44 2026 by rpki-client