
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft
File: cgqmbzbBRgrUvDrGkvlltxdKWOA.mft (raw, json)
Hash identifier: AylBA/F/xJbPtEELWfMw++QD9Jz5KbUO80rzwpDAmx0=
Subject key identifier: 40:83:02:FA:18:8D:26:B3:D4:1A:3F:67:B0:EE:64:95:8E:38:C1:A2
Authority key identifier: 72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0
Certificate issuer: /CN=A91B4053/serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft
Manifest number: F9
Signing time: Sun 11 Oct 2026 06:54:39 +0000
Manifest this update: Sun 11 Oct 2026 06:54:38 +0000
Manifest next update: Sun 18 Oct 2026 06:54:38 +0000
Files and hashes: 1: cgqmbzbBRgrUvDrGkvlltxdKWOA.crl (hash: JWuW8yrOYhYloYudAGKu9+/N8K890s6JBvNV+ptWEhI=)
2: AC8BCC2E50E411F0B8E7D45DC4F9AE02.roa (hash: 0Xdlp+Jjf+yeb2d/P0L7IU19P+mYj01Gp9Tj8N+RxJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl
rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 06:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4053, serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0
Validity
Not Before: Oct 11 06:54:38 2026 GMT
Not After : Oct 18 06:54:38 2026 GMT
Subject: CN=6acb32ae-9b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:82:d5:dd:b2:a3:b5:6e:5e:ee:79:6e:33:
f1:39:83:11:28:c6:0d:5b:c8:97:83:18:19:50:b9:
55:c1:3d:aa:31:ba:4d:f8:cd:85:99:ae:c9:0e:fc:
34:1b:32:43:d4:16:78:d2:9f:c0:89:c3:4a:bf:fd:
cb:ac:0c:1c:22:35:da:d7:b5:7e:76:f3:35:9b:53:
e0:a3:5c:71:f7:70:28:b2:12:80:f0:24:49:9e:d4:
18:54:07:b3:22:d1:a7:a7:75:ec:8f:f3:c4:be:9f:
7c:a1:74:7b:fe:1e:20:0b:d9:4e:5e:63:89:21:8a:
10:1f:1e:32:b5:35:a3:10:4c:96:32:76:bb:ce:30:
e6:3b:4c:d3:b3:03:04:de:f6:51:43:f7:04:6b:e5:
36:c6:bf:fa:9c:32:a4:21:21:3d:61:3b:78:db:07:
31:d4:43:d5:78:7d:6e:87:54:cd:2c:bb:17:dc:6c:
7a:01:94:f5:e0:29:fd:39:2a:78:02:95:62:72:60:
ef:24:e5:7b:3e:49:14:f3:c2:9e:d4:c6:6b:c5:40:
ad:3f:6c:64:be:af:4f:5c:fa:e4:cd:d4:a9:08:11:
57:d6:b4:cb:c9:41:b8:2c:14:e6:0c:81:8c:bc:a9:
91:b2:95:12:d9:93:98:95:1d:8b:1c:91:f4:51:9f:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:83:02:FA:18:8D:26:B3:D4:1A:3F:67:B0:EE:64:95:8E:38:C1:A2
X509v3 Authority Key Identifier:
keyid:72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:89:ad:a2:c5:ec:a4:a7:22:30:e6:be:d5:e2:fb:05:76:5f:
90:8a:cc:08:bc:5b:47:07:c4:e6:5f:c7:58:12:df:3a:fc:e9:
b2:b0:83:17:6c:20:a7:49:ca:01:dc:1d:71:a9:6d:2e:a6:89:
53:c4:a9:a7:41:11:55:35:66:fb:25:75:21:85:0a:55:b3:eb:
47:f8:71:7d:aa:a9:bf:c3:2b:28:12:26:ed:f6:2a:9e:16:5e:
4b:b0:5c:22:2d:e1:38:10:cf:e0:aa:c5:1e:42:f1:c5:7f:87:
94:89:ab:d2:55:8a:e9:dc:89:e9:d4:40:ba:77:8e:e1:be:e1:
a0:c2:f6:48:7a:95:48:e7:7a:e6:ec:86:09:d4:ad:a1:57:48:
45:67:8c:d5:39:ca:f5:75:ad:33:48:93:8a:b1:16:d9:87:c9:
9f:fa:29:42:1f:70:c5:2c:31:a1:85:93:35:31:fb:90:83:fe:
20:31:e3:f9:51:fc:fc:5d:01:1e:c8:3a:26:56:07:cf:a0:91:
c2:ca:37:8c:df:5e:a4:12:e3:eb:19:da:0f:bd:ae:ba:b1:a9:
98:09:11:24:0d:bb:30:ec:52:27:72:88:7b:ac:82:d5:16:8d:
43:65:9d:d4:7e:96:42:8c:3b:7e:0b:ea:ea:06:07:5d:cf:e7:
86:4c:fc:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQwNTMxMTAvBgNVBAUTKDcyMEFBNjZGMzZDMTQ2MEFENEJDM0FDNjkyRjk2NUI3
MTc0QTU4RTAwHhcNMjYxMDExMDY1NDM4WhcNMjYxMDE4MDY1NDM4WjAYMRYwFAYD
VQQDEw02YWNiMzJhZS05YjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/mC1d2yo7VuXu55bjPxOYMRKMYNW8iXgxgZULlVwT2qMbpN+M2Fma7JDvw0
GzJD1BZ40p/AicNKv/3LrAwcIjXa17V+dvM1m1Pgo1xx93AoshKA8CRJntQYVAez
ItGnp3Xsj/PEvp98oXR7/h4gC9lOXmOJIYoQHx4ytTWjEEyWMna7zjDmO0zTswME
3vZRQ/cEa+U2xr/6nDKkISE9YTt42wcx1EPVeH1uh1TNLLsX3Gx6AZT14Cn9OSp4
ApVicmDvJOV7PkkU88Ke1MZrxUCtP2xkvq9PXPrkzdSpCBFX1rTLyUG4LBTmDIGM
vKmRspUS2ZOYlR2LHJH0UZ8WtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECDAvoY
jSaz1Bo/Z7DuZJWOOMGiMB8GA1UdIwQYMBaAFHIKpm82wUYK1Lw6xpL5ZbcXSljg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDA1My8zNjQwQ0I5NDUw
RTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJnclV2RHJHa3ZsbHR4ZEtX
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2NncW1iemJCUmdyVXZEckdrdmxsdHhkS1dPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDA1My8zNjQwQ0I5NDUwRTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJn
clV2RHJHa3ZsbHR4ZEtXT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARYmtosXspKciMOa+1eL7BXZfkIrMCLxbRwfE5l/HWBLfOvzpsrCDF2wgp0nK
AdwdcaltLqaJU8Spp0ERVTVm+yV1IYUKVbPrR/hxfaqpv8MrKBIm7fYqnhZeS7Bc
Ii3hOBDP4KrFHkLxxX+HlImr0lWK6dyJ6dRAuneO4b7hoML2SHqVSOd65uyGCdSt
oVdIRWeM1TnK9XWtM0iTirEW2YfJn/opQh9wxSwxoYWTNTH7kIP+IDHj+VH8/F0B
Hsg6JlYHz6CRwso3jN9epBLj6xnaD72uurGpmAkRJA27MOxSJ3KIe6yC1RaNQ2Wd
1H6WQow7fgvq6gYHXc/nhkz8xg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:47:01 2026 by rpki-client