
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
File: o9wYjy1VW0FacV8lkDahpg_8uNk.mft (raw, json)
Hash identifier: GzC4AA8vjbpriWMbiXLHi51kE6H2S8nRnQBQZifKiUk=
Subject key identifier: 48:D9:2C:5E:69:93:CD:DD:BA:7A:C6:F9:33:79:05:2F:44:4D:3C:F3
Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9
Certificate issuer: /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
Certificate serial: 030D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
Manifest number: 0306
Signing time: Fri 09 Oct 2026 01:17:21 +0000
Manifest this update: Fri 09 Oct 2026 01:17:20 +0000
Manifest next update: Fri 16 Oct 2026 01:17:20 +0000
Files and hashes: 1: o9wYjy1VW0FacV8lkDahpg_8uNk.crl (hash: wOADFSxcHUm3w5QElO9ds5oMLMV6vtVqLOoZGQMqyBk=)
2: 2A766EA23A3411EDA1B7D863C4F9AE02.roa (hash: 4HjNDDfKFJrgWK5K6rpjz8dvflAC5Isd+SEG9GMgXhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl
rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
Validity
Not Before: Oct 9 01:17:20 2026 GMT
Not After : Oct 16 01:17:20 2026 GMT
Subject: CN=6ac840a1-a45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:83:67:96:d2:69:79:c1:b7:e2:87:83:97:
74:c5:33:82:59:e0:6c:d6:8c:1a:eb:85:f8:9d:45:
8d:55:8e:cd:27:52:77:19:51:a3:08:c1:ba:03:7c:
d2:2d:83:9e:88:d1:88:db:fd:67:6f:0f:bc:09:76:
f5:f8:fc:33:5c:38:a7:80:88:18:a1:31:f8:21:9b:
09:a4:26:b6:32:bc:6e:39:5e:a0:29:97:62:f0:3b:
85:6f:91:aa:9a:ef:18:d3:f7:0f:80:08:4e:ca:18:
d4:7c:b6:c2:a0:e0:d0:d9:59:7e:4f:8a:c4:50:ea:
c3:1b:db:d9:e3:b3:f0:b7:eb:29:bb:9b:1a:22:e7:
1e:20:39:75:82:62:54:d2:f7:52:11:dc:7e:d0:94:
1f:1e:6e:12:a5:ac:7a:45:ea:00:77:57:a7:c4:9b:
91:cf:c4:97:2b:33:57:94:f3:4d:01:2a:fe:bf:dd:
b5:c9:3e:a2:af:83:5b:7d:28:02:c4:37:f8:7d:db:
53:58:65:55:e6:cd:97:2b:77:4f:ad:ec:1b:65:57:
d7:a7:66:2e:f0:11:e7:b8:1e:9e:bb:68:1d:fe:c3:
16:49:8c:d1:c0:0a:1c:c5:0c:72:ce:07:c8:89:30:
87:68:28:a6:a9:d9:f0:c2:52:95:73:3f:95:49:ff:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D9:2C:5E:69:93:CD:DD:BA:7A:C6:F9:33:79:05:2F:44:4D:3C:F3
X509v3 Authority Key Identifier:
keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:2a:f0:44:bb:19:8f:4f:87:b0:c0:f8:8f:1e:9b:03:8d:cd:
62:61:40:18:db:e2:19:d9:b3:a5:a3:16:73:cd:97:ce:e3:e0:
22:ca:2a:99:81:6d:1c:4c:c8:e5:b7:10:d8:56:84:4e:4a:f7:
24:3e:e6:3f:83:d4:b7:d5:db:d6:09:70:8e:de:54:a8:2e:b1:
e3:09:2b:f8:77:de:d4:5c:a7:03:6f:24:56:3a:66:85:bd:6e:
16:18:c5:4b:bf:05:f9:70:6f:9a:2a:14:af:e9:70:45:b9:af:
b9:04:83:c4:76:55:e6:4c:32:57:42:68:52:b8:01:e0:85:ea:
25:a4:b2:8d:35:41:b6:bb:d9:10:a0:97:cf:4e:ab:d7:d5:c7:
2a:fa:3e:d2:75:d9:12:8c:5e:f5:47:99:d4:fa:b0:18:72:d3:
4e:d4:5b:d8:32:26:c3:5c:19:08:bd:b4:76:e3:1c:55:94:df:
08:6c:ca:f7:f8:a7:d6:bb:22:f5:23:2d:c7:d5:fe:d2:3b:a9:
b1:46:0f:9b:58:9b:53:33:20:7f:d7:e6:4c:16:e7:a5:0b:d5:
bb:45:5f:62:25:f1:b5:29:44:6c:99:9a:94:6a:1c:0f:2f:68:
b6:d2:f3:51:6f:ea:b9:ef:96:6b:ee:66:b5:99:94:b2:39:72:
b6:cb:d9:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhGNjgxMTAvBgNVBAUTKEEzREMxODhGMkQ1NTVCNDE1QTcxNUYyNTkwMzZBMUE2
MEZGQ0I4RDkwHhcNMjYxMDA5MDExNzIwWhcNMjYxMDE2MDExNzIwWjAYMRYwFAYD
VQQDEw02YWM4NDBhMS1hNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+uDZ5bSaXnBt+KHg5d0xTOCWeBs1owa64X4nUWNVY7NJ1J3GVGjCMG6A3zS
LYOeiNGI2/1nbw+8CXb1+PwzXDingIgYoTH4IZsJpCa2MrxuOV6gKZdi8DuFb5Gq
mu8Y0/cPgAhOyhjUfLbCoODQ2Vl+T4rEUOrDG9vZ47Pwt+spu5saIuceIDl1gmJU
0vdSEdx+0JQfHm4Spax6ReoAd1enxJuRz8SXKzNXlPNNASr+v921yT6ir4NbfSgC
xDf4fdtTWGVV5s2XK3dPrewbZVfXp2Yu8BHnuB6eu2gd/sMWSYzRwAocxQxyzgfI
iTCHaCimqdnwwlKVcz+VSf/PXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjZLF5p
k83dunrG+TN5BS9ETTzzMB8GA1UdIwQYMBaAFKPcGI8tVVtBWnFfJZA2oaYP/LjZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEY2OC82QjYwQkZCQTNB
MzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcwRmFjVjhsa0RhaHBnXzh1
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285d1lqeTFWVzBGYWNWOGxrRGFocGdfOHVOay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OEY2OC82QjYwQkZCQTNBMzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcw
RmFjVjhsa0RhaHBnXzh1TmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAyrwRLsZj0+HsMD4jx6bA43NYmFAGNviGdmzpaMWc82XzuPgIsoqmYFtHEzI
5bcQ2FaETkr3JD7mP4PUt9Xb1glwjt5UqC6x4wkr+Hfe1FynA28kVjpmhb1uFhjF
S78F+XBvmioUr+lwRbmvuQSDxHZV5kwyV0JoUrgB4IXqJaSyjTVBtrvZEKCXz06r
19XHKvo+0nXZEoxe9UeZ1PqwGHLTTtRb2DImw1wZCL20duMcVZTfCGzK9/in1rsi
9SMtx9X+0jupsUYPm1ibUzMgf9fmTBbnpQvVu0VfYiXxtSlEbJmalGocDy9ottLz
UW/que+Wa+5mtZmUsjlytsvZfA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:52:41 2026 by rpki-client