
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json)
Hash identifier: 4ba0mYlWfWIRMxS3cUxrNfdJxgFJ4Jl7StSPw83U5Mk=
Subject key identifier: 34:D9:B7:EE:6F:04:85:31:67:14:8A:7A:09:5A:CB:F4:BF:29:BE:CC
Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Certificate serial: 063D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
Manifest number: 062D
Signing time: Sun 20 Sep 2026 22:37:24 +0000
Manifest this update: Sun 20 Sep 2026 22:37:23 +0000
Manifest next update: Sun 27 Sep 2026 22:37:23 +0000
Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: H56hPS0DzzXtCpIKFWAbRLXCfjrXGyx6VW4pdr025cE=)
2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: Wnvaq8Ww3Bk3d2vemeHqavsME8uCxGuZGCjNCIrVG9I=)
3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: 96gxdKQyCmuf4UCiLnFZLLSpfBwM2iUrQWCesjIYcd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:37:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD
Validity
Not Before: Sep 20 22:37:23 2026 GMT
Not After : Sep 27 22:37:23 2026 GMT
Subject: CN=6ab06024-50e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:44:08:18:ba:bd:bc:77:24:58:92:78:73:
b9:e0:10:00:57:5d:3c:10:4a:72:29:3f:74:19:7f:
df:23:27:e0:8a:61:18:3f:10:a9:94:ee:32:c6:d4:
5a:5e:ad:6d:cd:c9:14:c3:2a:21:47:fc:c2:66:0c:
94:8e:12:03:b4:41:c3:af:4b:00:cd:b5:0b:b7:eb:
85:3a:80:f0:0c:6a:76:e0:66:b3:67:bf:87:37:c2:
6a:dc:91:71:81:68:60:e9:7e:7e:5c:b6:d4:00:1b:
e5:5a:e1:6a:31:2c:74:9d:7e:25:dc:af:cd:b6:79:
59:01:d3:67:01:7c:d4:e0:a6:0f:70:75:d2:b8:d1:
83:51:88:31:10:de:0e:85:a9:f6:17:8b:26:ed:a9:
c8:39:18:29:9d:93:bd:c2:50:7f:4c:fb:6b:5e:40:
9f:73:af:b3:5f:d2:26:b4:76:58:98:1f:13:80:e1:
73:7a:9d:27:c4:8d:de:b0:4b:a5:d3:2f:9e:39:b5:
4a:40:37:7e:63:3a:67:83:4f:7c:50:08:ee:6a:1d:
0a:59:62:9b:5d:0f:6b:94:11:04:88:48:5c:05:03:
1c:5c:0f:49:6b:ab:17:26:4f:30:59:b6:0d:9c:44:
67:50:aa:06:c7:d0:d4:12:3f:21:92:52:be:3b:30:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:B7:EE:6F:04:85:31:67:14:8A:7A:09:5A:CB:F4:BF:29:BE:CC
X509v3 Authority Key Identifier:
keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:20:8d:f4:12:f7:b1:24:34:3a:68:dc:55:14:38:08:dd:b7:
d8:1b:e0:be:30:b4:ff:2b:5c:ce:24:61:7a:07:35:e7:6e:0d:
a6:19:51:65:25:e0:78:59:9a:ec:83:6b:8b:40:f5:99:15:0f:
8b:f7:bd:1c:c7:8f:d0:f8:7f:bf:53:33:a0:46:61:8e:4b:f2:
9b:0f:ce:8e:4e:b7:fc:3f:bc:1c:f6:57:4d:46:ba:0b:b0:be:
78:19:25:1c:e2:35:49:22:15:51:cd:c2:ad:42:f3:58:7a:3e:
77:de:3d:86:d2:2b:3f:cb:47:f5:7e:77:e0:26:5e:d6:0b:6a:
fe:94:1d:27:15:8a:c3:18:9c:ed:00:45:b6:ae:43:e0:8e:08:
c8:34:65:fa:aa:68:3e:e5:f6:84:5c:ef:62:04:21:99:df:37:
c3:70:00:79:98:30:a6:3c:67:14:2d:06:b1:9e:2e:ad:14:42:
dc:ae:5c:a9:7a:5a:15:06:dc:17:e6:22:08:74:7c:bb:02:cb:
70:f3:58:fa:e7:e2:86:d5:ba:15:10:9c:92:19:fe:ea:b1:78:
f6:37:0a:36:f7:38:dd:7a:11:7d:df:35:09:c8:56:14:5a:03:
cd:c2:2d:6e:f9:ff:36:65:11:95:e0:58:9d:e1:9c:a9:6c:8f:
0a:9d:e2:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD
NURCNEUwQUQwHhcNMjYwOTIwMjIzNzIzWhcNMjYwOTI3MjIzNzIzWjAYMRYwFAYD
VQQDEw02YWIwNjAyNC01MGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2URECBi6vbx3JFiSeHO54BAAV108EEpyKT90GX/fIyfgimEYPxCplO4yxtRa
Xq1tzckUwyohR/zCZgyUjhIDtEHDr0sAzbULt+uFOoDwDGp24GazZ7+HN8Jq3JFx
gWhg6X5+XLbUABvlWuFqMSx0nX4l3K/NtnlZAdNnAXzU4KYPcHXSuNGDUYgxEN4O
han2F4sm7anIORgpnZO9wlB/TPtrXkCfc6+zX9ImtHZYmB8TgOFzep0nxI3esEul
0y+eObVKQDd+Yzpng098UAjuah0KWWKbXQ9rlBEEiEhcBQMcXA9Ja6sXJk8wWbYN
nERnUKoGx9DUEj8hklK+OzCjvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTZt+5v
BIUxZxSKeglay/S/Kb7MMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5
OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC
Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAniCN9BL3sSQ0OmjcVRQ4CN232BvgvjC0/ytcziRhegc1524NphlRZSXgeFma
7INri0D1mRUPi/e9HMeP0Ph/v1MzoEZhjkvymw/Ojk63/D+8HPZXTUa6C7C+eBkl
HOI1SSIVUc3CrULzWHo+d949htIrP8tH9X534CZe1gtq/pQdJxWKwxic7QBFtq5D
4I4IyDRl+qpoPuX2hFzvYgQhmd83w3AAeZgwpjxnFC0GsZ4urRRC3K5cqXpaFQbc
F+YiCHR8uwLLcPNY+ufihtW6FRCckhn+6rF49jcKNvc43XoRfd81CchWFFoDzcIt
bvn/NmURleBYneGcqWyPCp3iYQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:41:42 2026 by rpki-client