
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft
File: mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft (raw, json)
Hash identifier: KDkT4txYK2+8Vk0J6H3e+5+UIL0L8y7v8RP6ojNn0Zo=
Subject key identifier: 13:08:7C:38:4F:51:85:A0:F7:01:00:FF:F9:C2:D7:28:94:DD:E2:BB
Authority key identifier: 9A:90:37:1F:16:6C:8C:53:12:53:19:3D:EA:3E:58:FD:3D:BF:6B:97
Certificate issuer: /CN=A91C9ADB/serialNumber=9A90371F166C8C531253193DEA3E58FD3DBF6B97
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpA3HxZsjFMSUxk96j5Y_T2_a5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft
Manifest number: 1C
Signing time: Sat 19 Sep 2026 08:58:34 +0000
Manifest this update: Sat 19 Sep 2026 08:58:34 +0000
Manifest next update: Sat 26 Sep 2026 08:58:34 +0000
Files and hashes: 1: mpA3HxZsjFMSUxk96j5Y_T2_a5c.crl (hash: vkEpb14q/hTwuLrVYAt08Xl3gJn7dpUu+6koY11TQT0=)
2: 24D9DEEE8F1611F1B716621D3511F970.roa (hash: i/6ea57w2taA3R2xOmg8WFa/iDrumoCn0OOXfOp6R18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.crl
rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpA3HxZsjFMSUxk96j5Y_T2_a5c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9ADB, serialNumber=9A90371F166C8C531253193DEA3E58FD3DBF6B97
Validity
Not Before: Sep 19 08:58:34 2026 GMT
Not After : Sep 26 08:58:34 2026 GMT
Subject: CN=6aae4eba-df0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:2b:6a:ad:74:60:a8:d3:82:c0:fc:80:d9:
2c:3a:02:1e:1f:6d:5c:29:a7:b5:39:92:14:39:78:
66:5d:f3:f9:c3:09:04:64:65:9c:df:10:1c:5c:df:
62:db:71:18:66:fb:75:94:78:23:c1:28:33:59:a1:
a5:ea:c0:06:ef:ac:fa:e7:b1:44:e5:e3:41:72:67:
3b:84:d5:4f:7e:e6:36:95:88:d9:20:91:c7:59:17:
9b:7c:da:5c:00:a3:0d:00:df:bc:26:97:0d:22:49:
6c:94:8c:1a:ff:89:2c:f5:5a:9d:1c:82:9a:40:01:
c8:92:65:b5:16:43:00:c5:81:ee:3a:29:ac:19:2d:
ac:58:9b:23:82:47:db:fe:22:da:65:24:24:ac:da:
16:a2:68:91:71:02:ec:2f:d1:08:45:a9:cb:f7:c7:
06:c5:cb:9e:46:6b:0f:7a:5f:0c:cb:fd:ba:38:e9:
46:3c:4b:6f:b5:10:69:8d:77:68:e3:8e:02:18:48:
66:05:9f:72:ff:51:41:ec:3f:b0:77:47:bf:56:ca:
cc:f3:a6:8d:dd:cb:ac:7e:65:90:6e:58:51:c2:19:
04:78:eb:dd:59:06:64:d1:5c:ad:f0:e4:91:b3:04:
72:f3:28:41:6b:3d:6d:c7:c3:73:a2:bb:1e:b3:f6:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:7C:38:4F:51:85:A0:F7:01:00:FF:F9:C2:D7:28:94:DD:E2:BB
X509v3 Authority Key Identifier:
keyid:9A:90:37:1F:16:6C:8C:53:12:53:19:3D:EA:3E:58:FD:3D:BF:6B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpA3HxZsjFMSUxk96j5Y_T2_a5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/1DA0DD048F1511F1933762B93411F970/mpA3HxZsjFMSUxk96j5Y_T2_a5c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4c:7b:bb:43:cf:ee:7b:32:b3:a6:09:52:d7:c5:a6:f8:c3:
3c:bc:7e:74:e7:a8:60:96:70:80:14:b7:78:49:92:98:38:62:
8d:b7:65:58:0d:11:62:0b:61:80:a1:9b:b0:90:d5:1a:40:da:
f3:fe:6d:bb:5e:bf:91:96:9a:7a:a1:34:89:66:84:8d:a8:e9:
e9:d4:48:ec:6e:e4:03:c2:79:f7:a5:7a:21:d4:8e:6e:68:7d:
6b:89:b3:90:7c:79:37:85:6e:14:0c:50:b3:be:f5:fe:77:70:
54:8c:44:66:c8:49:e4:37:c5:37:90:a6:26:a9:99:08:d8:b2:
ae:93:c9:0d:47:d3:96:68:53:cf:12:a0:64:49:61:2d:a8:b6:
1f:4f:4f:a0:ef:a8:63:11:67:fa:41:43:48:51:a6:f3:57:85:
0a:8a:bc:73:42:b8:10:82:02:0e:d7:df:be:b6:a4:0b:da:33:
95:00:10:c0:91:b4:e5:c1:f1:29:31:32:68:37:d6:44:91:f3:
df:32:fb:89:c7:ee:0d:bc:42:27:81:08:af:be:e7:0c:98:d9:
81:da:d2:c6:9a:83:6f:3f:4e:bf:c7:2f:11:70:a9:0c:14:7c:
53:2b:17:43:10:83:4a:ff:39:62:ee:81:aa:81:e5:2e:c3:1e:
a0:54:36:8a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OUFEQjExMC8GA1UEBRMoOUE5MDM3MUYxNjZDOEM1MzEyNTMxOTNERUEzRTU4RkQz
REJGNkI5NzAeFw0yNjA5MTkwODU4MzRaFw0yNjA5MjYwODU4MzRaMBgxFjAUBgNV
BAMTDTZhYWU0ZWJhLWRmMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2SitqrXRgqNOCwPyA2Sw6Ah4fbVwpp7U5khQ5eGZd8/nDCQRkZZzfEBxc32Lb
cRhm+3WUeCPBKDNZoaXqwAbvrPrnsUTl40FyZzuE1U9+5jaViNkgkcdZF5t82lwA
ow0A37wmlw0iSWyUjBr/iSz1Wp0cgppAAciSZbUWQwDFge46KawZLaxYmyOCR9v+
ItplJCSs2haiaJFxAuwv0QhFqcv3xwbFy55Gaw96XwzL/bo46UY8S2+1EGmNd2jj
jgIYSGYFn3L/UUHsP7B3R79Wyszzpo3dy6x+ZZBuWFHCGQR4691ZBmTRXK3w5JGz
BHLzKEFrPW3Hw3Oiux6z9pYlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEwh8OE9R
haD3AQD/+cLXKJTd4rswHwYDVR0jBBgwFoAUmpA3HxZsjFMSUxk96j5Y/T2/a5cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QURCLzFEQTBERDA0OEYx
NTExRjE5MzM3NjJCOTM0MTFGOTcwL21wQTNIeFpzakZNU1V4azk2ajVZX1QyX2E1
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbXBBM0h4WnNqRk1TVXhrOTZqNVlfVDJfYTVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
QURCLzFEQTBERDA0OEYxNTExRjE5MzM3NjJCOTM0MTFGOTcwL21wQTNIeFpzakZN
U1V4azk2ajVZX1QyX2E1Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCtTHu7Q8/uezKzpglS18Wm+MM8vH5056hglnCAFLd4SZKYOGKNt2VYDRFiC2GA
oZuwkNUaQNrz/m27Xr+Rlpp6oTSJZoSNqOnp1EjsbuQDwnn3pXoh1I5uaH1ribOQ
fHk3hW4UDFCzvvX+d3BUjERmyEnkN8U3kKYmqZkI2LKuk8kNR9OWaFPPEqBkSWEt
qLYfT0+g76hjEWf6QUNIUabzV4UKirxzQrgQggIO19++tqQL2jOVABDAkbTlwfEp
MTJoN9ZEkfPfMvuJx+4NvEIngQivvucMmNmB2tLGmoNvP06/xy8RcKkMFHxTKxdD
EINK/zli7oGqgeUuwx6gVDaK
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:50 2026 by rpki-client