
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
File: _IholOLXDjUuTxaAUsUbBasFrMU.mft (raw, json)
Hash identifier: AcDLDhkr7QJZFlkjKZPV0z4OhE84ITp8781csC0/RL0=
Subject key identifier: 8D:4D:F0:33:99:91:1F:66:7F:0C:6D:73:AA:4B:C1:13:6F:D4:DB:10
Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
Certificate issuer: /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
Manifest number: 01EE
Signing time: Mon 21 Sep 2026 03:22:52 +0000
Manifest this update: Mon 21 Sep 2026 03:22:52 +0000
Manifest next update: Mon 28 Sep 2026 03:22:52 +0000
Files and hashes: 1: _IholOLXDjUuTxaAUsUbBasFrMU.crl (hash: /6AOhtXZHOcrezmqQlbMgBYYLDr50VzMLH7AJqxaXtg=)
2: 740B66A6C09A11EE9839DC42C4F9AE02.roa (hash: fXqbBRWZeBNZ3fZzOgA4a+7wMB/4xdAxxRaA5d6gc6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CABF0, serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Validity
Not Before: Sep 21 03:22:52 2026 GMT
Not After : Sep 28 03:22:52 2026 GMT
Subject: CN=6ab0a30c-ec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:cf:c8:47:04:ec:fa:5a:31:f2:e9:ac:50:
c3:13:3f:93:6d:a8:95:2e:90:a2:ff:bf:08:a0:b4:
ae:42:12:0d:87:e5:f2:70:bd:9f:32:d0:e1:31:55:
e2:80:2f:fa:95:e6:9a:f9:e8:cd:28:d9:a4:4a:4d:
35:36:8b:fa:c1:81:7c:9a:16:06:d7:e6:b7:40:ea:
14:c4:e7:2e:00:58:f9:e7:af:98:a7:30:92:55:78:
ec:61:5a:cc:94:03:7a:0e:c4:6a:46:fe:b9:93:e4:
6b:2b:1f:3e:f9:fe:fa:b3:f3:1e:4f:03:65:c9:4b:
c7:50:3b:c5:8d:74:0f:66:6e:b4:b9:a5:54:e2:33:
59:9e:44:9e:34:0f:79:df:33:c7:01:bd:c1:14:4b:
d7:08:b5:c5:bd:29:69:5b:55:a6:54:1c:dd:aa:fd:
4c:00:e2:d0:fe:63:fe:37:23:fd:f0:66:9c:3f:5d:
14:b3:c9:56:75:dd:50:d3:f5:8c:6d:cb:06:6e:91:
4b:da:93:33:52:15:df:2d:ca:dc:8f:11:0c:fb:e4:
35:8d:23:f5:dc:8b:09:58:8b:b1:8c:97:fd:30:84:
8d:00:3b:31:c0:b9:de:a4:48:6e:7f:62:1e:f8:63:
34:56:7d:c5:05:ea:a0:40:8b:ee:2e:9b:bd:75:40:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4D:F0:33:99:91:1F:66:7F:0C:6D:73:AA:4B:C1:13:6F:D4:DB:10
X509v3 Authority Key Identifier:
keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:21:7a:ef:a2:36:b5:08:29:8d:3e:d6:8c:e4:8c:b5:c7:f8:
b8:5f:d4:66:d5:a5:e8:2c:b3:e6:f2:b4:aa:d7:6b:75:a8:1e:
08:04:57:6b:b9:c8:ff:a2:0b:1c:1b:14:7f:35:89:f3:08:ad:
ce:77:5d:9a:74:59:1a:e1:b6:cf:3b:07:f3:ac:d8:29:75:29:
96:44:a9:6c:b1:92:75:12:3b:ba:70:aa:2e:e2:8c:19:cf:0d:
f8:c5:de:7d:55:b7:ad:a2:8d:1c:63:16:88:72:8a:e7:c0:74:
0e:63:68:f4:40:65:a8:e0:78:fe:d3:1b:62:d8:34:90:db:bf:
a8:87:1f:83:2a:ab:9e:29:f8:3a:82:07:83:26:73:70:3d:c5:
51:5c:c7:92:ca:69:e1:f4:02:9d:b7:d3:cc:46:78:9e:94:ff:
09:a9:39:b6:4f:a5:8d:8c:bf:a6:3b:18:61:45:1d:a8:83:67:
26:4d:04:e9:9b:f3:92:c7:67:58:d9:90:3f:80:61:7f:86:58:
89:12:be:5c:56:21:e9:c3:46:e7:38:a0:8c:57:38:92:54:26:
1b:3e:7f:0d:c6:1b:91:43:70:3d:e9:64:88:f7:d6:09:14:b5:
f9:4a:31:c8:d6:e9:5b:d9:68:93:44:84:e0:db:19:36:b9:4c:
77:4f:06:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FCRjAxMTAvBgNVBAUTKEZDODg2ODk0RTJENzBFMzUyRTRGMTY4MDUyQzUxQjA1
QUIwNUFDQzUwHhcNMjYwOTIxMDMyMjUyWhcNMjYwOTI4MDMyMjUyWjAYMRYwFAYD
VQQDEw02YWIwYTMwYy1lYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQvPyEcE7PpaMfLprFDDEz+TbaiVLpCi/78IoLSuQhINh+XycL2fMtDhMVXi
gC/6leaa+ejNKNmkSk01Nov6wYF8mhYG1+a3QOoUxOcuAFj556+YpzCSVXjsYVrM
lAN6DsRqRv65k+RrKx8++f76s/MeTwNlyUvHUDvFjXQPZm60uaVU4jNZnkSeNA95
3zPHAb3BFEvXCLXFvSlpW1WmVBzdqv1MAOLQ/mP+NyP98GacP10Us8lWdd1Q0/WM
bcsGbpFL2pMzUhXfLcrcjxEM++Q1jSP13IsJWIuxjJf9MISNADsxwLnepEhuf2Ie
+GM0Vn3FBeqgQIvuLpu9dUDfVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1N8DOZ
kR9mfwxtc6pLwRNv1NsQMB8GA1UdIwQYMBaAFPyIaJTi1w41Lk8WgFLFGwWrBazF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUJGMC9EOTZCQTY2MEMw
OTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERqVXVUeGFBVXNVYkJhc0Zy
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JaG9sT0xYRGpVdVR4YUFVc1ViQmFzRnJNVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUJGMC9EOTZCQTY2MEMwOTkxMUVFQjk1MDVBNDFDNEY5QUUwMi9fSWhvbE9MWERq
VXVUeGFBVXNVYkJhc0ZyTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXCF676I2tQgpjT7WjOSMtcf4uF/UZtWl6Cyz5vK0qtdrdageCARXa7nI/6IL
HBsUfzWJ8witznddmnRZGuG2zzsH86zYKXUplkSpbLGSdRI7unCqLuKMGc8N+MXe
fVW3raKNHGMWiHKK58B0DmNo9EBlqOB4/tMbYtg0kNu/qIcfgyqrnin4OoIHgyZz
cD3FUVzHkspp4fQCnbfTzEZ4npT/Cak5tk+ljYy/pjsYYUUdqINnJk0E6Zvzksdn
WNmQP4Bhf4ZYiRK+XFYh6cNG5zigjFc4klQmGz5/DcYbkUNwPelkiPfWCRS1+Uox
yNbpW9lok0SE4NsZNrlMd08Ggg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:29:15 2026 by rpki-client