
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
File: ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json)
Hash identifier: MzOjZFtifmwoqAUCzKDBDFaUSpqEs+PHVfOxGIqjONY=
Subject key identifier: 15:EA:1E:7B:96:E4:AB:C0:8F:3B:AA:F2:96:CB:78:D6:69:42:DF:0B
Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Certificate serial: 0840
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
Manifest number: 0836
Signing time: Sun 20 Sep 2026 20:59:41 +0000
Manifest this update: Sun 20 Sep 2026 20:59:40 +0000
Manifest next update: Sun 27 Sep 2026 20:59:40 +0000
Files and hashes: 1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: Rsy/fvWzg2Sc0V6OH7kGZM3c40Ew0s+YaGymsvI21Qg=)
2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: lE2Sm7xdj8DAHwT04SLyh8rHvpeARY7nTCmbI3VK9u8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Validity
Not Before: Sep 20 20:59:40 2026 GMT
Not After : Sep 27 20:59:40 2026 GMT
Subject: CN=6ab0493d-48da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:49:fa:a0:47:a5:40:91:46:43:96:73:a4:
34:ba:3b:0e:5e:12:8d:65:64:58:0c:54:86:a3:64:
8d:f8:f9:89:f0:44:84:60:07:78:a5:e2:38:3f:28:
24:b7:78:69:51:5e:89:37:ac:49:5b:2e:df:71:e6:
f3:ae:4a:02:21:67:a3:77:6a:24:3d:aa:2f:de:8f:
dc:10:b3:cf:da:c2:05:a7:87:93:dc:ae:3b:a9:86:
39:7a:8c:23:f0:2b:4e:cc:17:5f:79:38:e8:5b:25:
1c:e0:02:53:92:5e:d2:60:a3:09:b5:0b:24:2a:b4:
6c:f5:e7:bb:e2:31:bb:d6:fc:0b:33:f5:1d:9f:bf:
de:eb:5d:02:90:66:1c:9f:9d:16:32:aa:f5:87:fb:
41:86:10:24:46:c8:2f:79:1d:53:75:34:21:1a:21:
29:c0:96:82:32:bc:af:16:90:34:f2:fc:f4:94:73:
24:08:cf:f6:41:72:70:91:12:6b:c4:e0:6b:9c:3c:
10:37:ad:b7:d5:5a:29:6c:fc:cf:02:85:df:3b:0e:
b4:0c:f0:0a:49:0d:fd:bc:14:93:98:91:ea:ec:c0:
2d:82:f2:18:41:5e:b8:74:77:62:3f:f0:03:9f:e9:
b9:85:37:ea:f1:a2:1d:8c:03:e1:a4:b7:ab:7e:10:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:1E:7B:96:E4:AB:C0:8F:3B:AA:F2:96:CB:78:D6:69:42:DF:0B
X509v3 Authority Key Identifier:
keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:69:36:6a:fd:14:59:40:66:39:29:63:d7:20:bc:8c:54:0c:
32:55:3a:be:d4:c6:b4:00:81:0d:75:7d:74:cf:3d:ce:ce:2f:
b2:0b:10:21:2b:fb:fd:b7:cd:47:60:38:51:5a:34:8b:f3:72:
2b:d2:fd:71:17:29:9d:80:2f:90:6a:9a:a0:82:6d:d8:b9:c6:
04:7e:0a:0f:ff:77:21:84:34:88:40:8c:23:89:e8:89:b1:f8:
c3:d1:6e:94:b9:d6:fa:b0:45:09:38:1d:dd:48:ff:98:f9:d1:
1a:57:3b:af:2f:6b:92:3b:b3:46:62:d2:c3:e4:73:74:e1:2b:
37:ef:17:d8:04:ae:96:a3:e1:84:77:d4:18:e7:e1:74:05:6b:
d2:9b:cf:69:05:71:3a:cc:72:67:d7:bd:f7:14:b3:23:75:b3:
f5:85:a6:44:fd:10:3e:9a:15:98:b2:6c:9e:2e:e6:27:8d:62:
f0:74:23:74:7f:fe:ee:34:07:7b:16:0d:50:eb:76:e5:ab:aa:
f2:93:7e:29:67:5c:7d:10:35:c1:c5:c7:be:40:6a:ac:66:58:
c9:45:65:8f:df:f4:b7:50:99:ad:fa:90:84:e7:45:24:b1:36:
39:08:b4:36:8d:4a:5f:12:f9:0a:d4:64:25:48:68:74:e9:bd:
ba:18:52:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwRTIxMTAvBgNVBAUTKDc5REQ1MkFBMzE3NTMwODEyNkQxNzQ4NkE3MjgwNUZC
MEUxQkFBNTgwHhcNMjYwOTIwMjA1OTQwWhcNMjYwOTI3MjA1OTQwWjAYMRYwFAYD
VQQDEw02YWIwNDkzZC00OGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnGFJ+qBHpUCRRkOWc6Q0ujsOXhKNZWRYDFSGo2SN+PmJ8ESEYAd4peI4Pygk
t3hpUV6JN6xJWy7fcebzrkoCIWejd2okPaov3o/cELPP2sIFp4eT3K47qYY5eowj
8CtOzBdfeTjoWyUc4AJTkl7SYKMJtQskKrRs9ee74jG71vwLM/Udn7/e610CkGYc
n50WMqr1h/tBhhAkRsgveR1TdTQhGiEpwJaCMryvFpA08vz0lHMkCM/2QXJwkRJr
xOBrnDwQN6231VopbPzPAoXfOw60DPAKSQ39vBSTmJHq7MAtgvIYQV64dHdiP/AD
n+m5hTfq8aIdjAPhpLerfhDWiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXqHnuW
5KvAjzuq8pbLeNZpQt8LMB8GA1UdIwQYMBaAFHndUqoxdTCBJtF0hqcoBfsOG6pY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjBFMi9CNjIzODUyQTJE
NjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1JRW0wWFNHcHlnRi13NGJx
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VkMVNxakYxTUlFbTBYU0dweWdGLXc0YnFsZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjBFMi9CNjIzODUyQTJENjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1J
RW0wWFNHcHlnRi13NGJxbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoWk2av0UWUBmOSlj1yC8jFQMMlU6vtTGtACBDXV9dM89zs4vsgsQISv7/bfN
R2A4UVo0i/NyK9L9cRcpnYAvkGqaoIJt2LnGBH4KD/93IYQ0iECMI4noibH4w9Fu
lLnW+rBFCTgd3Uj/mPnRGlc7ry9rkjuzRmLSw+RzdOErN+8X2ASulqPhhHfUGOfh
dAVr0pvPaQVxOsxyZ9e99xSzI3Wz9YWmRP0QPpoVmLJsni7mJ41i8HQjdH/+7jQH
exYNUOt25auq8pN+KWdcfRA1wcXHvkBqrGZYyUVlj9/0t1CZrfqQhOdFJLE2OQi0
No1KXxL5CtRkJUhodOm9uhhSqA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:48:08 2026 by rpki-client