
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
File: 4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json)
Hash identifier: OM7rEZeUOIn6IWKn3cPOqlMEMAIGxec36m9pHfIcNeA=
Subject key identifier: 8B:6D:E4:31:49:F4:B7:65:F2:D7:A5:F3:CE:59:AA:9E:19:99:37:11
Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Certificate serial: 08C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
Manifest number: 08A6
Signing time: Tue 22 Sep 2026 20:26:36 +0000
Manifest this update: Tue 22 Sep 2026 20:26:35 +0000
Manifest next update: Tue 29 Sep 2026 20:26:35 +0000
Files and hashes: 1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: JvTlfjxhiaqNDp3d4lR74p6wyFh4q/SMeNLeBL9SL4k=)
2: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: VVuT0oGthuu1h4dpEkw5dwzZuqKsuK62xGDpmmEICJE=)
3: 9F8DA582EA0F11F0944A7CD7716F56BC.roa (hash: 3YwwSJL/lczWD+gAqMpWstD/Bdbs+l7Ejs50rGgef0E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Validity
Not Before: Sep 22 20:26:35 2026 GMT
Not After : Sep 29 20:26:35 2026 GMT
Subject: CN=6ab2e47c-4f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:d7:1e:05:1e:77:da:d4:f0:79:d8:2a:07:
4a:29:91:34:fe:05:d8:d8:3b:45:3d:60:fe:f8:b6:
ef:20:65:47:d7:17:a1:8a:8e:df:e7:27:c5:ec:cb:
90:56:e6:d1:a3:cc:2e:59:63:46:eb:f6:fe:db:c9:
2b:9e:b5:9e:af:04:bb:22:e8:3d:10:71:0a:32:7f:
e0:5d:45:87:ca:5e:90:eb:27:52:ca:c1:49:59:8f:
1d:8d:e3:4b:91:f2:95:f5:df:59:1b:af:a3:1a:61:
ac:69:13:a9:2e:36:2b:6d:ba:dc:30:04:c0:b2:d8:
e3:78:6d:47:37:98:c9:12:fd:14:da:ec:c5:fd:48:
89:4c:5d:27:c5:42:7d:30:a8:62:b5:de:7e:ad:31:
36:a4:37:39:60:7c:c4:55:66:b6:a2:97:ee:50:8e:
d8:a0:ed:1d:70:fb:f2:bb:ad:3b:e4:f4:02:4a:25:
31:26:3f:1a:d9:53:6b:cd:31:5a:9d:bc:6d:61:99:
34:44:88:75:b6:00:27:0f:76:2a:88:25:dc:b7:93:
f9:c4:be:15:ec:6f:61:08:34:59:ad:98:2d:f0:93:
63:af:ad:e6:af:48:32:f6:7f:41:6c:63:d9:63:64:
78:7b:2e:9d:bc:9b:0c:e2:85:b7:d6:44:8d:cb:5b:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6D:E4:31:49:F4:B7:65:F2:D7:A5:F3:CE:59:AA:9E:19:99:37:11
X509v3 Authority Key Identifier:
keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:71:fe:72:56:a5:55:4c:f2:9f:8f:21:94:c1:09:7d:92:c4:
8d:c1:46:3c:70:c9:75:6e:44:05:55:6e:9a:f2:46:e3:47:2b:
e3:78:01:e3:e5:23:1f:99:47:5a:72:11:7f:61:96:08:b2:1b:
0c:39:de:f3:d0:11:9d:5b:02:24:00:30:37:08:dd:5a:92:f1:
a0:6e:dd:0e:f4:0f:08:d8:3f:63:01:89:18:c4:df:6c:fa:f9:
f9:80:b3:96:58:48:dc:61:67:7c:02:1f:e6:c3:19:e3:9d:31:
1d:26:f1:c8:68:d5:34:72:c0:ee:4b:df:01:72:3a:25:89:6f:
a9:1c:d1:23:47:f8:2f:6a:09:a9:e1:50:19:43:0f:a1:c1:03:
bb:ac:98:f2:5d:23:d9:be:d3:4b:09:52:e2:f7:34:a3:3d:89:
8d:83:68:57:c3:2a:7a:0c:3a:94:4c:0e:7c:50:c6:0f:7f:0f:
53:60:04:7c:af:d2:f8:b9:e1:13:da:99:68:30:d8:87:53:37:
12:f3:e8:fb:25:cb:00:35:03:07:8c:49:ee:b7:89:15:21:94:
fb:3c:a9:6a:fa:03:9e:99:6a:c9:94:ac:89:ff:46:7f:89:5e:
c5:32:d6:d0:34:3b:c8:65:eb:4f:31:46:72:fc:01:4b:75:8e:
4e:63:93:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA4NTMxMTAvBgNVBAUTKEUwRjNDRkJERkE3RDA3NDI3NEZBNzQ5RDQwMjlDRUUz
NTg4Rjc3QzMwHhcNMjYwOTIyMjAyNjM1WhcNMjYwOTI5MjAyNjM1WjAYMRYwFAYD
VQQDEw02YWIyZTQ3Yy00ZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhHXHgUed9rU8HnYKgdKKZE0/gXY2DtFPWD++LbvIGVH1xehio7f5yfF7MuQ
VubRo8wuWWNG6/b+28krnrWerwS7Iug9EHEKMn/gXUWHyl6Q6ydSysFJWY8djeNL
kfKV9d9ZG6+jGmGsaROpLjYrbbrcMATAstjjeG1HN5jJEv0U2uzF/UiJTF0nxUJ9
MKhitd5+rTE2pDc5YHzEVWa2opfuUI7YoO0dcPvyu6075PQCSiUxJj8a2VNrzTFa
nbxtYZk0RIh1tgAnD3YqiCXct5P5xL4V7G9hCDRZrZgt8JNjr63mr0gy9n9BbGPZ
Y2R4ey6dvJsM4oW31kSNy1vQrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItt5DFJ
9Ldl8tel885Zqp4ZmTcRMB8GA1UdIwQYMBaAFODzz736fQdCdPp0nUApzuNYj3fD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg1My81Qjk0MzkwRTA0
NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIwSjAtblNkUUNuTzQxaVBk
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRQUFB2ZnA5QjBKMC1uU2RRQ25PNDFpUGQ4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDg1My81Qjk0MzkwRTA0NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIw
SjAtblNkUUNuTzQxaVBkOE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASHH+clalVUzyn48hlMEJfZLEjcFGPHDJdW5EBVVumvJG40cr43gB4+UjH5lH
WnIRf2GWCLIbDDne89ARnVsCJAAwNwjdWpLxoG7dDvQPCNg/YwGJGMTfbPr5+YCz
llhI3GFnfAIf5sMZ450xHSbxyGjVNHLA7kvfAXI6JYlvqRzRI0f4L2oJqeFQGUMP
ocEDu6yY8l0j2b7TSwlS4vc0oz2JjYNoV8Mqegw6lEwOfFDGD38PU2AEfK/S+Lnh
E9qZaDDYh1M3EvPo+yXLADUDB4xJ7reJFSGU+zypavoDnplqyZSsif9Gf4lexTLW
0DQ7yGXrTzFGcvwBS3WOTmOThw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:24:12 2026 by rpki-client