
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json)
Hash identifier: qDjvjqX9rYp+v/bFMmuB3Va750xf87ixlXLJx5vtmac=
Subject key identifier: 3D:40:08:1A:80:DF:66:5C:E9:27:EF:4F:6F:64:52:89:D8:1E:2E:36
Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Certificate serial: 072F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
Manifest number: 0726
Signing time: Mon 12 Oct 2026 22:11:03 +0000
Manifest this update: Mon 12 Oct 2026 22:11:02 +0000
Manifest next update: Mon 19 Oct 2026 22:11:02 +0000
Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: PpMPHb+x63safydPIDiYLdyGCuksmRsdokj3wE8ohhM=)
2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: nL3vp/CU21MSnng2C+poLgofAZHvrlCtCeZrfBZOSyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 22:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1839 (0x72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC
Validity
Not Before: Oct 12 22:11:02 2026 GMT
Not After : Oct 19 22:11:02 2026 GMT
Subject: CN=6acd5af7-4f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:1b:70:17:11:f5:7d:d4:ef:11:ba:6d:ea:
37:7f:2a:df:1e:3f:44:ec:42:65:96:90:5a:7c:7b:
79:96:19:e3:ff:d2:76:ee:03:bb:0c:46:8c:d4:48:
d4:11:54:9b:20:85:e0:b7:7f:7b:f9:d2:c2:66:f3:
c4:02:57:eb:34:cf:c3:36:dd:31:df:c7:30:ff:dc:
05:47:19:85:aa:83:ba:4c:ee:d1:8a:9d:d4:3c:f2:
99:49:75:ee:f3:17:40:54:94:81:30:62:f9:9b:67:
fa:1d:5a:12:0e:bc:fa:6b:aa:2a:7f:e7:7e:48:6b:
2f:8b:e5:48:29:c4:d2:7f:ca:66:29:71:3c:6d:4f:
35:79:40:46:cf:59:ed:75:0f:fd:39:d8:c5:0d:e2:
95:1d:e1:21:71:bf:14:bf:b9:3f:21:d6:a5:d2:26:
1b:fc:10:c1:5d:99:e0:7d:f0:f9:65:ac:a6:ed:cd:
0b:55:57:bf:fc:79:3d:7f:21:96:1f:eb:5c:ff:4a:
59:b4:1d:1f:83:46:96:d3:97:59:da:53:94:b9:19:
29:25:8d:fa:d8:2f:c9:1a:af:1f:84:74:ff:6a:c3:
81:87:06:ea:b1:6f:c9:57:1b:ae:8d:46:84:30:6b:
c4:31:bf:c1:be:e5:04:a7:5f:fe:bc:69:93:2f:ab:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:40:08:1A:80:DF:66:5C:E9:27:EF:4F:6F:64:52:89:D8:1E:2E:36
X509v3 Authority Key Identifier:
keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f2:5b:0f:f9:47:af:9e:05:f3:77:7e:14:e3:2f:5d:e3:fa:
27:74:23:8f:bb:7f:1b:dc:3d:bf:f6:6f:cb:df:e5:cb:18:2a:
3c:8a:90:9d:47:90:7d:c9:2e:76:af:2b:0e:1b:f4:ce:b5:d4:
3a:1a:04:4d:70:29:cb:6d:67:aa:f2:93:39:ad:f2:fc:01:81:
d5:4d:49:b9:28:0b:93:e6:8e:fb:21:c1:8d:22:e4:a9:b3:c1:
18:dd:9e:3f:ca:85:a6:4f:b3:d5:b2:0d:24:d5:37:16:0b:15:
e6:86:81:a7:88:76:51:5a:65:2c:ca:d3:2c:7c:08:52:40:7e:
84:cd:7b:dc:4d:ff:4e:33:fb:75:40:5a:66:0d:d7:14:63:b5:
1e:3b:11:d6:39:b3:b5:69:c6:b4:bb:02:ac:48:4c:fb:0e:4c:
9d:9d:37:61:63:8a:da:2c:e3:d8:b9:26:a8:d2:15:c1:09:9e:
82:5c:94:37:dc:f8:74:4d:c6:73:3f:f2:b3:9d:e0:6d:37:88:
65:71:95:b2:57:96:43:71:ed:2b:a7:29:de:7a:34:0d:a2:c0:
80:82:47:04:3e:7d:dc:01:6d:cd:44:61:83:4e:c3:a2:1c:23:
23:38:ce:f2:e1:c7:ff:04:c0:d1:6c:7b:be:e1:ca:a7:02:ca:
e2:eb:24:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI1RTUxMTAvBgNVBAUTKEZBQkE1M0Y0M0RBMDBFMjFBN0VBRjc5MkQ0OEZEQjc2
OTU3QTgwQkMwHhcNMjYxMDEyMjIxMTAyWhcNMjYxMDE5MjIxMTAyWjAYMRYwFAYD
VQQDEw02YWNkNWFmNy00ZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtmAbcBcR9X3U7xG6beo3fyrfHj9E7EJllpBafHt5lhnj/9J27gO7DEaM1EjU
EVSbIIXgt397+dLCZvPEAlfrNM/DNt0x38cw/9wFRxmFqoO6TO7Rip3UPPKZSXXu
8xdAVJSBMGL5m2f6HVoSDrz6a6oqf+d+SGsvi+VIKcTSf8pmKXE8bU81eUBGz1nt
dQ/9OdjFDeKVHeEhcb8Uv7k/Idal0iYb/BDBXZngffD5Zaym7c0LVVe//Hk9fyGW
H+tc/0pZtB0fg0aW05dZ2lOUuRkpJY362C/JGq8fhHT/asOBhwbqsW/JVxuujUaE
MGvEMb/BvuUEp1/+vGmTL6vM3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1ACBqA
32Zc6SfvT29kUonYHi42MB8GA1UdIwQYMBaAFPq6U/Q9oA4hp+r3ktSP23aVeoC8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjVFNS9FQ0JGMDBFODlC
NEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0RpR242dmVTMUlfYmRwVjZn
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1ycFQ5RDJnRGlHbjZ2ZVMxSV9iZHBWNmdMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjVFNS9FQ0JGMDBFODlCNEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0Rp
R242dmVTMUlfYmRwVjZnTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvfJbD/lHr54F83d+FOMvXeP6J3Qjj7t/G9w9v/Zvy9/lyxgqPIqQnUeQfcku
dq8rDhv0zrXUOhoETXApy21nqvKTOa3y/AGB1U1JuSgLk+aO+yHBjSLkqbPBGN2e
P8qFpk+z1bINJNU3FgsV5oaBp4h2UVplLMrTLHwIUkB+hM173E3/TjP7dUBaZg3X
FGO1HjsR1jmztWnGtLsCrEhM+w5MnZ03YWOK2izj2LkmqNIVwQmeglyUN9z4dE3G
cz/ys53gbTeIZXGVsleWQ3HtK6cp3no0DaLAgIJHBD593AFtzURhg07DohwjIzjO
8uHH/wTA0Wx7vuHKpwLK4uskgw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 15:18:58 2026 by rpki-client