
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json)
Hash identifier: 3BcY/zG8xcOZVfU89CmyneFwtQOSOM3o4QksNYMnUdo=
Subject key identifier: D0:3A:09:51:4A:E7:A3:05:A3:9E:82:72:4C:34:DD:B2:CE:BF:FA:4E
Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Certificate serial: 07DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
Manifest number: 07D4
Signing time: Sun 20 Sep 2026 21:14:56 +0000
Manifest this update: Sun 20 Sep 2026 21:14:56 +0000
Manifest next update: Sun 27 Sep 2026 21:14:56 +0000
Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: WNtJBqgX7wqL56T2T5Od3FtnDMJtkZbnudFmJ4RRXtA=)
2: 715A7174F80411F099DDF14C6E6F56BC.roa (hash: vR+q/zKzwJ0cS0EI5NmaW8vlP008OwFN/8qpLRoeRrk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70
Validity
Not Before: Sep 20 21:14:56 2026 GMT
Not After : Sep 27 21:14:56 2026 GMT
Subject: CN=6ab04cd0-048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:25:4a:34:bd:b3:f5:58:7b:c4:85:d0:18:
cb:1f:63:3f:2f:fa:f6:20:e2:32:d7:cb:a3:55:85:
b1:7a:0e:92:a8:33:fe:c0:f0:8c:ff:7c:47:be:49:
9e:17:2c:10:1c:b4:bb:93:79:be:4e:f5:e1:a0:98:
be:ff:88:48:77:da:a4:00:ce:91:7e:09:7e:22:29:
85:7d:92:ea:c5:c1:06:b0:dc:7d:e7:88:18:c0:d3:
1c:23:49:15:c6:00:b5:3a:c9:cb:0b:f7:89:1c:cb:
44:d1:f0:c7:4c:17:a1:9d:89:79:6b:ec:84:72:32:
b5:cc:24:d1:82:30:62:54:12:16:75:39:a8:84:d6:
0d:ed:ad:6e:70:86:7b:c2:b4:26:d3:25:f0:cb:85:
87:8e:39:ce:1a:e2:fd:f2:ed:0f:5b:f1:87:0a:73:
23:af:c5:29:75:53:ba:5d:01:c6:34:a9:9e:4b:3d:
0f:69:cc:49:e9:f6:ab:b0:77:d2:92:0d:8c:74:b6:
e5:aa:71:b6:fe:e3:c5:d3:41:04:ec:29:6d:01:f0:
19:ef:fb:76:47:34:e5:54:03:58:33:65:73:4c:f4:
56:e0:33:d0:40:7a:c4:d7:6e:17:28:2c:20:7c:f7:
41:8f:13:fa:68:6c:87:ca:a7:6a:d4:fc:42:fa:41:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3A:09:51:4A:E7:A3:05:A3:9E:82:72:4C:34:DD:B2:CE:BF:FA:4E
X509v3 Authority Key Identifier:
keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:67:b1:be:f4:44:d1:ff:34:8b:01:28:3d:77:f6:ad:38:82:
9c:4f:ef:b3:9e:da:09:d9:e2:18:4f:31:47:ba:3a:cc:63:e5:
26:c4:65:ef:0c:2e:13:d6:6a:51:20:f9:02:93:e0:ab:97:60:
fc:c3:77:57:b6:fd:27:95:f2:dd:2f:ef:0f:05:3b:9d:67:36:
8d:f1:cd:d3:7e:4b:7f:21:78:7e:ec:5f:a0:aa:7d:1a:f5:32:
e8:b0:b9:9d:6a:87:0d:f0:e4:6d:5c:c6:8d:92:2c:db:c9:00:
a6:d7:61:d9:03:e6:8b:dd:db:20:4f:3e:18:a8:0d:bf:bb:ce:
67:df:e1:ae:28:b8:5d:1d:80:eb:50:f0:d1:fd:6a:9f:12:b4:
e7:b4:4b:25:4a:20:9d:8a:a3:cf:a0:66:85:67:c3:9d:56:7a:
e8:12:78:67:17:9e:31:74:69:22:48:b6:f2:e4:36:02:7c:ae:
9a:3a:c4:3e:75:f6:17:84:a0:b7:57:fd:83:13:e3:25:bf:79:
46:e2:37:72:14:0f:4e:4a:aa:d7:01:be:32:43:39:a9:2b:32:
99:dc:45:85:97:a4:de:11:f3:7b:17:6c:dd:a9:60:cd:3f:be:
ac:3a:d6:f2:bf:79:2d:69:18:69:f6:2b:f9:e2:84:81:77:b4:
aa:69:22:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE
MDBERjRENzAwHhcNMjYwOTIwMjExNDU2WhcNMjYwOTI3MjExNDU2WjAYMRYwFAYD
VQQDEw02YWIwNGNkMC0wNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi6UlSjS9s/VYe8SF0BjLH2M/L/r2IOIy18ujVYWxeg6SqDP+wPCM/3xHvkme
FywQHLS7k3m+TvXhoJi+/4hId9qkAM6Rfgl+IimFfZLqxcEGsNx954gYwNMcI0kV
xgC1OsnLC/eJHMtE0fDHTBehnYl5a+yEcjK1zCTRgjBiVBIWdTmohNYN7a1ucIZ7
wrQm0yXwy4WHjjnOGuL98u0PW/GHCnMjr8UpdVO6XQHGNKmeSz0PacxJ6farsHfS
kg2MdLblqnG2/uPF00EE7CltAfAZ7/t2RzTlVANYM2VzTPRW4DPQQHrE124XKCwg
fPdBjxP6aGyHyqdq1PxC+kGAwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNA6CVFK
56MFo56Cckw03bLOv/pOMB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy
NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS
ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO2exvvRE0f80iwEoPXf2rTiCnE/vs57aCdniGE8xR7o6zGPlJsRl7wwuE9Zq
USD5ApPgq5dg/MN3V7b9J5Xy3S/vDwU7nWc2jfHN035LfyF4fuxfoKp9GvUy6LC5
nWqHDfDkbVzGjZIs28kAptdh2QPmi93bIE8+GKgNv7vOZ9/hrii4XR2A61Dw0f1q
nxK057RLJUognYqjz6BmhWfDnVZ66BJ4ZxeeMXRpIki28uQ2AnyumjrEPnX2F4Sg
t1f9gxPjJb95RuI3chQPTkqq1wG+MkM5qSsymdxFhZek3hHzexds3algzT++rDrW
8r95LWkYafYr+eKEgXe0qmkicg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:33:20 2026 by rpki-client