
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json)
Hash identifier: hZhA4og4Z0INoJy3UP+JbwFkLodRs4uf/kl14ntfVtI=
Subject key identifier: 59:24:B2:04:D1:AF:2B:07:F6:8C:62:CB:72:8C:18:65:34:2C:FE:28
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
Manifest number: 014F
Signing time: Mon 21 Sep 2026 05:19:26 +0000
Manifest this update: Mon 21 Sep 2026 05:19:25 +0000
Manifest next update: Mon 28 Sep 2026 05:19:25 +0000
Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: UXSXfuw8/fwe9h79dlVr+gpnRL2PsG2kj0lpmLIh4p8=)
2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Validity
Not Before: Sep 21 05:19:25 2026 GMT
Not After : Sep 28 05:19:25 2026 GMT
Subject: CN=6ab0be5e-a92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:75:09:d9:9f:5f:da:b1:bc:71:50:37:ac:
8f:51:51:4d:ca:ac:2b:a3:e6:1a:21:a3:f6:88:a1:
92:a6:77:d7:99:a6:64:b5:fa:fe:33:d9:11:37:34:
56:d9:64:72:2d:1a:09:a6:dc:91:c2:66:92:9f:05:
8d:71:f4:5d:94:12:7e:83:66:f7:b6:c5:36:76:5e:
47:6d:aa:c8:39:72:d8:43:bc:5f:83:32:9b:82:f2:
20:3b:fb:bb:3a:79:ca:35:b8:d4:fd:82:52:56:4e:
26:e8:6b:e1:bc:8c:52:97:e3:7d:84:84:a8:50:e7:
6e:84:fc:fc:ca:4f:7f:e2:a5:ab:af:00:0c:29:41:
7f:60:b8:5d:52:5b:1c:d6:f5:28:97:ef:6a:46:9e:
90:af:2d:82:e8:ea:17:c5:75:40:93:a6:46:48:6c:
7c:5f:2d:c3:9e:7a:71:c5:d9:74:d5:d2:39:d7:cb:
13:b1:93:d9:70:db:6b:c5:43:71:fb:77:9a:73:e6:
17:62:8f:f0:7c:ec:bc:5c:68:ef:ba:ab:75:59:40:
d8:0a:f5:b9:41:7a:40:8b:fb:4f:a7:9d:5e:81:12:
61:af:82:a3:7a:d8:f4:2a:44:f5:8f:57:89:4f:b9:
a8:ae:31:f1:a6:4a:49:65:1d:16:ca:c3:6b:69:98:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:B2:04:D1:AF:2B:07:F6:8C:62:CB:72:8C:18:65:34:2C:FE:28
X509v3 Authority Key Identifier:
keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:48:00:9c:86:47:e4:8a:f6:3f:d8:27:4d:00:29:09:08:11:
c3:e8:d4:e2:cb:61:20:af:c8:44:b7:62:bc:92:70:ba:f2:f7:
12:21:79:49:fe:23:6b:fd:6b:00:45:0e:1b:d2:4e:be:a5:88:
0c:ed:91:51:bc:0d:2d:a8:05:f0:85:2c:6d:0f:4b:cd:70:10:
a8:fa:dc:16:2a:16:2d:dd:bf:44:5f:25:6f:93:af:71:ec:42:
ba:0c:b3:82:29:b3:dc:30:ed:35:06:cc:75:be:8d:35:d8:c4:
52:40:a5:b0:29:41:33:47:27:a9:cf:c2:81:c6:55:7a:8c:f9:
de:fc:f0:5e:2f:33:10:30:60:e3:1a:35:3a:33:03:96:50:cd:
bd:43:c3:e4:c5:46:aa:33:b2:26:9b:74:9e:e2:77:bb:5c:d6:
6f:9a:7a:ba:cf:64:69:36:48:b1:83:1f:ea:72:a8:36:a7:43:
46:39:48:36:9d:13:80:ee:c7:7f:12:e7:bd:10:77:3a:ef:71:
25:4b:69:73:f6:69:28:20:63:2b:8e:bf:8d:fb:bd:05:3b:50:
54:c4:b3:fc:1f:ee:54:6d:d6:7c:4a:d4:1d:1e:bc:9e:7e:76:
a6:19:6a:8e:bc:19:68:b8:73:01:11:00:ad:fe:7a:43:6d:a7:
ff:85:44:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzN0IxMTAvBgNVBAUTKEZBMjI4MDFDNTJBRTJBNUZDNDkxQjdDQkVCRTY4RUZD
QTJDOEQxRDkwHhcNMjYwOTIxMDUxOTI1WhcNMjYwOTI4MDUxOTI1WjAYMRYwFAYD
VQQDEw02YWIwYmU1ZS1hOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp8h1CdmfX9qxvHFQN6yPUVFNyqwro+YaIaP2iKGSpnfXmaZktfr+M9kRNzRW
2WRyLRoJptyRwmaSnwWNcfRdlBJ+g2b3tsU2dl5HbarIOXLYQ7xfgzKbgvIgO/u7
OnnKNbjU/YJSVk4m6GvhvIxSl+N9hISoUOduhPz8yk9/4qWrrwAMKUF/YLhdUlsc
1vUol+9qRp6Qry2C6OoXxXVAk6ZGSGx8Xy3Dnnpxxdl01dI518sTsZPZcNtrxUNx
+3eac+YXYo/wfOy8XGjvuqt1WUDYCvW5QXpAi/tPp51egRJhr4Kjetj0KkT1j1eJ
T7morjHxpkpJZR0WysNraZh6hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkksgTR
rysH9oxiy3KMGGU0LP4oMB8GA1UdIwQYMBaAFPoigBxSripfxJG3y+vmjvyiyNHZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xNThEN0YzQ0I5
OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUtsX0VrYmZMNi1hT19LTEkw
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUts
X0VrYmZMNi1hT19LTEkwZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfkgAnIZH5Ir2P9gnTQApCQgRw+jU4sthIK/IRLdivJJwuvL3EiF5Sf4ja/1r
AEUOG9JOvqWIDO2RUbwNLagF8IUsbQ9LzXAQqPrcFioWLd2/RF8lb5OvcexCugyz
gimz3DDtNQbMdb6NNdjEUkClsClBM0cnqc/CgcZVeoz53vzwXi8zEDBg4xo1OjMD
llDNvUPD5MVGqjOyJpt0nuJ3u1zWb5p6us9kaTZIsYMf6nKoNqdDRjlINp0TgO7H
fxLnvRB3Ou9xJUtpc/ZpKCBjK46/jfu9BTtQVMSz/B/uVG3WfErUHR68nn52phlq
jrwZaLhzAREArf56Q22n/4VEgQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:02:59 2026 by rpki-client