
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json)
Hash identifier: aovga0bWGqzRQ++o46P+vmxYbb4lyPhZZBpfXlcLVwM=
Subject key identifier: EE:7D:C4:71:BA:27:CE:54:76:A2:A8:75:56:AE:B9:05:1E:AA:E2:5A
Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
Manifest number: 016C
Signing time: Sun 11 Oct 2026 05:29:40 +0000
Manifest this update: Sun 11 Oct 2026 05:29:39 +0000
Manifest next update: Sun 18 Oct 2026 05:29:39 +0000
Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: 9s85UxogtDCpmfQqbwlwbZiWSZppAOQ25blQgVWreiU=)
2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: qMPRgrgLny92y+u26wGr54Urgeg7Km6YGkgoUSViYNQ=)
3: A307890685C511F1A02C345065A30FBC.roa (hash: iX1TSjip7UcDcI/gVPlIQ6zzLn0TAe/kPZKYdvmNb6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 05:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Validity
Not Before: Oct 11 05:29:39 2026 GMT
Not After : Oct 18 05:29:39 2026 GMT
Subject: CN=6acb1ec4-3bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:c9:f5:14:db:ed:0f:a3:eb:8f:a0:a9:e4:
3b:99:b2:0c:78:68:27:67:4e:67:1e:0a:b7:14:0e:
35:7a:9b:0c:fb:51:f9:a6:bc:54:46:2d:0d:1e:5e:
ed:ab:b5:4d:9a:96:1d:b6:f7:36:90:3d:8f:11:22:
a9:8e:43:7e:da:2c:23:b7:05:13:de:8a:b6:58:40:
44:a7:9f:1a:a3:ef:64:e7:c7:c0:96:62:c8:62:ca:
e5:45:46:82:ce:bc:61:16:d7:cf:b9:6a:da:40:67:
d8:ef:d3:e0:1b:0a:7e:db:27:48:aa:4f:90:98:81:
ae:df:97:ae:bf:84:99:a7:e0:8b:ef:3b:fa:d2:76:
46:3c:1a:0f:61:d7:72:05:08:b0:93:45:9a:d7:a4:
16:62:3b:56:9d:09:4d:a8:6b:1c:98:77:c2:8d:b0:
88:b4:94:22:14:c6:2d:89:3c:53:97:43:54:2b:36:
46:ea:52:15:58:57:f9:db:d6:f5:31:82:50:8a:27:
a6:12:df:e5:05:71:6d:5c:63:12:23:34:7a:56:d6:
66:87:62:78:c7:d3:e9:90:30:ce:78:7e:25:1e:e4:
74:1b:5a:33:6a:41:7f:ab:b4:ea:79:18:0d:72:0a:
07:14:1d:65:94:cf:4d:1b:a2:73:12:27:9d:88:10:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:C4:71:BA:27:CE:54:76:A2:A8:75:56:AE:B9:05:1E:AA:E2:5A
X509v3 Authority Key Identifier:
keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a8:58:c3:63:42:45:96:16:64:07:56:cf:e5:91:30:67:a7:
46:96:37:09:fa:b4:2d:26:78:cb:86:5c:d2:f7:a8:63:7f:9b:
54:33:1b:c2:ea:04:d1:96:ac:ac:07:d5:25:9e:61:a9:3f:53:
60:15:53:d2:68:c0:ff:0c:d8:90:37:de:4f:e4:1a:23:b1:3a:
fa:4a:05:2d:59:e5:f2:26:79:37:23:d8:9e:6a:24:68:36:82:
3e:c6:65:61:34:24:3d:4d:e3:8b:e2:c9:1d:24:2b:63:c3:6a:
b4:68:44:6c:ef:2c:09:7e:ff:d0:c6:b0:d0:da:ea:04:2e:64:
49:e9:e2:30:88:6f:19:5a:42:e5:94:b6:99:74:ac:3c:74:00:
cd:85:9f:3e:8c:97:ac:dd:11:61:21:12:05:e9:d1:cb:60:39:
b8:f4:c7:0d:7d:75:5b:c8:ae:dc:57:1d:76:a5:7a:a5:ff:00:
cf:a6:6b:5e:3d:6c:65:bc:75:03:fd:49:38:1a:d6:f5:a7:21:
88:8a:2d:cd:d8:c7:2b:6e:80:0a:74:fa:ff:9a:d7:ed:36:30:
e4:da:cd:7f:24:9e:7a:37:47:4c:71:10:e0:ff:a9:3c:6b:70:
7a:85:cf:88:cb:6b:18:d2:5d:1a:72:7a:a7:f0:98:5c:1f:62:
9e:84:de:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFDNkExMTAvBgNVBAUTKDQ0OUQwN0RBOTIwREEwMjYzNDJCRjZFMjY4OUNDN0Uw
RjBBM0NBRkMwHhcNMjYxMDExMDUyOTM5WhcNMjYxMDE4MDUyOTM5WjAYMRYwFAYD
VQQDEw02YWNiMWVjNC0zYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpPJ9RTb7Q+j64+gqeQ7mbIMeGgnZ05nHgq3FA41epsM+1H5prxURi0NHl7t
q7VNmpYdtvc2kD2PESKpjkN+2iwjtwUT3oq2WEBEp58ao+9k58fAlmLIYsrlRUaC
zrxhFtfPuWraQGfY79PgGwp+2ydIqk+QmIGu35euv4SZp+CL7zv60nZGPBoPYddy
BQiwk0Wa16QWYjtWnQlNqGscmHfCjbCItJQiFMYtiTxTl0NUKzZG6lIVWFf529b1
MYJQiiemEt/lBXFtXGMSIzR6VtZmh2J4x9PpkDDOeH4lHuR0G1ozakF/q7TqeRgN
cgoHFB1llM9NG6JzEiediBDbUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO59xHG6
J85UdqKodVauuQUequJaMB8GA1UdIwQYMBaAFESdB9qSDaAmNCv24micx+Dwo8r8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUM2QS85MDY2MkVCNjlD
MEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9DWTBLX2JpYUp6SDRQQ2p5
dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUM2QS85MDY2MkVCNjlDMEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9D
WTBLX2JpYUp6SDRQQ2p5dncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiqhYw2NCRZYWZAdWz+WRMGenRpY3Cfq0LSZ4y4Zc0veoY3+bVDMbwuoE0Zas
rAfVJZ5hqT9TYBVT0mjA/wzYkDfeT+QaI7E6+koFLVnl8iZ5NyPYnmokaDaCPsZl
YTQkPU3ji+LJHSQrY8NqtGhEbO8sCX7/0Maw0NrqBC5kSeniMIhvGVpC5ZS2mXSs
PHQAzYWfPoyXrN0RYSESBenRy2A5uPTHDX11W8iu3FcddqV6pf8Az6ZrXj1sZbx1
A/1JOBrW9achiIotzdjHK26ACnT6/5rX7TYw5NrNfySeejdHTHEQ4P+pPGtweoXP
iMtrGNJdGnJ6p/CYXB9inoTeEA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:19:24 2026 by rpki-client