
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
File: raiu0ysVuH5hElLSnR4dW95YFkY.mft (raw, json)
Hash identifier: 5Wep0uGrSTV/FhX3rsfM/bpabVZVG/yDWwiqEAONJu0=
Subject key identifier: DB:BC:B1:ED:F7:90:4E:10:4F:C3:EA:EB:A7:8B:CC:E2:FE:32:BA:5C
Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Certificate serial: 368B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
Manifest number: 35F4
Signing time: Sun 20 Sep 2026 14:16:21 +0000
Manifest this update: Sun 20 Sep 2026 14:16:21 +0000
Manifest next update: Sun 27 Sep 2026 14:16:21 +0000
Files and hashes: 1: raiu0ysVuH5hElLSnR4dW95YFkY.crl (hash: gX4Kojp9wUOA4FutUDbEmXY+uMJ8hD4UDUz8XsLNHYk=)
2: 330CB090A69A11F1B62FFE123411F970.roa (hash: MdN5x9COPAkOWErVD4b+gG1Gk95Xd26pJgYkE2yZ/Uo=)
3: VVhuMwTL81PFRVMa9-1fXA7HwHM.asa (hash: mBpazvK1JO7XQxRtLpgMvlrnxREAE0vs3vWkxv3+B6E=)
4: 7C836BA46C8E11EEA38B9554C4F9AE02.roa (hash: 13OCzHbeP84SVts3fLFM8ezvX9wYG+xk9oztS8IQ/oo=)
5: FC72B9529F0311EAB6B8EA87C4F9AE02.roa (hash: US7l9IRW6KnysaR3hgfIHQKP61jxpaRsUq+BQajlvlE=)
6: E2446DD228AA11E79582F36BC4F9AE02.roa (hash: oS/2Yr0f0AX3IY6Qw0kprzC/haS0V2Vl/e9gsEC9t0o=)
7: DB3F9CA4817B11F0BDC51985C4F9AE02.roa (hash: Zl7CL1hILK98z1K1OQnmQBFBX3AF5k+q1EWP8nnTBiE=)
8: woCjYFsvUmdhypHZ5nFLfWxYzak.asa (hash: maY7sNrNwk9jrLA6Yj9C3sO+z56TyqAAlLtSFQjzBnc=)
9: C9B8A270483411ECA6C7C085C4F9AE02.roa (hash: 0TLVORl6wSPXD4zN0o2eNo/c7mH0Sa6LVUUSVrU3gGs=)
10: zJRz-1c5houizgFGumguKRn1Clg.asa (hash: 0pjUIAe0fXtb3i3avT3dUDDXCRYt+tr2uS+SBzKFiVE=)
11: CAFK4K4j3zsZH6YjzyiPQXtzH-0.asa (hash: OFgzbOFR7cWIcyO0nD8LJZP/oxj+UNNBCwjlq9DcI3Y=)
12: aN2iDVOHmPp2ny-zekFfqNg-XH0.asa (hash: KKcDTJ5obXcUbT0l1jSZ7QFTW7ljWQN+P+SZY0FCmp4=)
13: uC-toPD9VWu8EjtdZpJZizsqe5g.asa (hash: 2XTg91PvdmzFZO5xkwVBLaVB3XyJdwjrFAY8bIAUWGo=)
14: 662A2F2286B411E6BAEB2614C4F9AE02.roa (hash: y6ZiKIpbO8nVe1RhgWjLdE8kQETpbK+AjZQf/Ewa3Fk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13963 (0x368b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646
Validity
Not Before: Sep 20 14:16:21 2026 GMT
Not After : Sep 27 14:16:21 2026 GMT
Subject: CN=6aafeab5-1858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:95:4d:ef:64:41:47:94:58:6f:35:2a:bd:
e3:cb:05:8d:cf:a0:9a:e8:71:b9:d7:ee:31:5f:e7:
d3:37:60:e6:8b:e3:a9:3d:27:3f:5d:66:f0:ac:3a:
ff:f7:d3:47:66:d7:e8:fd:d5:d7:25:d3:1b:5b:85:
1d:c2:13:c9:72:a4:e8:79:7b:04:fa:a6:7a:74:19:
a4:5a:0e:13:9c:7f:88:18:f3:f2:ed:53:fe:6d:23:
c9:73:6e:be:24:b4:ef:2f:ff:d5:1a:14:87:48:93:
1b:d5:af:d0:bf:3f:63:26:c8:3e:e1:0e:82:93:ff:
c7:a7:a5:6f:a4:81:5b:13:1c:f1:b8:5b:ce:1f:11:
97:65:d9:5a:37:ae:ea:af:44:10:69:fb:8c:4a:6c:
14:37:f5:5c:f2:dd:e6:b9:8e:f6:03:f9:6b:78:55:
6e:8a:30:a4:4d:85:70:db:eb:33:c4:29:38:50:8e:
ad:71:74:5e:50:7d:8f:b1:c4:e7:ae:a5:cf:1f:7c:
f4:a6:28:64:af:65:e1:22:98:68:b2:16:15:0b:b4:
ae:ce:34:77:3a:02:56:ee:8e:bb:a7:e0:2e:9a:bb:
b1:6d:7c:d3:5a:5c:01:49:8f:6f:50:00:2d:64:61:
03:af:cd:2e:9e:f5:9a:61:3e:4c:39:95:0b:be:71:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:B1:ED:F7:90:4E:10:4F:C3:EA:EB:A7:8B:CC:E2:FE:32:BA:5C
X509v3 Authority Key Identifier:
keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ec:92:68:a4:46:46:05:a4:00:fd:05:cd:ad:3c:65:8c:8f:
43:3d:65:61:58:16:7f:0f:e3:5c:21:5a:9f:b2:80:17:e5:cd:
bf:b7:e0:bf:4c:a6:01:2b:49:95:a3:8a:5a:5b:85:30:c4:85:
34:ce:98:76:4c:63:bf:3c:ff:a6:7e:4c:1b:9c:95:3b:e1:a5:
96:5c:d6:cd:f3:41:10:20:e1:20:a3:b6:0a:d7:3b:74:b5:56:
3f:ea:51:27:0f:fc:38:c0:18:e6:30:5e:19:ea:08:1b:49:e1:
a4:61:6b:8a:c4:9e:01:fb:c9:5a:b4:01:2b:ce:6d:bd:1d:f4:
cd:48:8b:35:7f:92:8b:02:a1:d9:a2:23:c4:95:2c:76:a6:c7:
94:43:99:ff:6a:84:de:28:a4:fd:52:54:28:60:fc:88:75:f7:
31:21:65:31:87:b3:89:53:ea:0d:99:89:e7:25:cd:a9:4a:6e:
dd:3a:38:5b:b7:a5:8a:e9:93:f3:71:c3:eb:1a:c2:b7:92:bb:
11:06:4e:66:f5:bb:6d:f7:e6:bb:2b:f9:36:6d:a2:05:d0:7b:
8d:09:f0:07:4e:b4:f6:07:64:bd:e5:4e:9b:83:72:5f:c2:4b:
55:80:cb:5b:a3:c8:f4:90:f5:ec:f8:60:f3:5d:e8:cd:93:b1:
43:3b:02:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:58:07 2026 by rpki-client