
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier: vSUqdRRCZaa48cVIYYFHoQhLNn9KmECPh/VkQr9BFeA=
Subject key identifier: 97:5A:57:AE:5D:DE:FA:D5:31:D8:22:4D:B1:1D:E7:28:EE:A7:A1:83
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 046D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number: 041B
Signing time: Mon 21 Sep 2026 00:16:53 +0000
Manifest this update: Mon 21 Sep 2026 00:16:53 +0000
Manifest next update: Mon 28 Sep 2026 00:16:53 +0000
Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: EAn5AUCYSxDxVj7Ktxk8IoUsSG+wpDCfMfu9+FK7Bas=)
2: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: KWwLcsIz3UJKjvUCs3DEDEtcqp2xPeUKe9HlYY14quE=)
3: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: KjilyBL3RkYX6RyTPh0LVomatbLGRkslOoDZ+BR2akg=)
4: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: eZJA66PJdMy/+qYF1nUq/tXydh+IHu4vCtbvKU5tlLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Validity
Not Before: Sep 21 00:16:53 2026 GMT
Not After : Sep 28 00:16:53 2026 GMT
Subject: CN=6ab07775-bd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:8f:df:b8:51:8b:4e:61:3b:ad:46:24:6e:
d0:81:a1:26:60:b1:7d:74:db:40:22:9b:a2:fa:b9:
aa:e6:cf:58:1b:f9:fd:29:a9:8b:74:c5:44:1b:16:
cd:c5:55:a9:39:4e:8e:a4:eb:f1:52:fe:59:f8:c9:
8d:c3:0d:a5:e3:f5:78:19:85:92:da:dd:19:b0:c7:
03:ee:59:16:96:08:fe:10:52:22:c4:c7:52:fd:97:
0f:fc:1e:18:eb:25:9c:1d:4a:5b:b0:ff:71:54:7e:
23:cb:1e:25:65:e2:bf:7a:31:35:05:57:2a:8b:ea:
ab:e4:29:a9:9a:f2:42:be:09:8a:ee:55:59:7f:47:
c0:e2:81:85:21:52:fb:99:9f:27:73:3b:34:66:93:
5f:32:71:2a:4c:f6:4f:cf:97:c7:fc:43:cd:08:f0:
04:77:10:0e:d3:df:e8:0e:ef:20:38:6f:b9:0d:f9:
95:79:96:bd:3d:65:67:19:70:0f:db:27:82:4f:41:
72:45:9d:d6:4c:a4:1f:3a:9c:5e:8e:e2:9d:19:09:
51:46:46:cd:79:5b:78:98:9f:c2:7b:55:06:d5:3a:
e6:f8:20:f8:81:94:1d:5c:af:65:e5:d9:1d:9b:fa:
db:12:22:ec:c1:c0:62:21:f8:bd:ec:79:27:a4:6a:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5A:57:AE:5D:DE:FA:D5:31:D8:22:4D:B1:1D:E7:28:EE:A7:A1:83
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:85:01:96:ba:9e:06:b7:9c:4c:5f:83:51:6c:42:05:39:89:
43:12:26:4c:00:aa:ee:f8:44:42:b7:40:ee:39:b0:fd:15:06:
a3:09:c9:3b:9c:88:be:63:a5:0a:f3:5f:a6:eb:76:9d:e0:a1:
be:fb:d5:6a:62:db:54:85:3f:d6:4c:99:c8:ec:35:e8:2e:14:
36:15:7c:50:22:00:4b:e7:3c:7c:9a:8c:86:30:9f:1a:68:d1:
b6:90:2c:93:9b:16:f9:4b:3e:93:36:80:45:b1:7d:b5:c3:c5:
d9:55:e0:30:0d:0f:c7:60:25:5b:48:98:7d:d8:f1:27:8f:f3:
18:25:65:3b:17:d7:d0:5d:5f:09:ff:8b:89:82:90:d5:70:45:
b9:44:fd:88:a4:7c:a4:46:14:58:d3:c0:2b:da:7f:1a:c8:b2:
6f:86:26:45:39:f6:2b:c6:03:f9:cc:e4:8f:9e:a8:66:5c:83:
3a:3c:68:f2:2b:e1:03:48:1a:2f:ea:0e:e9:d9:08:88:df:32:
ec:e3:e4:4c:cc:55:e8:e7:86:03:c5:9b:9b:29:32:83:a9:17:
91:39:6e:2f:a0:98:c3:6f:d5:cb:9d:7e:18:95:d6:9e:5f:e5:
13:c2:63:67:b6:66:0a:45:d4:0b:aa:18:9e:52:d4:3d:77:45:
ab:19:47:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx
MjcwMzg2MDgwHhcNMjYwOTIxMDAxNjUzWhcNMjYwOTI4MDAxNjUzWjAYMRYwFAYD
VQQDEw02YWIwNzc3NS1iZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3cyP37hRi05hO61GJG7QgaEmYLF9dNtAIpui+rmq5s9YG/n9KamLdMVEGxbN
xVWpOU6OpOvxUv5Z+MmNww2l4/V4GYWS2t0ZsMcD7lkWlgj+EFIixMdS/ZcP/B4Y
6yWcHUpbsP9xVH4jyx4lZeK/ejE1BVcqi+qr5CmpmvJCvgmK7lVZf0fA4oGFIVL7
mZ8nczs0ZpNfMnEqTPZPz5fH/EPNCPAEdxAO09/oDu8gOG+5DfmVeZa9PWVnGXAP
2yeCT0FyRZ3WTKQfOpxejuKdGQlRRkbNeVt4mJ/Ce1UG1Trm+CD4gZQdXK9l5dkd
m/rbEiLswcBiIfi97HknpGroKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdaV65d
3vrVMdgiTbEd5yjup6GDMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC
RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl
aXYyaWpDenFZVkFTY0RoZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbYUBlrqeBrecTF+DUWxCBTmJQxImTACq7vhEQrdA7jmw/RUGownJO5yIvmOl
CvNfput2neChvvvVamLbVIU/1kyZyOw16C4UNhV8UCIAS+c8fJqMhjCfGmjRtpAs
k5sW+Us+kzaARbF9tcPF2VXgMA0Px2AlW0iYfdjxJ4/zGCVlOxfX0F1fCf+LiYKQ
1XBFuUT9iKR8pEYUWNPAK9p/Gsiyb4YmRTn2K8YD+czkj56oZlyDOjxo8ivhA0ga
L+oO6dkIiN8y7OPkTMxV6OeGA8Wbmykyg6kXkTluL6CYw2/Vy51+GJXWnl/lE8Jj
Z7ZmCkXUC6oYnlLUPXdFqxlHFQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:41 2026 by rpki-client