
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json)
Hash identifier: 2NS/Ho9SbcMpyozW/injLlFxVhQ9fYSb+/4QmLaYw6M=
Subject key identifier: 28:6F:22:5F:4A:99:BD:C2:CC:B8:69:2D:49:4A:33:B4:55:80:D8:1D
Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77
Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
Manifest number: 0185
Signing time: Sat 19 Sep 2026 04:45:23 +0000
Manifest this update: Sat 19 Sep 2026 04:45:23 +0000
Manifest next update: Sat 26 Sep 2026 04:45:23 +0000
Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: mecytvTSzOxMOuGk2IE0ZLcd7H7w10MjzEfzL7IOaok=)
2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: d+XlkZfujpDkvCo9FmKooB3nuK4tFlgynQ1hbouvf0E=)
3: gIAB1jjaEgjeslv5VMUlSsMGkDE.asa (hash: ZAOfZijOT4efohcG2CtyuIwUiE+Ceod+FhEytO0j+2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl
rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177
Validity
Not Before: Sep 19 04:45:23 2026 GMT
Not After : Sep 26 04:45:23 2026 GMT
Subject: CN=6aae1363-3ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:f6:69:3d:6c:12:8e:b8:02:73:4e:db:8c:
f0:e8:d3:fb:a8:4e:4d:3e:1a:34:6c:01:f1:54:1e:
88:31:a4:ce:e6:65:52:b3:4f:90:2a:00:ed:ca:fe:
62:d1:45:88:72:f3:14:f1:3d:21:a4:24:24:5d:14:
a6:18:38:a3:a8:a9:af:ee:f0:b8:a7:24:de:11:ae:
8f:4c:c6:04:a5:bf:93:62:66:1d:85:52:ef:ad:8e:
4e:fe:81:ae:f4:aa:e5:71:75:47:02:34:6d:7d:a0:
cc:65:7b:ae:f4:bd:f4:8a:78:1e:a6:d8:90:6c:88:
d1:72:a3:04:1e:0e:2a:cb:f9:3d:af:0a:f5:25:37:
6f:19:dd:e2:fc:4a:be:c1:55:4e:a1:7c:ee:06:d1:
60:8c:3b:59:12:fa:fe:95:8a:a0:72:23:d3:ac:62:
ad:89:05:89:d5:bb:ba:f0:7b:24:76:81:b9:7a:63:
f9:54:6a:3a:d4:98:8b:40:c6:aa:24:db:b3:db:f4:
1e:a7:2e:da:32:a1:6f:5e:e7:f0:64:60:6d:4e:ca:
44:45:f8:09:37:bc:89:ef:48:7c:99:fd:e8:e2:38:
fe:5d:97:73:b5:30:3a:aa:f2:e7:4b:37:e6:ef:8b:
ef:dc:9c:b9:b1:6c:4f:aa:ab:5f:a6:9a:38:6e:66:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6F:22:5F:4A:99:BD:C2:CC:B8:69:2D:49:4A:33:B4:55:80:D8:1D
X509v3 Authority Key Identifier:
keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6b:c1:8d:96:c1:cb:d0:79:7e:b8:ca:5e:a9:ec:da:d2:c5:
03:fa:53:68:d8:f9:3a:ea:3c:67:56:00:8a:a9:a4:8b:45:05:
0d:6e:5a:c7:d2:c2:95:65:8b:95:45:4e:ac:33:98:5b:0e:37:
60:de:a0:1b:b1:76:81:90:c4:07:7f:a8:fd:55:f4:23:13:68:
cb:3e:50:27:ff:5b:38:2e:1a:94:1d:e7:eb:fc:18:a5:93:d2:
db:9f:93:9a:79:a1:f2:83:10:d8:55:8d:db:14:08:c0:55:74:
bf:41:27:0e:e4:54:cb:02:58:65:b3:4d:ed:b2:0f:49:aa:b8:
1d:7b:00:2a:a2:d1:c4:1f:9f:65:68:86:cb:ec:b4:d9:30:e0:
86:90:55:c5:14:7c:c1:36:48:57:48:fe:12:55:27:58:56:29:
b0:2a:a2:5e:64:51:48:83:7b:6f:a8:3e:02:35:f4:52:e9:0e:
6b:bb:eb:e3:f1:c8:4f:b6:f6:6c:24:d6:71:cd:42:55:01:25:
ea:a4:72:65:b1:be:84:b8:3a:40:7d:75:8c:33:02:ba:48:c0:
98:07:0b:18:ed:e7:68:52:93:a9:be:b1:94:3e:e3:d7:11:a5:
6d:ed:7a:fa:c7:4a:7c:48:31:1d:15:14:b1:c7:ad:10:df:64:
13:84:a0:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx
NjMwOUMxNzcwHhcNMjYwOTE5MDQ0NTIzWhcNMjYwOTI2MDQ0NTIzWjAYMRYwFAYD
VQQDEw02YWFlMTM2My0zZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwv32aT1sEo64AnNO24zw6NP7qE5NPho0bAHxVB6IMaTO5mVSs0+QKgDtyv5i
0UWIcvMU8T0hpCQkXRSmGDijqKmv7vC4pyTeEa6PTMYEpb+TYmYdhVLvrY5O/oGu
9KrlcXVHAjRtfaDMZXuu9L30ingeptiQbIjRcqMEHg4qy/k9rwr1JTdvGd3i/Eq+
wVVOoXzuBtFgjDtZEvr+lYqgciPTrGKtiQWJ1bu68HskdoG5emP5VGo61JiLQMaq
JNuz2/Qepy7aMqFvXufwZGBtTspERfgJN7yJ70h8mf3o4jj+XZdztTA6qvLnSzfm
74vv3Jy5sWxPqqtfppo4bma5ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChvIl9K
mb3CzLhpLUlKM7RVgNgdMB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG
NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODlEOS9GNTYwMzdBNjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhB
TUNVdzNSTVhSQ01XTUp3WGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxmvBjZbBy9B5frjKXqns2tLFA/pTaNj5Ouo8Z1YAiqmki0UFDW5ax9LClWWL
lUVOrDOYWw43YN6gG7F2gZDEB3+o/VX0IxNoyz5QJ/9bOC4alB3n6/wYpZPS25+T
mnmh8oMQ2FWN2xQIwFV0v0EnDuRUywJYZbNN7bIPSaq4HXsAKqLRxB+fZWiGy+y0
2TDghpBVxRR8wTZIV0j+ElUnWFYpsCqiXmRRSIN7b6g+AjX0UukOa7vr4/HIT7b2
bCTWcc1CVQEl6qRyZbG+hLg6QH11jDMCukjAmAcLGO3naFKTqb6xlD7j1xGlbe16
+sdKfEgxHRUUscetEN9kE4Sg0A==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:32:35 2026 by rpki-client