
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json)
Hash identifier: J1Tp5/8LXXv9iTiRyEgh8juUlbzNJleywSrGugIUJic=
Subject key identifier: 64:3C:C0:54:44:F1:05:93:60:70:19:3C:28:83:96:AF:49:76:CC:E3
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial: 05B0
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
Manifest number: 05A5
Signing time: Sat 24 Oct 2026 15:48:03 +0000
Manifest this update: Sat 24 Oct 2026 15:48:03 +0000
Manifest next update: Sat 31 Oct 2026 15:48:03 +0000
Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: LsR8TJUvGMPFwqlb3mobYFfeXHaOKMjRC5a34jrp4uw=)
2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: M7OYmQFL8/41ldtug+5JoOUb7vy7UyfuPrmsX/809jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 15:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1456 (0x5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Validity
Not Before: Oct 24 15:48:03 2026 GMT
Not After : Oct 31 15:48:03 2026 GMT
Subject: CN=6adcd333-cce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:3b:20:5d:fb:1c:75:6f:c0:2f:08:c4:e3:
49:50:7d:58:19:8e:4b:24:66:ea:57:c2:ab:fe:01:
2f:56:7c:93:a9:55:26:b1:bf:32:b7:d2:ca:3a:2e:
8c:9c:65:3f:ab:57:6e:d9:b4:aa:2a:5b:22:f6:67:
07:fb:79:94:9f:0b:bb:a0:4e:c4:04:d1:3b:2d:0e:
ee:cb:4b:e2:20:cd:19:56:b7:55:a8:e3:2e:25:9e:
06:fd:41:57:ee:92:a3:00:ff:5e:bd:17:b9:0c:31:
03:6d:e2:22:31:9e:b5:2e:7f:e9:3d:25:63:57:9b:
9a:cc:c0:4f:1b:fc:da:b7:f3:09:db:27:ce:20:d6:
39:06:3a:40:de:92:52:17:1b:03:da:3a:1d:54:9d:
9b:55:07:bc:f2:b4:a1:23:44:d0:57:43:e5:9d:d7:
e8:6d:d8:27:3c:35:6f:ad:b4:c6:4c:3f:90:1c:8a:
3d:db:0d:4d:c1:79:11:bb:01:e5:59:5e:69:b1:3f:
fc:d4:dd:b4:77:5d:3d:a1:6a:fc:4f:65:92:68:38:
34:35:2f:f0:03:a2:24:38:55:53:66:a5:0c:67:6b:
ae:a2:b1:fa:75:55:da:ef:d0:ee:6a:85:63:ef:fc:
01:25:13:4b:6b:47:aa:69:7d:a0:03:66:f1:d0:af:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3C:C0:54:44:F1:05:93:60:70:19:3C:28:83:96:AF:49:76:CC:E3
X509v3 Authority Key Identifier:
keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:46:52:53:28:92:9a:cb:51:9f:cc:75:da:a0:57:e3:d1:8e:
1f:d2:cd:a6:e3:06:cb:3d:e9:f4:c6:c8:5a:70:65:a1:69:d1:
e0:bb:02:56:fe:d4:df:bf:c4:60:13:db:11:ef:41:ee:94:74:
c8:85:6c:41:76:c7:0e:5e:ab:49:11:c0:cb:60:6a:df:14:e3:
8d:21:30:56:6a:22:56:f1:7a:07:d9:d9:26:a0:86:a9:f0:b7:
14:fe:cb:09:0c:be:9a:08:35:8c:3d:f6:11:0b:95:24:9b:f1:
c6:36:c2:15:fe:c8:c1:a5:17:67:ff:ce:1b:bf:d9:12:f3:b4:
56:4e:8d:83:46:2c:e3:93:ba:56:4a:f2:08:64:50:8a:e7:11:
77:5a:c3:05:44:f4:69:1a:2b:e1:61:54:3e:5a:5c:2a:c7:d2:
0f:77:73:dc:c9:4a:23:78:b9:c6:10:66:57:2c:5a:7e:7d:6e:
de:d9:29:7e:3b:34:7d:a6:6f:1c:04:7b:bf:6a:8d:b0:1a:5d:
d7:a1:1d:f6:3b:2a:2c:0b:a9:a6:ff:49:1d:16:ce:07:aa:c3:
31:1d:72:0c:a9:c3:70:8d:1f:ad:49:ef:fc:ab:92:58:56:e1:
53:c8:b7:45:cb:43:fe:b1:59:67:3f:ae:77:4b:f8:78:be:ca:
a0:40:94:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx
MzY3MDczQjMwHhcNMjYxMDI0MTU0ODAzWhcNMjYxMDMxMTU0ODAzWjAYMRYwFAYD
VQQDEw02YWRjZDMzMy1jY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtzM7IF37HHVvwC8IxONJUH1YGY5LJGbqV8Kr/gEvVnyTqVUmsb8yt9LKOi6M
nGU/q1du2bSqKlsi9mcH+3mUnwu7oE7EBNE7LQ7uy0viIM0ZVrdVqOMuJZ4G/UFX
7pKjAP9evRe5DDEDbeIiMZ61Ln/pPSVjV5uazMBPG/zat/MJ2yfOINY5BjpA3pJS
FxsD2jodVJ2bVQe88rShI0TQV0PlndfobdgnPDVvrbTGTD+QHIo92w1NwXkRuwHl
WV5psT/81N20d109oWr8T2WSaDg0NS/wA6IkOFVTZqUMZ2uuorH6dVXa79DuaoVj
7/wBJRNLa0eqaX2gA2bx0K96oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQ8wFRE
8QWTYHAZPCiDlq9JdszjMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE
MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu
ZDltTmhmTDFJZDBUWndjN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI0ZSUyiSmstRn8x12qBX49GOH9LNpuMGyz3p9MbIWnBloWnR4LsCVv7U37/E
YBPbEe9B7pR0yIVsQXbHDl6rSRHAy2Bq3xTjjSEwVmoiVvF6B9nZJqCGqfC3FP7L
CQy+mgg1jD32EQuVJJvxxjbCFf7IwaUXZ//OG7/ZEvO0Vk6Ng0Ys45O6VkryCGRQ
iucRd1rDBUT0aRor4WFUPlpcKsfSD3dz3MlKI3i5xhBmVyxafn1u3tkpfjs0faZv
HAR7v2qNsBpd16Ed9jsqLAuppv9JHRbOB6rDMR1yDKnDcI0frUnv/KuSWFbhU8i3
RctD/rFZZz+ud0v4eL7KoECU1Q==
-----END CERTIFICATE-----
Generated at Sun Oct 25 04:44:13 2026 by rpki-client