
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json)
Hash identifier: jYl/j/B734Z8vTSItlIdIaD9i1KTd16uPrk7YPXIzvc=
Subject key identifier: D9:89:89:D7:54:B4:74:A9:D7:0F:70:9C:19:28:33:2F:22:50:70:58
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial: 09A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
Manifest number: 098E
Signing time: Mon 26 Oct 2026 20:01:28 +0000
Manifest this update: Mon 26 Oct 2026 20:01:27 +0000
Manifest next update: Mon 02 Nov 2026 20:01:27 +0000
Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: Lb0PW2lcSidcjX4hP8HcN8yj9oUZakAPEKpehx18LL0=)
2: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: 3bV0TzjiZh3KuPq0SqliImca0k0LkcZjFA0YvIEuGRg=)
3: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: l+f+4/9n0vpB3extgQLx1sn5WvnqyOODvFogGPzHRvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464 (0x9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Validity
Not Before: Oct 26 20:01:27 2026 GMT
Not After : Nov 2 20:01:27 2026 GMT
Subject: CN=6adfb197-f040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:00:fe:57:b2:1c:f9:c6:6a:6a:d5:3d:ed:
c6:c8:c4:51:82:66:d2:0b:db:98:fd:4c:0b:bf:df:
9f:69:21:66:61:aa:af:fd:8c:cd:9b:6b:ca:77:bd:
7f:09:8d:2f:a1:a1:b6:87:41:61:46:c3:37:e8:45:
6d:42:9d:ab:91:c6:d5:0e:36:56:85:87:fe:e3:54:
2a:8f:19:40:b5:6d:dc:79:fa:c0:0c:cf:ae:87:63:
63:97:08:19:ec:a6:c2:16:52:61:ac:9f:2e:c0:a4:
0d:ca:eb:ee:b9:28:ea:d6:3d:87:41:cf:ee:bd:76:
62:7f:2b:3f:66:88:df:9b:44:c3:19:f1:61:9f:fe:
19:98:a4:de:67:73:6b:b1:5b:13:60:83:75:c9:7b:
85:c8:a6:a6:1c:df:c5:e0:bb:bd:f8:ae:72:1f:2f:
ef:c0:bf:94:eb:0c:7a:35:5a:31:f8:11:46:b4:ed:
40:e8:ee:df:0a:f9:4b:79:af:fa:4b:80:40:89:f4:
97:f2:90:52:f8:28:37:80:9c:65:d8:94:51:84:26:
47:00:9e:98:7a:a1:8e:c8:13:24:a4:72:80:de:49:
28:0d:76:c5:98:66:27:30:2e:72:dc:f8:7c:76:50:
90:e4:f3:44:08:06:f2:e4:da:5b:36:33:b9:64:31:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:89:89:D7:54:B4:74:A9:D7:0F:70:9C:19:28:33:2F:22:50:70:58
X509v3 Authority Key Identifier:
keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:e6:23:9d:8e:77:51:65:35:41:16:0a:35:a6:4e:33:cd:99:
b6:fb:20:ed:ea:9b:8d:27:d3:f6:e9:b3:8a:c7:d5:8b:3a:6f:
1b:31:7c:e6:3a:d9:cc:43:fa:f2:bc:06:fb:59:fd:e0:b3:ef:
3f:5b:4e:ff:8f:d5:fa:ff:30:8d:04:26:be:24:e9:44:1c:18:
98:27:c8:10:2e:7f:00:19:cf:e1:14:a8:88:b7:1d:76:dd:82:
e1:7d:63:e1:44:3b:e5:73:56:66:a8:e9:26:79:d0:18:39:cf:
d3:ac:56:38:55:a4:18:34:75:64:68:d2:e1:43:15:88:3a:6a:
67:24:2a:a8:17:1d:28:cd:00:f6:f5:30:42:ea:b5:d8:a2:6e:
a0:1e:ad:1f:78:03:69:62:54:e9:80:38:04:b3:43:db:57:c7:
f9:5b:3d:42:69:28:5c:ed:ea:1a:13:d4:69:54:08:6b:d6:d4:
9b:8d:1a:9f:de:27:7c:c0:35:5e:c9:f3:4f:ce:9b:94:e0:7a:
e4:46:ef:58:33:2b:5a:35:85:45:f3:d8:ca:0d:bd:ca:65:66:
40:bf:73:23:5f:bb:b8:7f:2e:dd:27:8f:79:3f:dc:07:b5:71:
d5:f9:d0:f4:53:dc:c5:ca:cd:00:74:fa:bf:e7:36:f4:a3:03:
7a:54:06:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4
QkExNzBCQUQwHhcNMjYxMDI2MjAwMTI3WhcNMjYxMTAyMjAwMTI3WjAYMRYwFAYD
VQQDEw02YWRmYjE5Ny1mMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAwA/leyHPnGamrVPe3GyMRRgmbSC9uY/UwLv9+faSFmYaqv/YzNm2vKd71/
CY0voaG2h0FhRsM36EVtQp2rkcbVDjZWhYf+41QqjxlAtW3cefrADM+uh2NjlwgZ
7KbCFlJhrJ8uwKQNyuvuuSjq1j2HQc/uvXZifys/Zojfm0TDGfFhn/4ZmKTeZ3Nr
sVsTYIN1yXuFyKamHN/F4Lu9+K5yHy/vwL+U6wx6NVox+BFGtO1A6O7fCvlLea/6
S4BAifSX8pBS+Cg3gJxl2JRRhCZHAJ6YeqGOyBMkpHKA3kkoDXbFmGYnMC5y3Ph8
dlCQ5PNECAby5NpbNjO5ZDEI5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmJiddU
tHSp1w9wnBkoMy8iUHBYMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw
RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD
NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw
RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAReYjnY53UWU1QRYKNaZOM82Ztvsg7eqbjSfT9umzisfVizpvGzF85jrZzEP6
8rwG+1n94LPvP1tO/4/V+v8wjQQmviTpRBwYmCfIEC5/ABnP4RSoiLcddt2C4X1j
4UQ75XNWZqjpJnnQGDnP06xWOFWkGDR1ZGjS4UMViDpqZyQqqBcdKM0A9vUwQuq1
2KJuoB6tH3gDaWJU6YA4BLND21fH+Vs9QmkoXO3qGhPUaVQIa9bUm40an94nfMA1
XsnzT86blOB65EbvWDMrWjWFRfPYyg29ymVmQL9zI1+7uH8u3SePeT/cB7Vx1fnQ
9FPcxcrNAHT6v+c29KMDelQGlQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:51:56 2026 by rpki-client