
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json)
Hash identifier: ZKbOmkngf/RbgC7Q4x/L09RW8R7w7S421yvUc9xJXq4=
Subject key identifier: 3B:F8:1A:C0:E8:FE:E4:E4:D7:9D:FF:A9:93:D6:08:DF:54:5D:7D:19
Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Certificate serial: 12D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
Manifest number: 12C9
Signing time: Mon 26 Oct 2026 17:03:06 +0000
Manifest this update: Mon 26 Oct 2026 17:03:06 +0000
Manifest next update: Mon 02 Nov 2026 17:03:06 +0000
Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: DKL2jXxAatjHr7EPrbaL3lA8XgwMHmUxVGmzdGy5EqA=)
2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: FX/SXWeGmSorowMzitSzBZ8lzXgrcgho0mITKsxeeLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 17:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4825 (0x12d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Validity
Not Before: Oct 26 17:03:06 2026 GMT
Not After : Nov 2 17:03:06 2026 GMT
Subject: CN=6adf87ca-4b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:64:e1:6c:32:56:f6:1e:98:6f:a1:3d:78:
ab:76:39:d5:d4:67:7e:4d:5f:ef:89:a5:ae:27:6b:
d8:f0:08:b3:56:b1:0b:d0:af:62:ad:1b:f5:f9:07:
37:6a:a2:54:56:4a:6e:37:7b:92:71:90:05:58:63:
ff:1a:fc:f6:2a:75:2f:01:01:25:47:67:a7:18:98:
e7:f3:d6:e5:8b:64:6a:77:13:62:4c:82:ee:f3:bb:
23:21:06:b0:32:ca:78:e9:8d:8a:60:f6:01:8d:8d:
5c:51:0c:7b:f9:2d:72:fa:68:ce:25:29:49:25:06:
75:c5:ce:ce:f5:b8:5b:e0:1f:54:b2:20:55:4c:1f:
4f:63:8c:7e:84:ad:51:ae:f1:42:24:0d:fd:fb:0d:
bd:49:e0:0c:94:a5:79:6a:fb:4f:b0:8f:03:e5:d9:
a8:6e:26:89:be:aa:4a:f2:ec:c7:d8:be:c8:e2:53:
d7:af:1e:a2:d3:73:33:0c:e5:74:5d:1a:98:b2:51:
5b:f8:32:f5:25:82:46:2c:d5:4d:82:fd:48:77:f6:
14:46:6d:55:be:97:62:54:33:51:90:1c:fe:de:f0:
c3:39:0a:5c:48:82:3b:25:c4:63:21:49:e9:40:bf:
d3:ac:ed:08:d0:98:90:d5:16:18:f4:1e:8f:02:d8:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F8:1A:C0:E8:FE:E4:E4:D7:9D:FF:A9:93:D6:08:DF:54:5D:7D:19
X509v3 Authority Key Identifier:
keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fc:0e:81:b5:7a:ea:d7:14:72:72:89:16:33:b4:73:b0:ce:
32:32:e7:22:45:88:8a:f5:bb:a8:a6:c5:5c:83:c7:c6:aa:da:
d3:e5:aa:26:e6:a1:33:85:d7:41:51:e4:de:f4:fa:ff:bc:9c:
81:99:a7:ab:6b:21:84:6e:f0:f3:ee:48:8e:37:0f:9f:5b:0d:
89:84:a2:c3:2e:57:62:d0:dd:b9:f4:b5:92:5a:00:aa:f6:20:
3b:ce:d5:e3:36:d9:fe:10:b0:d7:88:a9:0f:b2:36:63:46:c4:
0e:46:d9:5f:ce:70:47:a7:f0:22:4c:73:82:a9:18:bd:fb:7a:
25:c6:14:96:fd:a1:a7:41:f1:12:fe:fe:b9:e0:12:99:46:94:
ad:74:05:aa:d1:5e:f3:61:2f:50:cc:c3:b4:f9:42:ff:dc:8b:
7c:70:ae:b2:9f:65:f8:82:e4:ca:c2:83:ba:8e:79:d6:d6:e7:
59:40:e2:d9:4f:b6:01:85:72:e0:95:d3:fc:6e:6c:40:bd:c3:
0f:a5:82:bd:6a:35:96:bb:1b:76:a3:ef:85:9f:e4:e4:0b:91:
28:f0:e1:b3:84:40:84:b4:b4:f2:64:26:3b:60:a5:1f:eb:ba:
20:36:7f:89:74:46:bb:e5:f7:85:d1:6b:08:27:f8:3a:c6:f9:
d2:a4:6c:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy
Q0NDMjFENjcwHhcNMjYxMDI2MTcwMzA2WhcNMjYxMTAyMTcwMzA2WjAYMRYwFAYD
VQQDEw02YWRmODdjYS00YjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv05k4WwyVvYemG+hPXirdjnV1Gd+TV/viaWuJ2vY8AizVrEL0K9irRv1+Qc3
aqJUVkpuN3uScZAFWGP/Gvz2KnUvAQElR2enGJjn89bli2RqdxNiTILu87sjIQaw
Msp46Y2KYPYBjY1cUQx7+S1y+mjOJSlJJQZ1xc7O9bhb4B9UsiBVTB9PY4x+hK1R
rvFCJA39+w29SeAMlKV5avtPsI8D5dmobiaJvqpK8uzH2L7I4lPXrx6i03MzDOV0
XRqYslFb+DL1JYJGLNVNgv1Id/YURm1VvpdiVDNRkBz+3vDDOQpcSII7JcRjIUnp
QL/TrO0I0JiQ1RYY9B6PAtj83wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDv4GsDo
/uTk153/qZPWCN9UXX0ZMB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz
QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX
NTdua3Yxc01nWElzekNIV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHvwOgbV66tcUcnKJFjO0c7DOMjLnIkWIivW7qKbFXIPHxqra0+WqJuahM4XX
QVHk3vT6/7ycgZmnq2shhG7w8+5IjjcPn1sNiYSiwy5XYtDdufS1kloAqvYgO87V
4zbZ/hCw14ipD7I2Y0bEDkbZX85wR6fwIkxzgqkYvft6JcYUlv2hp0HxEv7+ueAS
mUaUrXQFqtFe82EvUMzDtPlC/9yLfHCusp9l+ILkysKDuo551tbnWUDi2U+2AYVy
4JXT/G5sQL3DD6WCvWo1lrsbdqPvhZ/k5AuRKPDhs4RAhLS08mQmO2ClH+u6IDZ/
iXRGu+X3hdFrCCf4Osb50qRsvg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:52:34 2026 by rpki-client