
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
File: kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json)
Hash identifier: ygk2f7Mq6yyD40Qrp/y748nz6zwWt4aZtuTeWh1Fhwg=
Subject key identifier: 74:E5:27:7B:BF:38:54:81:85:AF:BC:7C:40:83:9B:B0:8B:3C:4F:02
Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
Manifest number: 91
Signing time: Sun 25 Oct 2026 08:07:28 +0000
Manifest this update: Sun 25 Oct 2026 08:07:27 +0000
Manifest next update: Sun 01 Nov 2026 08:07:27 +0000
Files and hashes: 1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: wkrZMWlbHVXYYogYi+Hmsw++r2Pb19vJSLub4a9PLww=)
2: D386B66251D411F185203A1790833773.roa (hash: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=)
3: 174298368DB111F18EE5B03B4611F970.roa (hash: ncEej6Lc0TJTyx32wKUoM2ogTcTqlHpXgc40wTgsiPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Validity
Not Before: Oct 25 08:07:27 2026 GMT
Not After : Nov 1 08:07:27 2026 GMT
Subject: CN=6addb8c0-fe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:41:99:3e:4b:33:80:b6:ed:f0:49:f7:c6:
df:dc:8f:39:95:c0:71:22:6a:c1:c0:ee:c3:6d:e7:
8b:39:fb:f6:aa:a1:8e:2a:c9:03:5a:c8:d7:72:e5:
6b:2e:9d:d2:51:18:06:0b:cc:83:68:c7:cb:b5:ff:
cb:b0:e3:7f:d6:1a:5a:02:e0:db:8c:58:8b:32:c1:
10:66:53:c3:01:49:3c:5c:26:52:02:36:6c:a0:0e:
b3:86:a7:c3:49:d3:86:37:9c:fc:a8:77:3c:bf:ba:
91:72:1f:e9:77:16:6d:b9:b2:fe:a7:d4:06:e5:a4:
ee:51:b2:73:ae:10:fd:e1:a6:0a:95:f0:b5:d7:c2:
30:e5:e2:ec:55:da:e1:be:09:64:dd:07:b4:d4:9a:
eb:f8:a5:fe:e0:f4:bd:e0:66:b2:35:30:3b:e0:56:
6c:7b:db:28:a0:61:69:0c:0b:c6:3b:fe:17:26:07:
51:e6:ba:9d:8e:c8:af:88:84:6b:03:6b:2e:44:61:
f9:8e:97:dd:68:b2:7f:91:b5:28:b9:c9:9b:78:0a:
e4:51:0b:06:64:f6:fc:be:27:8a:b4:ce:81:ca:00:
e2:97:3f:82:55:ff:71:e6:59:b4:e4:d9:b1:e2:c2:
a9:e8:b9:f4:28:e9:40:9a:91:c1:e7:a8:d5:1f:d0:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:27:7B:BF:38:54:81:85:AF:BC:7C:40:83:9B:B0:8B:3C:4F:02
X509v3 Authority Key Identifier:
keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:69:a7:91:ac:24:b7:e8:b7:cf:14:64:12:97:2e:87:15:94:
3c:0f:96:5d:50:93:03:00:17:50:89:c2:74:8e:b8:94:ea:9a:
8e:51:83:d2:e5:2e:ba:d1:bb:fa:43:36:30:2c:f7:ee:ca:64:
42:f9:c5:e1:db:91:fc:f1:9e:a8:00:88:21:1c:62:62:c9:69:
dd:b2:72:5c:14:95:9a:e1:07:1e:4c:69:d9:cd:96:f5:32:a7:
23:12:a5:32:4e:0c:d0:47:b9:cc:19:5f:72:08:e2:23:65:cb:
5f:14:d4:e6:dd:93:51:09:a3:9a:04:94:71:db:f5:c2:a9:f6:
cb:3e:68:ea:9e:fe:66:03:c9:d8:ab:d6:f8:b5:0b:e4:bb:ce:
b4:1d:41:a3:62:a8:34:69:5e:d9:38:c9:28:bb:23:ab:6f:69:
05:13:9e:86:ce:79:a2:dd:db:e8:b6:81:09:2a:3c:8f:fb:46:
d0:1d:e8:27:6c:b6:4b:26:6b:9c:19:10:49:63:d8:d6:9b:14:
76:70:1a:fe:89:c8:a2:52:f4:38:ea:bf:40:23:2d:58:23:29:
60:7c:c2:62:5d:a1:04:cf:dd:2f:f1:af:e0:c9:77:0d:8e:0e:
38:d1:80:a8:88:52:32:d7:5d:0a:9b:79:62:53:62:c8:82:17:
10:a3:00:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgxNTcxMTAvBgNVBAUTKDkxREEzQTE3NjM3Q0QyOTJDRUE0NjcwREQxM0E3MkQ4
NkVBQTJEOTEwHhcNMjYxMDI1MDgwNzI3WhcNMjYxMTAxMDgwNzI3WjAYMRYwFAYD
VQQDEw02YWRkYjhjMC1mZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5lFBmT5LM4C27fBJ98bf3I85lcBxImrBwO7DbeeLOfv2qqGOKskDWsjXcuVr
Lp3SURgGC8yDaMfLtf/LsON/1hpaAuDbjFiLMsEQZlPDAUk8XCZSAjZsoA6zhqfD
SdOGN5z8qHc8v7qRch/pdxZtubL+p9QG5aTuUbJzrhD94aYKlfC118Iw5eLsVdrh
vglk3Qe01Jrr+KX+4PS94GayNTA74FZse9sooGFpDAvGO/4XJgdR5rqdjsiviIRr
A2suRGH5jpfdaLJ/kbUoucmbeArkUQsGZPb8vieKtM6BygDilz+CVf9x5lm05Nmx
4sKp6Ln0KOlAmpHB56jVH9BZXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTlJ3u/
OFSBha+8fECDm7CLPE8CMB8GA1UdIwQYMBaAFJHaOhdjfNKSzqRnDdE6cthuqi2R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODE1Ny8yNTA4MzhBRTEx
NDIxMUYxOUQzNzYyOEYyMTNEOEM2Ny9rZG82RjJOODBwTE9wR2NOMFRweTJHNnFM
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2tkbzZGMk44MHBMT3BHY04wVHB5Mkc2cUxaRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODE1Ny8yNTA4MzhBRTExNDIxMUYxOUQzNzYyOEYyMTNEOEM2Ny9rZG82RjJOODBw
TE9wR2NOMFRweTJHNnFMWkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdWmnkawkt+i3zxRkEpcuhxWUPA+WXVCTAwAXUInCdI64lOqajlGD0uUuutG7
+kM2MCz37spkQvnF4duR/PGeqACIIRxiYslp3bJyXBSVmuEHHkxp2c2W9TKnIxKl
Mk4M0Ee5zBlfcgjiI2XLXxTU5t2TUQmjmgSUcdv1wqn2yz5o6p7+ZgPJ2KvW+LUL
5LvOtB1Bo2KoNGle2TjJKLsjq29pBROehs55ot3b6LaBCSo8j/tG0B3oJ2y2SyZr
nBkQSWPY1psUdnAa/onIolL0OOq/QCMtWCMpYHzCYl2hBM/dL/Gv4Ml3DY4OONGA
qIhSMtddCpt5YlNiyIIXEKMAcw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 01:29:16 2026 by rpki-client