
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json)
Hash identifier: lnKoPXXjpkk0+RZyJ96KabdS3upGee9eqoV+bnoViiA=
Subject key identifier: 7F:2D:B9:BD:0E:DD:55:28:22:76:49:8C:6C:E0:D1:FD:FE:10:0D:96
Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Certificate serial: 015F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
Manifest number: 015A
Signing time: Sat 05 Sep 2026 04:54:12 +0000
Manifest this update: Sat 05 Sep 2026 04:54:11 +0000
Manifest next update: Sat 12 Sep 2026 04:54:11 +0000
Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: UCtKODfotJoR/3rq6cYB7s0vhzqXzvnjvTZZf4sDqYU=)
2: A307890685C511F1A02C345065A30FBC.roa (hash: iX1TSjip7UcDcI/gVPlIQ6zzLn0TAe/kPZKYdvmNb6k=)
3: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: qMPRgrgLny92y+u26wGr54Urgeg7Km6YGkgoUSViYNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Validity
Not Before: Sep 5 04:54:11 2026 GMT
Not After : Sep 12 04:54:11 2026 GMT
Subject: CN=6a9ba074-3f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:fb:bf:13:96:68:8c:8d:73:c0:ee:9b:0f:
2f:1c:46:f7:3f:73:49:04:13:73:88:10:ca:37:3d:
0e:35:c0:71:06:10:80:d4:91:7d:5b:42:32:09:f8:
cb:f5:95:a3:20:76:fd:c9:1f:89:a7:a9:e2:93:34:
a5:fa:0a:32:cb:95:d6:b1:e7:6c:e8:70:b3:06:fd:
f7:f8:39:04:74:66:18:87:45:e8:56:e3:91:66:42:
96:96:09:32:83:e0:d6:59:f7:04:49:72:74:34:fc:
ef:3a:41:78:84:c2:5d:36:97:3c:1c:4c:5f:d3:fc:
07:eb:02:27:2e:94:69:99:5e:78:ec:65:41:ee:e1:
04:c2:4f:aa:0d:25:ba:a0:58:25:05:dd:76:78:f0:
ac:a2:bb:08:94:9d:90:3d:84:8d:87:5b:c9:18:fc:
06:14:76:c1:06:9c:a0:f4:50:6d:76:93:fe:52:6b:
d1:0e:46:da:23:64:b2:e9:00:f9:6e:6e:16:5a:bf:
8f:9d:fc:76:bb:6a:18:4d:ac:db:49:3d:79:9c:de:
3d:8e:5b:6c:d8:68:43:02:80:a6:49:99:df:d0:da:
2b:dd:8f:97:05:c0:a1:d8:41:a1:06:a9:60:9e:39:
20:f1:1f:bc:40:3c:f6:35:d2:ef:e6:d4:a4:0e:c7:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2D:B9:BD:0E:DD:55:28:22:76:49:8C:6C:E0:D1:FD:FE:10:0D:96
X509v3 Authority Key Identifier:
keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:59:e5:71:0a:38:1f:4d:55:bd:9a:9f:15:e0:7e:14:01:4f:
fc:f3:88:5f:c2:76:a3:a7:3c:b0:6b:50:17:ff:ff:54:93:ff:
ba:f5:ab:32:06:d0:d8:cb:c6:fc:6b:1e:da:ba:02:0a:ae:49:
c0:d8:40:fe:3f:1b:ba:95:b9:69:96:58:75:2f:2b:2c:2b:12:
8a:3c:2f:89:06:2e:5f:fc:cd:c2:17:83:7f:91:ed:32:9b:9b:
37:57:d1:92:9d:0e:0c:88:98:d1:a0:40:50:33:49:38:60:c0:
d9:0e:b3:42:2f:3a:98:5e:d4:fc:25:a7:45:fe:b0:5f:1a:90:
73:f9:3a:2e:55:d4:8a:88:39:74:7a:ad:55:cb:fc:64:34:98:
b1:1b:84:73:7d:aa:12:ac:7f:4f:c2:05:14:85:c4:cb:93:9c:
0d:27:c1:43:23:da:a0:5e:2a:c0:8e:e7:0c:d0:2c:87:17:1a:
b8:38:89:1c:bb:92:22:17:50:3d:58:c1:1a:8a:17:e2:47:82:
ba:aa:ca:ec:87:c5:3c:b1:1f:24:26:43:bb:58:a5:b4:ed:8d:
51:09:00:38:a2:d8:da:3e:90:54:02:33:09:04:71:0d:6d:54:
3f:88:e7:8d:b4:92:bd:91:93:63:1c:da:19:86:22:a8:af:d3:
05:fe:88:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFDNkExMTAvBgNVBAUTKDQ0OUQwN0RBOTIwREEwMjYzNDJCRjZFMjY4OUNDN0Uw
RjBBM0NBRkMwHhcNMjYwOTA1MDQ1NDExWhcNMjYwOTEyMDQ1NDExWjAYMRYwFAYD
VQQDEw02YTliYTA3NC0zZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArkr7vxOWaIyNc8Dumw8vHEb3P3NJBBNziBDKNz0ONcBxBhCA1JF9W0IyCfjL
9ZWjIHb9yR+Jp6nikzSl+goyy5XWseds6HCzBv33+DkEdGYYh0XoVuORZkKWlgky
g+DWWfcESXJ0NPzvOkF4hMJdNpc8HExf0/wH6wInLpRpmV547GVB7uEEwk+qDSW6
oFglBd12ePCsorsIlJ2QPYSNh1vJGPwGFHbBBpyg9FBtdpP+UmvRDkbaI2Sy6QD5
bm4WWr+Pnfx2u2oYTazbST15nN49jlts2GhDAoCmSZnf0Nor3Y+XBcCh2EGhBqlg
njkg8R+8QDz2NdLv5tSkDsf4pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8tub0O
3VUoInZJjGzg0f3+EA2WMB8GA1UdIwQYMBaAFESdB9qSDaAmNCv24micx+Dwo8r8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUM2QS85MDY2MkVCNjlD
MEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9DWTBLX2JpYUp6SDRQQ2p5
dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUM2QS85MDY2MkVCNjlDMEExMUVGQUVENjU3MzhDNEY5QUUwMi9SSjBIMnBJTm9D
WTBLX2JpYUp6SDRQQ2p5dncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG1nlcQo4H01VvZqfFeB+FAFP/POIX8J2o6c8sGtQF///VJP/uvWrMgbQ2MvG
/Gse2roCCq5JwNhA/j8bupW5aZZYdS8rLCsSijwviQYuX/zNwheDf5HtMpubN1fR
kp0ODIiY0aBAUDNJOGDA2Q6zQi86mF7U/CWnRf6wXxqQc/k6LlXUiog5dHqtVcv8
ZDSYsRuEc32qEqx/T8IFFIXEy5OcDSfBQyPaoF4qwI7nDNAshxcauDiJHLuSIhdQ
PVjBGooX4keCuqrK7IfFPLEfJCZDu1iltO2NUQkAOKLY2j6QVAIzCQRxDW1UP4jn
jbSSvZGTYxzaGYYiqK/TBf6I1g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 12:46:44 2026 by rpki-client