
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier: g5bhA1dEJBbJ8L25LcRTtHHT1GFVmzB6+yqJwsPs0mI=
Subject key identifier: 83:00:A7:07:36:2A:78:56:EB:16:6B:93:36:2B:1C:38:6A:CF:27:49
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 0876
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number: 07CF
Signing time: Fri 04 Sep 2026 21:42:28 +0000
Manifest this update: Fri 04 Sep 2026 21:42:28 +0000
Manifest next update: Fri 11 Sep 2026 21:42:28 +0000
Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: rgZXo7LpGjY8SJat1xJ0W6hJlDVF8AwvYlXEutI0jtM=)
2: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: bkBhWlpijpoPZQCX/fri8xyFsJ4YVWckTUwmgGDvtWw=)
3: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=)
4: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=)
5: 317095E0A28911ECBC355360C4F9AE02.roa (hash: ebFlaRUmZcQJUtMsrS9rZ+TKHMBWxmuEuoPHS8qzaoo=)
6: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: 23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=)
7: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=)
8: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: Z0VkCYZ1R/4kbKogoS7s0rDtQor1LJugR/SNxu4FzT0=)
9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: Q6rfj53pf8UB4FBvHHs00agRED73Fq/tWE6oYVaqkaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Sep 4 21:42:28 2026 GMT
Not After : Sep 11 21:42:28 2026 GMT
Subject: CN=6a9b3b44-274d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:c9:fd:05:23:6f:35:b5:40:f7:f4:ca:71:
3f:e7:ad:40:08:d8:5c:9b:6d:a6:47:27:47:d4:1e:
5c:a5:c5:c9:6c:32:d2:a3:83:82:0e:ef:8f:7d:1c:
b5:aa:5a:07:bb:0e:e1:b9:28:f8:93:0d:6e:40:28:
fd:e5:af:3a:25:9a:30:19:8a:18:8a:b2:67:3d:86:
b2:d5:89:f1:19:21:78:08:24:e8:94:d0:68:f0:dd:
9f:ce:f6:94:62:1b:af:71:44:ba:bc:4c:ac:8e:bf:
cc:dd:4a:b6:ca:96:f6:0b:92:9d:71:e5:f2:89:84:
ec:90:3f:da:6a:c6:07:c3:3f:fc:37:ce:f1:11:5b:
d3:9b:1a:f0:f3:21:cd:b1:6f:9f:55:6c:d9:25:e4:
8b:59:3b:38:2f:d6:a6:65:8a:bc:76:17:0f:65:dd:
85:da:c9:37:b7:43:6a:85:32:d4:8f:b8:35:db:5f:
4d:b2:22:ab:a1:33:55:78:72:1e:28:6b:74:85:7a:
82:19:a4:29:98:e0:d2:9c:76:58:4b:75:02:59:51:
5b:48:d8:ec:16:dc:23:48:5c:fc:ba:de:a8:5d:29:
25:0d:0c:89:4e:85:13:6e:89:54:9a:94:fe:9b:4e:
61:4b:26:da:fb:48:fd:0d:16:c4:b1:81:a3:ea:fd:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:00:A7:07:36:2A:78:56:EB:16:6B:93:36:2B:1C:38:6A:CF:27:49
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:53:71:f8:92:43:1e:5a:04:17:69:d8:2a:a6:3f:8e:97:5d:
5b:b1:e7:77:c2:b5:df:12:fd:83:3b:2a:b6:44:fc:d4:a8:70:
cb:3c:88:a2:3e:e1:d3:ca:48:90:a3:36:1c:dd:54:f1:cb:46:
31:93:ec:13:10:c3:ef:e2:20:a6:6c:a1:3e:fc:ff:c3:0b:d4:
ae:4c:97:12:3d:77:5b:d6:41:55:ec:98:9a:3f:3d:c2:f3:08:
7e:41:01:dd:d7:5a:3f:60:57:05:f3:30:0e:f6:82:ee:58:50:
ff:fb:01:d0:44:d8:15:d0:94:42:8a:90:50:d6:af:d6:6c:c4:
31:9e:34:c2:64:7f:86:5b:9b:2a:fe:9d:84:78:02:57:28:ed:
1c:7f:b4:3b:83:18:0c:11:c0:37:77:b4:f8:96:4f:3d:0f:86:
80:bd:60:cb:26:53:01:eb:a1:78:02:4e:10:8f:ca:ec:ad:3b:
ab:3d:5f:ba:1d:37:d1:19:dd:76:ef:70:8d:a0:14:d3:bd:c6:
97:e2:bf:66:18:a1:88:05:cb:af:5d:a9:ab:6e:7a:52:e6:91:
e7:0b:f1:df:b5:ec:f8:1a:8c:4f:89:2d:b9:30:12:6f:7b:39:
1e:56:62:31:48:8a:87:e8:5e:d4:63:fa:a4:04:e4:5b:94:80:
02:db:ef:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjYwOTA0MjE0MjI4WhcNMjYwOTExMjE0MjI4WjAYMRYwFAYD
VQQDEw02YTliM2I0NC0yNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4kLJ/QUjbzW1QPf0ynE/561ACNhcm22mRydH1B5cpcXJbDLSo4OCDu+PfRy1
qloHuw7huSj4kw1uQCj95a86JZowGYoYirJnPYay1YnxGSF4CCTolNBo8N2fzvaU
YhuvcUS6vEysjr/M3Uq2ypb2C5KdceXyiYTskD/aasYHwz/8N87xEVvTmxrw8yHN
sW+fVWzZJeSLWTs4L9amZYq8dhcPZd2F2sk3t0NqhTLUj7g1219NsiKroTNVeHIe
KGt0hXqCGaQpmODSnHZYS3UCWVFbSNjsFtwjSFz8ut6oXSklDQyJToUTbolUmpT+
m05hSyba+0j9DRbEsYGj6v2c/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMApwc2
KnhW6xZrkzYrHDhqzydJMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0
ejBhTFgwbHFrYXV3NUl6NmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUVNx+JJDHloEF2nYKqY/jpddW7Hnd8K13xL9gzsqtkT81KhwyzyIoj7h08pI
kKM2HN1U8ctGMZPsExDD7+IgpmyhPvz/wwvUrkyXEj13W9ZBVeyYmj89wvMIfkEB
3ddaP2BXBfMwDvaC7lhQ//sB0ETYFdCUQoqQUNav1mzEMZ40wmR/hlubKv6dhHgC
VyjtHH+0O4MYDBHAN3e0+JZPPQ+GgL1gyyZTAeuheAJOEI/K7K07qz1fuh030Rnd
du9wjaAU073Gl+K/ZhihiAXLr12pq256UuaR5wvx37Xs+BqMT4ktuTASb3s5HlZi
MUiKh+he1GP6pATkW5SAAtvvJA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:36:06 2026 by rpki-client