
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json)
Hash identifier: OKhtBLAB+Cilxl3q9axkr5VIAaYtowVd4UQ+qFTzdRk=
Subject key identifier: D1:8B:A8:C8:07:E6:47:B1:2C:14:74:26:23:BD:C3:CF:B5:E9:13:2B
Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3
Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
Certificate serial: 0CA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
Manifest number: 0C9A
Signing time: Tue 06 Oct 2026 18:43:55 +0000
Manifest this update: Tue 06 Oct 2026 18:43:55 +0000
Manifest next update: Tue 13 Oct 2026 18:43:55 +0000
Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: GHsVILnvHj2uUfYYTzoxMoa1KRFYW4rdgux71l5KAKQ=)
2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: 21GHOZMTG/TylPlfibWEI7AKeSHxKXdxhV5sqtOzK+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl
rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
Validity
Not Before: Oct 6 18:43:55 2026 GMT
Not After : Oct 13 18:43:55 2026 GMT
Subject: CN=6ac5416b-916f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:47:39:d7:0e:f2:ab:eb:d0:bc:7a:b7:bb:
05:71:36:44:78:10:55:88:7a:5c:1f:ab:ba:f6:d5:
64:07:18:32:a6:20:e2:4e:c9:62:71:dc:ac:38:36:
e3:bb:12:10:81:6b:67:60:8b:7d:f1:45:d0:0e:04:
9a:2a:28:41:10:ec:c0:1d:6e:72:ab:3f:e9:a8:75:
e6:3b:9a:1a:74:d0:83:18:ea:36:92:0f:31:bd:93:
32:ec:72:9b:74:61:15:f3:04:c4:63:af:53:af:71:
92:44:7c:9b:43:97:94:54:a3:a3:2e:ea:05:c5:f8:
85:41:ec:53:fd:c0:f0:0b:e1:23:76:ff:cd:f8:28:
eb:8f:00:c2:2e:50:06:5b:52:65:91:b9:10:ce:33:
e7:9c:ee:3a:eb:df:8a:68:56:bb:89:f0:72:e2:8c:
cd:5a:3a:08:ea:5f:72:3d:0f:e8:79:e0:46:af:28:
34:17:a6:0f:fb:dc:df:44:f8:23:b3:d5:72:75:5f:
71:75:2a:ad:49:9d:1b:f8:14:c0:8d:1c:ea:f5:5d:
af:c2:c0:04:ac:71:e4:66:b4:58:77:18:98:f0:26:
c5:af:59:84:d7:f2:32:b0:5a:2e:86:79:e8:87:3c:
e4:17:02:75:8b:16:45:d7:28:10:86:f2:cd:06:a1:
0c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8B:A8:C8:07:E6:47:B1:2C:14:74:26:23:BD:C3:CF:B5:E9:13:2B
X509v3 Authority Key Identifier:
keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:88:6d:d3:cc:c1:d8:b0:16:ce:db:fc:bc:50:11:44:35:d0:
9d:0d:43:02:f8:30:b6:39:8d:db:fa:82:1b:2a:e1:e2:c0:43:
18:8d:b2:d2:20:db:dc:ab:68:d9:02:18:ea:5b:d3:fc:a9:d3:
d3:d8:5b:c6:4f:ac:fa:72:4a:71:39:79:ff:f2:04:8d:8b:6b:
f6:2a:55:9d:4a:09:21:03:04:80:5f:06:48:d6:06:49:5e:fb:
54:a5:4a:cf:ab:b2:59:e7:4d:0a:22:3e:b8:ab:13:45:d6:40:
76:9c:d1:71:75:b2:4f:e3:7a:dc:89:11:b0:59:90:aa:61:b1:
10:b4:65:19:11:99:59:fc:51:f2:0b:48:c9:8f:48:ee:6b:90:
57:cc:3d:f0:53:da:c7:02:e1:09:c0:11:1e:b8:29:e7:cf:a4:
05:b7:49:1f:47:1e:5e:4c:81:cd:3c:aa:12:cc:a1:c2:7c:4c:
4f:9d:f5:ac:4d:18:60:19:e6:f8:5c:4c:a1:b7:c9:4a:6a:fa:
93:83:f4:4f:69:40:18:f5:01:58:f0:08:78:6d:8d:be:54:55:
c8:f7:e7:6b:45:f1:6b:58:36:70:2f:d1:94:40:b4:9e:68:4a:
f7:13:7f:28:b2:38:35:9d:87:1e:c7:29:f8:88:00:84:bb:ac:
51:8e:b8:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1
RDNDRDQ2RTMwHhcNMjYxMDA2MTg0MzU1WhcNMjYxMDEzMTg0MzU1WjAYMRYwFAYD
VQQDEw02YWM1NDE2Yi05MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwctHOdcO8qvr0Lx6t7sFcTZEeBBViHpcH6u69tVkBxgypiDiTslicdysODbj
uxIQgWtnYIt98UXQDgSaKihBEOzAHW5yqz/pqHXmO5oadNCDGOo2kg8xvZMy7HKb
dGEV8wTEY69Tr3GSRHybQ5eUVKOjLuoFxfiFQexT/cDwC+Ejdv/N+CjrjwDCLlAG
W1JlkbkQzjPnnO4669+KaFa7ifBy4ozNWjoI6l9yPQ/oeeBGryg0F6YP+9zfRPgj
s9VydV9xdSqtSZ0b+BTAjRzq9V2vwsAErHHkZrRYdxiY8CbFr1mE1/IysFouhnno
hzzkFwJ1ixZF1ygQhvLNBqEMZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGLqMgH
5kexLBR0JiO9w8+16RMrMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2
MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R
SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAooht08zB2LAWztv8vFARRDXQnQ1DAvgwtjmN2/qCGyrh4sBDGI2y0iDb3Kto
2QIY6lvT/KnT09hbxk+s+nJKcTl5//IEjYtr9ipVnUoJIQMEgF8GSNYGSV77VKVK
z6uyWedNCiI+uKsTRdZAdpzRcXWyT+N63IkRsFmQqmGxELRlGRGZWfxR8gtIyY9I
7muQV8w98FPaxwLhCcARHrgp58+kBbdJH0ceXkyBzTyqEsyhwnxMT531rE0YYBnm
+FxMobfJSmr6k4P0T2lAGPUBWPAIeG2NvlRVyPfna0Xxa1g2cC/RlEC0nmhK9xN/
KLI4NZ2HHscp+IgAhLusUY64Ug==
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:47:53 2026 by rpki-client