
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
File: kI54kDTxhBXYdZwmo0brgQ71pBU.mft (raw, json)
Hash identifier: wIqvKZaqjXVIUbRfiO+9SYjJoMfnNAZLOJWnYsNiD+4=
Subject key identifier: 6D:4B:A0:A6:06:2C:7A:29:33:16:49:0A:BC:00:91:45:CE:D4:CC:AB
Authority key identifier: 90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15
Certificate issuer: /CN=A911B4ED/serialNumber=908E789034F18415D8759C26A346EB810EF5A415
Certificate serial: 0271
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
Manifest number: 026A
Signing time: Sat 03 Oct 2026 02:42:40 +0000
Manifest this update: Sat 03 Oct 2026 02:42:39 +0000
Manifest next update: Sat 10 Oct 2026 02:42:39 +0000
Files and hashes: 1: kI54kDTxhBXYdZwmo0brgQ71pBU.crl (hash: IYb7tYg+jlEuiy3H7mgU33Cir0SACsApuHJdL8Tn0UU=)
2: 86A2CEB60F3E11EEA4C55465C4F9AE02.roa (hash: BdCHR64jQmcQxz2LQIkbVjA0OA0jAQdPiVvvMKyKatQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl
rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B4ED, serialNumber=908E789034F18415D8759C26A346EB810EF5A415
Validity
Not Before: Oct 3 02:42:39 2026 GMT
Not After : Oct 10 02:42:39 2026 GMT
Subject: CN=6ac06b9f-1c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:e0:52:4f:6e:72:bd:c2:b1:6e:25:e7:64:
66:4e:c5:7a:18:b1:a8:b0:2f:7c:22:81:e0:6d:b6:
e1:56:d2:2f:d6:14:18:34:90:7a:c1:c4:93:ff:87:
c2:6d:b5:45:28:5f:c1:49:19:ea:c7:de:36:32:10:
75:69:e2:39:b1:d9:8b:e2:14:b6:bc:c3:df:16:09:
75:23:86:7f:d2:2f:1f:0b:95:3e:c1:25:2f:77:ae:
f8:fd:66:31:05:24:e4:a7:11:d3:2f:18:3a:ea:12:
72:e8:42:7d:73:fb:c5:2d:3f:eb:ac:35:01:9e:d6:
8a:a2:1a:81:19:3e:18:49:43:4e:31:19:d3:ea:b0:
03:6a:48:00:a8:6a:4c:0d:08:2b:6e:15:18:50:df:
cf:10:e2:db:a0:f0:1e:aa:6c:f6:fd:2c:ea:ba:3a:
7b:c8:ae:47:ce:ce:73:4c:2d:63:31:50:2d:d1:69:
d7:94:3e:60:da:f7:c4:66:c3:a5:02:d6:cb:55:ca:
38:69:52:5d:f1:10:c5:a8:da:18:0a:7c:58:87:e0:
a1:44:fa:0d:36:6c:18:f6:3c:48:8c:77:0a:6e:ce:
50:e5:70:31:57:ec:9d:5e:22:1d:e9:fa:0c:ed:21:
c6:c0:c7:99:57:c1:4c:5a:83:13:3c:88:ab:fa:42:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4B:A0:A6:06:2C:7A:29:33:16:49:0A:BC:00:91:45:CE:D4:CC:AB
X509v3 Authority Key Identifier:
keyid:90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:1d:e1:48:b1:68:94:83:81:5c:cd:a9:50:d3:df:ba:05:45:
5c:85:24:52:c8:ce:47:87:65:a2:32:09:cc:0a:f2:76:af:d5:
38:88:e1:b7:55:d5:7a:68:ee:2a:21:63:ab:87:31:14:26:ba:
d5:bf:71:b1:f6:8b:c2:3a:f7:64:63:2d:70:95:41:c4:e4:2b:
c5:75:38:d5:e0:14:11:ba:88:b2:70:49:3c:81:85:43:0f:8f:
f5:0a:97:5d:52:64:0e:47:70:c2:08:26:d2:f8:83:65:fb:77:
f4:98:03:78:71:d9:fd:45:01:69:a5:43:f0:fb:67:6a:b2:b3:
b3:09:e1:84:72:1e:5d:57:ba:06:f7:70:25:50:eb:dd:3a:fc:
a6:79:a7:79:15:ca:27:1e:d9:48:24:66:18:47:38:32:9d:5d:
27:da:cb:8d:6f:0a:a2:80:38:8d:d0:51:1c:cf:8e:7c:36:88:
49:6b:ee:1f:29:30:92:81:8c:2e:ab:65:2d:a6:c7:de:78:5f:
ae:52:14:a4:7f:00:0e:6e:d8:37:8e:ae:fe:0f:db:f7:91:85:
a5:cd:45:dc:67:c1:71:b8:16:c3:40:3d:4f:6e:55:b8:c5:46:
12:2c:21:0f:a8:58:ba:10:ae:e4:60:03:82:d7:6f:3f:6f:75:
b6:1a:f4:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0RUQxMTAvBgNVBAUTKDkwOEU3ODkwMzRGMTg0MTVEODc1OUMyNkEzNDZFQjgx
MEVGNUE0MTUwHhcNMjYxMDAzMDI0MjM5WhcNMjYxMDEwMDI0MjM5WjAYMRYwFAYD
VQQDEw02YWMwNmI5Zi0xYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA27DgUk9ucr3CsW4l52RmTsV6GLGosC98IoHgbbbhVtIv1hQYNJB6wcST/4fC
bbVFKF/BSRnqx942MhB1aeI5sdmL4hS2vMPfFgl1I4Z/0i8fC5U+wSUvd674/WYx
BSTkpxHTLxg66hJy6EJ9c/vFLT/rrDUBntaKohqBGT4YSUNOMRnT6rADakgAqGpM
DQgrbhUYUN/PEOLboPAeqmz2/Szqujp7yK5Hzs5zTC1jMVAt0WnXlD5g2vfEZsOl
AtbLVco4aVJd8RDFqNoYCnxYh+ChRPoNNmwY9jxIjHcKbs5Q5XAxV+ydXiId6foM
7SHGwMeZV8FMWoMTPIir+kLclwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1LoKYG
LHopMxZJCrwAkUXO1MyrMB8GA1UdIwQYMBaAFJCOeJA08YQV2HWcJqNG64EO9aQV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjRFRC9GQTRCMEFDNDBG
MzcxMUVFQUI5RDk0NjhDNEY5QUUwMi9rSTU0a0RUeGhCWFlkWndtbzBicmdRNzFw
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tJNTRrRFR4aEJYWWRad21vMGJyZ1E3MXBCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjRFRC9GQTRCMEFDNDBGMzcxMUVFQUI5RDk0NjhDNEY5QUUwMi9rSTU0a0RUeGhC
WFlkWndtbzBicmdRNzFwQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhR3hSLFolIOBXM2pUNPfugVFXIUkUsjOR4dlojIJzArydq/VOIjht1XVemju
KiFjq4cxFCa61b9xsfaLwjr3ZGMtcJVBxOQrxXU41eAUEbqIsnBJPIGFQw+P9QqX
XVJkDkdwwggm0viDZft39JgDeHHZ/UUBaaVD8PtnarKzswnhhHIeXVe6BvdwJVDr
3Tr8pnmneRXKJx7ZSCRmGEc4Mp1dJ9rLjW8KooA4jdBRHM+OfDaISWvuHykwkoGM
LqtlLabH3nhfrlIUpH8ADm7YN46u/g/b95GFpc1F3GfBcbgWw0A9T25VuMVGEiwh
D6hYuhCu5GADgtdvP291thr0qg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:05 2026 by rpki-client