
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json)
Hash identifier: cWBlR9XnWrrSpQbhJfFhvqGgFKAu8EIZzKJij2slwOs=
Subject key identifier: 8E:F0:3C:D4:AC:3B:28:65:71:CB:58:93:2F:86:CF:FA:0E:05:21:57
Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Certificate serial: 2CAD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
Manifest number: 2CAD
Signing time: Tue 20 Oct 2026 15:30:33 +0000
Manifest this update: Tue 20 Oct 2026 15:30:33 +0000
Manifest next update: Tue 27 Oct 2026 15:30:33 +0000
Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: ZlPew4rmMi3TRWptfSUK9bzPNT7c3vleksZvZwELJg0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl
rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 15:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11437 (0x2cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Validity
Not Before: Oct 20 15:30:33 2026 GMT
Not After : Oct 27 15:30:33 2026 GMT
Subject: CN=6ad78919-13b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:e8:16:c7:ba:4d:86:bd:38:3d:b3:9a:57:
e3:d0:f5:68:89:78:69:06:4b:c5:39:71:fa:01:31:
ca:52:e7:fb:c1:ea:a4:0c:d0:63:2e:5e:49:32:78:
0c:96:b9:a2:dc:a4:7d:4e:cd:5b:62:c6:b3:9c:c8:
17:a9:90:6f:3c:34:a1:dc:36:a8:69:29:48:3b:39:
7a:4f:1a:91:9e:9b:da:80:ed:4e:ed:22:f6:bf:b6:
7d:51:60:7a:dd:77:97:f6:a5:82:a8:d8:51:c3:18:
63:f7:f8:3e:49:1e:f3:23:88:ca:fa:25:20:f6:af:
e5:8a:93:70:bc:e8:52:a9:9d:2b:52:bb:e7:f5:b3:
51:58:ba:bc:80:50:5b:9a:98:c7:1d:27:d7:da:f3:
e1:38:bd:f3:17:c3:8e:bd:ca:0f:21:8a:f8:8f:84:
aa:bd:89:ef:63:5e:02:1b:91:2a:7e:ac:96:ba:de:
55:aa:92:29:86:4a:24:eb:ad:21:05:3d:9f:fd:42:
ad:1d:6c:07:05:8e:9e:0f:95:6a:86:99:b2:a1:bb:
3e:d2:61:99:e6:97:39:ec:f0:16:38:a5:88:09:ec:
ad:a4:0b:a5:cd:bc:f8:36:92:52:e1:d6:13:e5:f0:
92:a3:6b:ba:3f:1b:a7:ab:fd:5f:a7:7a:96:a6:5a:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F0:3C:D4:AC:3B:28:65:71:CB:58:93:2F:86:CF:FA:0E:05:21:57
X509v3 Authority Key Identifier:
keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d3:45:2b:dd:1f:ef:cb:f8:9f:03:25:53:25:04:6d:f9:8b:
0f:49:e8:2e:34:4f:4b:c3:99:e0:0d:ec:78:4b:f2:c2:86:ee:
39:6b:ca:d5:15:ef:78:08:d8:fe:f5:b2:10:2e:73:d2:64:b6:
df:ff:5c:4e:e5:96:df:bf:79:b4:cc:66:f5:dc:1d:06:77:29:
6b:05:44:d0:3b:4e:a4:fa:37:8c:f9:a0:ed:6d:e6:6a:d5:b5:
d1:bb:c7:46:10:8a:c2:20:34:9e:03:2c:44:8c:66:52:af:83:
9f:70:ee:67:c3:dd:ec:2f:2e:32:9c:7e:b4:b4:fc:52:62:1d:
31:5a:22:18:78:e4:ab:8a:93:1a:27:be:ee:54:0e:a1:b4:0c:
4a:c2:1b:4d:13:ce:b9:30:ee:60:bb:25:ae:65:c9:d4:fe:fd:
5d:34:65:37:cf:e5:9a:17:e2:50:05:61:8f:08:7f:21:c7:c7:
fb:22:9f:37:3e:b0:57:33:16:b6:7b:88:21:d1:57:80:4d:cd:
f0:d9:54:a7:b8:c5:26:cd:42:f3:a6:7b:7c:bd:ac:cf:f0:eb:
53:d8:ac:88:af:2b:ef:8a:52:30:42:84:fb:7b:eb:96:3c:99:
69:b3:54:fd:76:63:20:57:a9:aa:ad:71:51:4b:d3:22:9d:19:
b8:d8:b1:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3
RTQ4M0VBQ0UwHhcNMjYxMDIwMTUzMDMzWhcNMjYxMDI3MTUzMDMzWjAYMRYwFAYD
VQQDEw02YWQ3ODkxOS0xM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSLoFse6TYa9OD2zmlfj0PVoiXhpBkvFOXH6ATHKUuf7weqkDNBjLl5JMngM
lrmi3KR9Ts1bYsaznMgXqZBvPDSh3DaoaSlIOzl6TxqRnpvagO1O7SL2v7Z9UWB6
3XeX9qWCqNhRwxhj9/g+SR7zI4jK+iUg9q/lipNwvOhSqZ0rUrvn9bNRWLq8gFBb
mpjHHSfX2vPhOL3zF8OOvcoPIYr4j4SqvYnvY14CG5EqfqyWut5VqpIphkok660h
BT2f/UKtHWwHBY6eD5Vqhpmyobs+0mGZ5pc57PAWOKWICeytpAulzbz4NpJS4dYT
5fCSo2u6Pxunq/1fp3qWplqBzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7wPNSs
OyhlcctYky+Gz/oOBSFXMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC
QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2
czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt
MFFLY2U1U1BTVWwtU0Q2czQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf9NFK90f78v4nwMlUyUEbfmLD0noLjRPS8OZ4A3seEvywobuOWvK1RXveAjY
/vWyEC5z0mS23/9cTuWW3795tMxm9dwdBncpawVE0DtOpPo3jPmg7W3matW10bvH
RhCKwiA0ngMsRIxmUq+Dn3DuZ8Pd7C8uMpx+tLT8UmIdMVoiGHjkq4qTGie+7lQO
obQMSsIbTRPOuTDuYLslrmXJ1P79XTRlN8/lmhfiUAVhjwh/IcfH+yKfNz6wVzMW
tnuIIdFXgE3N8NlUp7jFJs1C86Z7fL2sz/DrU9isiK8r74pSMEKE+3vrljyZabNU
/XZjIFepqq1xUUvTIp0ZuNixGQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:37:53 2026 by rpki-client