
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
File: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft (raw, json)
Hash identifier: AmgLC8Znsgg+++5QUcSj6awbEY/2qQiomcBMcqraBOo=
Subject key identifier: DB:E5:44:DD:7E:F0:46:90:99:AE:02:42:0F:99:2D:8C:51:1E:9E:F6
Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
Certificate issuer: /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
Manifest number: 0285
Signing time: Mon 05 Oct 2026 02:22:07 +0000
Manifest this update: Mon 05 Oct 2026 02:22:06 +0000
Manifest next update: Mon 12 Oct 2026 02:22:06 +0000
Files and hashes: 1: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl (hash: FifKu59pQahMbsFuff+0px7lyfCtPA2WE44FzH6XloE=)
2: F098580828C511EFB2C79E5FC4F9AE02.roa (hash: w2XOSYSVPfFuJ9EOEOjpxW5/RY7joVGE5SSXWuMDy1A=)
3: 14C77BFA28C611EFA33ED95FC4F9AE02.roa (hash: UEXS3yc2mXGxMZD1Q+vEJLA5TUiKnrPvYK0oDB2lGPg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl
rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91383F0, serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Validity
Not Before: Oct 5 02:22:06 2026 GMT
Not After : Oct 12 02:22:06 2026 GMT
Subject: CN=6ac309cf-bec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:55:95:eb:af:1b:72:96:c4:8d:c2:b3:9d:
82:c9:aa:e9:30:df:83:d2:fd:13:38:e6:b3:b0:1f:
bc:be:1b:57:6a:c1:cd:14:55:2f:8e:48:5c:0e:ae:
54:da:75:66:cd:60:92:92:5d:8e:5c:e0:ec:65:d2:
65:0b:c5:40:41:9d:9b:ae:f5:29:cb:88:eb:3c:2c:
58:6e:3b:ae:0f:48:16:83:8c:2a:52:23:9d:7f:b6:
7d:e8:e9:68:c6:d6:96:a2:5e:84:f7:a4:f6:3d:4e:
bd:a2:ef:89:95:1b:d2:b6:13:46:d5:d3:da:cf:24:
a9:fb:a9:94:8a:8e:07:bb:35:f9:0f:91:55:15:c2:
d3:96:fc:fe:17:13:ec:4a:62:01:25:e8:e5:94:3e:
19:5d:68:e1:40:c6:e4:c4:98:b9:09:38:9a:cf:5c:
2a:01:dc:e6:0b:46:a3:1c:ea:6f:d8:1c:a6:9e:4a:
bf:a2:c5:62:f9:f9:20:68:cc:64:71:96:aa:95:86:
5e:c1:fa:04:66:78:54:41:eb:54:b2:62:46:d4:a9:
a5:08:6f:9c:86:60:4a:a8:da:4e:72:29:40:dd:23:
9b:13:2b:8f:f1:d9:76:d1:41:a8:21:58:66:12:6d:
48:5f:8d:d1:3c:2c:f9:d2:b1:1d:ed:f3:e4:42:49:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:44:DD:7E:F0:46:90:99:AE:02:42:0F:99:2D:8C:51:1E:9E:F6
X509v3 Authority Key Identifier:
keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:c6:76:6f:bd:27:5a:a4:15:99:c8:83:d1:e3:46:45:1b:4f:
ff:dc:5f:42:d7:f4:67:4e:14:27:60:97:a2:43:da:6a:59:f1:
98:cd:42:8b:7c:57:92:56:e4:8e:98:b4:ab:93:c6:57:2b:67:
21:21:62:41:eb:17:60:26:a7:d8:e0:3e:5c:eb:79:e3:16:f9:
bb:62:2c:f7:42:2f:64:9d:bb:63:23:76:5a:23:7a:21:ae:a3:
0c:79:da:44:cf:8b:a9:1e:ed:c1:cc:3a:44:4f:e4:08:1b:76:
1b:fc:85:66:61:d0:4b:dd:39:c0:e8:4a:36:70:7f:94:77:a5:
6d:ab:2d:ae:8e:f9:03:fd:82:e3:5b:05:66:50:dc:97:57:c0:
a4:a4:46:93:14:01:3a:54:5d:ea:a7:d2:3c:4b:1a:ed:cd:7e:
da:d1:f7:62:10:fb:e9:74:b5:81:2e:01:18:05:93:f7:f3:64:
3c:bb:5e:6f:63:9a:87:a9:ee:4c:60:a0:fd:77:92:cb:b0:a9:
b5:22:14:19:a3:8f:59:ad:84:7b:1d:be:a9:d0:8a:cf:47:12:
79:a6:58:af:4e:04:55:74:c6:8d:41:9e:67:7d:7d:d6:f1:14:
7e:d3:9b:ae:9b:40:04:4a:a2:2a:34:94:de:f9:f5:5d:45:55:
25:19:0c:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgzRjAxMTAvBgNVBAUTKDEwMzZDMUUwRkZFMUNGQzM3RDY1NUQ4OUZBNjVENjVG
RTIyRTFGN0EwHhcNMjYxMDA1MDIyMjA2WhcNMjYxMDEyMDIyMjA2WjAYMRYwFAYD
VQQDEw02YWMzMDljZi1iZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzURVleuvG3KWxI3Cs52CyarpMN+D0v0TOOazsB+8vhtXasHNFFUvjkhcDq5U
2nVmzWCSkl2OXODsZdJlC8VAQZ2brvUpy4jrPCxYbjuuD0gWg4wqUiOdf7Z96Olo
xtaWol6E96T2PU69ou+JlRvSthNG1dPazySp+6mUio4HuzX5D5FVFcLTlvz+FxPs
SmIBJejllD4ZXWjhQMbkxJi5CTiaz1wqAdzmC0ajHOpv2Bymnkq/osVi+fkgaMxk
cZaqlYZewfoEZnhUQetUsmJG1KmlCG+chmBKqNpOcilA3SObEyuP8dl20UGoIVhm
Em1IX43RPCz50rEd7fPkQkkDoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvlRN1+
8EaQma4CQg+ZLYxRHp72MB8GA1UdIwQYMBaAFBA2weD/4c/DfWVdifpl1l/iLh96
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNGMC9EQ0ZDQTZBMjBB
ODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4TjlaVjJKLW1YV1gtSXVI
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VEYkI0UF9oejhOOVpWMkotbVhXWC1JdUgzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODNGMC9EQ0ZDQTZBMjBBODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4
TjlaVjJKLW1YV1gtSXVIM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQcZ2b70nWqQVmciD0eNGRRtP/9xfQtf0Z04UJ2CXokPaalnxmM1Ci3xXklbk
jpi0q5PGVytnISFiQesXYCan2OA+XOt54xb5u2Is90IvZJ27YyN2WiN6Ia6jDHna
RM+LqR7twcw6RE/kCBt2G/yFZmHQS905wOhKNnB/lHelbastro75A/2C41sFZlDc
l1fApKRGkxQBOlRd6qfSPEsa7c1+2tH3YhD76XS1gS4BGAWT9/NkPLteb2Oah6nu
TGCg/XeSy7CptSIUGaOPWa2Eex2+qdCKz0cSeaZYr04EVXTGjUGeZ3191vEUftOb
rptABEqiKjSU3vn1XUVVJRkMFg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:21:45 2026 by rpki-client