
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json)
Hash identifier: KUssVrb5NoJdqZJssbyg5mopfGrmRbj+MukFQmQpaZs=
Subject key identifier: 58:CD:14:63:7E:EE:28:25:02:9D:3E:C1:F0:48:DF:9E:52:E7:64:52
Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
Manifest number: 024D
Signing time: Sun 25 Oct 2026 02:42:49 +0000
Manifest this update: Sun 25 Oct 2026 02:42:49 +0000
Manifest next update: Sun 01 Nov 2026 02:42:49 +0000
Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: B6RNOxiI+4sPJ6YsiXQ9Lykwequ5lrsv0enmqxzcGXI=)
2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=)
3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 02:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Validity
Not Before: Oct 25 02:42:49 2026 GMT
Not After : Nov 1 02:42:49 2026 GMT
Subject: CN=6add6ca9-cd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:47:df:28:0d:f3:e3:e4:de:e9:e9:62:7c:
20:6d:ee:c3:21:07:f6:b7:61:0b:8e:6b:ac:47:82:
23:54:b4:a8:27:b6:b0:9e:a8:bc:23:b9:97:c6:59:
55:0b:90:c7:a3:41:61:c6:98:71:24:06:ee:f2:35:
3a:f2:a5:97:6f:01:0d:66:3c:9c:d1:ee:47:b1:de:
df:0f:79:91:5d:f8:a1:aa:48:83:64:97:f3:1b:ad:
18:43:1a:bf:44:83:8f:be:48:6a:2d:68:46:6d:c3:
1d:62:62:2e:b5:70:ad:ac:22:99:c2:c7:e2:c5:52:
f1:7e:bb:17:72:09:2d:9a:a5:b3:bb:f5:e8:b7:a6:
18:70:19:d4:e7:2e:bd:3b:56:10:7d:a9:b3:53:f8:
23:f9:2d:b4:90:90:2f:dc:2c:45:01:54:fa:9c:2f:
b7:8d:93:65:d9:04:8a:91:80:7c:fb:71:6c:7e:f7:
9c:49:c8:36:e8:80:f9:71:94:19:31:e7:47:b5:b3:
9f:f3:28:a8:19:a9:ae:1b:18:6f:61:a3:d6:d2:45:
96:6d:05:66:98:f4:f7:b3:1d:3c:41:55:49:39:60:
18:2a:05:7c:32:22:04:59:5d:d0:68:2c:5a:ca:3b:
a9:bb:7a:8c:69:9c:63:c4:e0:a0:2e:64:21:62:4a:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CD:14:63:7E:EE:28:25:02:9D:3E:C1:F0:48:DF:9E:52:E7:64:52
X509v3 Authority Key Identifier:
keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:b6:af:10:2b:e6:b7:d3:ae:cd:89:4f:ec:a2:2f:96:af:7c:
8b:53:a9:50:d6:8f:cf:9d:d2:46:45:6f:8f:15:10:f9:00:f5:
8c:73:0c:54:0f:76:a9:c7:1a:7b:60:10:8f:b5:10:eb:39:59:
fe:ec:36:26:ef:09:63:0c:d5:35:a9:56:68:70:1f:31:7f:46:
0d:85:43:1b:02:cb:44:39:ee:7a:2e:53:ac:cd:b6:db:53:b2:
80:02:11:92:10:24:6a:3d:0b:28:40:39:8f:a4:85:0e:85:c7:
9b:43:ee:04:eb:61:4f:7a:6d:07:8c:3b:8b:15:68:bb:e1:0d:
5d:f3:1c:af:e5:6b:52:78:8e:69:2e:ce:b4:7f:05:13:16:f5:
a1:ee:79:f9:65:96:a7:9d:05:de:37:9b:73:8e:a6:00:df:e9:
5a:d1:00:38:be:80:be:76:88:b1:d7:5f:79:89:ec:b3:23:07:
c0:15:bb:db:e8:20:c1:c7:bf:95:af:16:40:88:6e:ea:5a:5b:
cb:c5:e8:5a:4d:0b:d8:f7:24:d5:27:d2:1d:b1:a8:68:b2:60:
cd:cd:e0:2b:0a:cb:12:34:6c:5c:77:70:15:c2:cd:53:6f:51:
b2:75:1e:3b:90:c5:3c:d0:9f:44:6a:f3:fc:4c:9c:12:91:d4:
51:35:64:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0
QTczMjUxNkIwHhcNMjYxMDI1MDI0MjQ5WhcNMjYxMTAxMDI0MjQ5WjAYMRYwFAYD
VQQDEw02YWRkNmNhOS1jZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm2RH3ygN8+Pk3unpYnwgbe7DIQf2t2ELjmusR4IjVLSoJ7awnqi8I7mXxllV
C5DHo0FhxphxJAbu8jU68qWXbwENZjyc0e5Hsd7fD3mRXfihqkiDZJfzG60YQxq/
RIOPvkhqLWhGbcMdYmIutXCtrCKZwsfixVLxfrsXcgktmqWzu/Xot6YYcBnU5y69
O1YQfamzU/gj+S20kJAv3CxFAVT6nC+3jZNl2QSKkYB8+3FsfvecScg26ID5cZQZ
MedHtbOf8yioGamuGxhvYaPW0kWWbQVmmPT3sx08QVVJOWAYKgV8MiIEWV3QaCxa
yjupu3qMaZxjxOCgLmQhYkqdzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjNFGN+
7iglAp0+wfBI355S52RSMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE
NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq
c0VVTGtwTTNhZFJLY3lVV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkravECvmt9OuzYlP7KIvlq98i1OpUNaPz53SRkVvjxUQ+QD1jHMMVA92qcca
e2AQj7UQ6zlZ/uw2Ju8JYwzVNalWaHAfMX9GDYVDGwLLRDnuei5TrM2221OygAIR
khAkaj0LKEA5j6SFDoXHm0PuBOthT3ptB4w7ixVou+ENXfMcr+VrUniOaS7OtH8F
Exb1oe55+WWWp50F3jebc46mAN/pWtEAOL6AvnaIsddfeYnssyMHwBW72+ggwce/
la8WQIhu6lpby8XoWk0L2Pck1SfSHbGoaLJgzc3gKwrLEjRsXHdwFcLNU29RsnUe
O5DFPNCfRGrz/EycEpHUUTVkYg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:44 2026 by rpki-client