
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json)
Hash identifier: tgOeBqLseNB5ic3yBWNhdfxRc3rSrZuQdSKthI0VO6Q=
Subject key identifier: 68:2C:7B:72:D1:C1:56:BD:26:4F:F1:8D:56:4C:CD:3B:57:03:FC:88
Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Certificate serial: 023F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
Manifest number: 0233
Signing time: Thu 03 Sep 2026 02:46:40 +0000
Manifest this update: Thu 03 Sep 2026 02:46:39 +0000
Manifest next update: Thu 10 Sep 2026 02:46:39 +0000
Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: zqFirZ99YdGX2VsHxGRa/mcU76YtNpBz6FhvrrGPdYE=)
2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=)
3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Validity
Not Before: Sep 3 02:46:39 2026 GMT
Not After : Sep 10 02:46:39 2026 GMT
Subject: CN=6a98df90-0b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:90:0d:a7:f6:4f:f1:67:1e:8f:1d:70:a7:
f5:f5:7e:04:27:3c:59:78:8b:b8:46:2e:0e:0d:d9:
0f:60:8d:3c:d7:fd:57:0f:52:2a:2d:6b:06:f8:77:
cc:e2:ac:54:4a:39:ea:5a:50:27:63:56:8e:46:4b:
7d:df:06:65:fd:7d:15:6d:a7:26:d7:8d:cc:e0:41:
7b:e7:a4:b5:0b:4f:09:2f:77:fc:3a:c5:83:05:90:
0f:f3:cf:e9:cb:03:2b:75:56:f3:17:6c:df:54:b9:
92:04:15:db:6a:4e:30:aa:1f:f7:e5:32:5f:00:c0:
74:30:e0:94:2d:f7:b2:8d:70:a6:29:e1:1c:12:60:
75:93:93:6b:c6:ea:3e:9a:a9:f8:5f:14:98:32:37:
84:da:98:75:19:72:74:c4:fe:39:7e:41:5f:21:ed:
b1:65:75:cb:a0:82:87:40:80:8d:74:dd:2f:8b:63:
0b:67:a1:c2:34:9c:85:ed:9f:e7:03:4b:23:06:ca:
62:44:56:27:92:8e:7e:87:c3:c0:61:3b:bd:26:9c:
fa:08:2f:5e:db:2a:b6:28:f4:9b:17:db:3b:96:d0:
ae:14:3a:dd:e8:29:85:d0:f0:e0:a4:65:b6:ae:54:
0f:45:b2:38:3f:c4:2a:2e:69:e3:11:60:78:46:f2:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2C:7B:72:D1:C1:56:BD:26:4F:F1:8D:56:4C:CD:3B:57:03:FC:88
X509v3 Authority Key Identifier:
keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:0d:61:a2:8c:74:2b:ec:5b:a6:a5:4f:4a:e6:f3:f8:e1:01:
19:96:f2:18:0c:8d:f3:ea:35:41:df:ee:a9:b5:74:ff:4f:db:
a8:fe:df:fd:5c:b2:fc:5b:29:50:f1:29:06:7d:37:a0:1a:0c:
b8:71:17:15:0b:2f:03:e7:29:df:c2:f7:29:e5:8a:68:4b:a0:
69:ac:4b:c6:9b:3a:e5:a7:9b:19:14:4d:65:3e:81:10:32:b1:
f0:c7:2b:96:51:fc:41:0a:f3:38:60:4e:2c:70:e5:73:98:d8:
60:4d:a8:13:61:aa:c3:91:77:13:c6:21:b4:0b:9a:bb:ab:c9:
73:2c:b9:63:e1:c0:fd:c3:ad:7f:5f:5d:a9:5b:3c:a8:7e:86:
c1:c8:7d:72:e5:5d:8a:aa:92:46:ae:9d:b3:af:00:e0:7e:b5:
b2:24:21:31:af:75:72:dc:e1:40:2c:7f:50:23:bc:6e:9a:dd:
69:44:42:c7:6e:54:4d:8e:e3:e4:a1:a9:eb:ac:ed:b2:a4:c0:
fc:28:28:dd:18:01:1c:4d:19:1b:37:4a:9c:be:df:3b:cc:f7:
8d:38:29:e8:79:72:b5:2c:c4:23:bd:93:51:2f:9b:7c:4b:2b:
e1:df:89:89:81:33:64:f0:57:61:63:0b:c6:1f:1e:4c:6b:88:
d9:3e:74:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0
QTczMjUxNkIwHhcNMjYwOTAzMDI0NjM5WhcNMjYwOTEwMDI0NjM5WjAYMRYwFAYD
VQQDEw02YTk4ZGY5MC0wYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtM2QDaf2T/FnHo8dcKf19X4EJzxZeIu4Ri4ODdkPYI081/1XD1IqLWsG+HfM
4qxUSjnqWlAnY1aORkt93wZl/X0Vbacm143M4EF756S1C08JL3f8OsWDBZAP88/p
ywMrdVbzF2zfVLmSBBXbak4wqh/35TJfAMB0MOCULfeyjXCmKeEcEmB1k5Nrxuo+
mqn4XxSYMjeE2ph1GXJ0xP45fkFfIe2xZXXLoIKHQICNdN0vi2MLZ6HCNJyF7Z/n
A0sjBspiRFYnko5+h8PAYTu9Jpz6CC9e2yq2KPSbF9s7ltCuFDrd6CmF0PDgpGW2
rlQPRbI4P8QqLmnjEWB4RvLuywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgse3LR
wVa9Jk/xjVZMzTtXA/yIMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE
NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq
c0VVTGtwTTNhZFJLY3lVV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMQ1hoox0K+xbpqVPSubz+OEBGZbyGAyN8+o1Qd/uqbV0/0/bqP7f/Vyy/Fsp
UPEpBn03oBoMuHEXFQsvA+cp38L3KeWKaEugaaxLxps65aebGRRNZT6BEDKx8Mcr
llH8QQrzOGBOLHDlc5jYYE2oE2Gqw5F3E8YhtAuau6vJcyy5Y+HA/cOtf19dqVs8
qH6Gwch9cuVdiqqSRq6ds68A4H61siQhMa91ctzhQCx/UCO8bprdaURCx25UTY7j
5KGp66ztsqTA/Cgo3RgBHE0ZGzdKnL7fO8z3jTgp6HlytSzEI72TUS+bfEsr4d+J
iYEzZPBXYWMLxh8eTGuI2T50wQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:31 2026 by rpki-client