
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json)
Hash identifier: 2+KpwCdypD50N2xitAj2Vmr2gsrT+4daXVRqOdanuBc=
Subject key identifier: 7A:FD:C8:8A:33:C7:7A:22:37:62:E6:0A:A9:90:3A:1E:DB:CB:56:4B
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
Manifest number: 0154
Signing time: Sat 17 Oct 2026 05:54:24 +0000
Manifest this update: Sat 17 Oct 2026 05:54:23 +0000
Manifest next update: Sat 24 Oct 2026 05:54:23 +0000
Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: 7JXP/hj6WN3zwQpRsJH2r6uulUFAdHsv3L7TFE3nYwU=)
2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Validity
Not Before: Oct 17 05:54:23 2026 GMT
Not After : Oct 24 05:54:23 2026 GMT
Subject: CN=6ad30d8f-b857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:1b:91:2b:6b:6e:e4:50:aa:d4:31:8e:ba:
57:be:c2:4d:df:15:ce:4d:6a:79:f7:35:49:18:5f:
d9:12:09:39:fd:ad:7d:7a:c5:45:e7:f5:e4:d9:56:
04:86:d0:73:3b:17:c4:29:d2:fd:66:90:cb:ca:d1:
59:49:2a:ec:42:ff:26:c4:b9:9b:3a:a5:f8:b2:17:
ab:29:8c:c9:4c:ec:f1:1b:1b:30:99:95:75:ad:2e:
13:7a:b7:2a:c4:1a:55:8a:fd:72:57:a7:50:02:18:
25:f1:35:5d:80:d0:74:73:6f:75:a0:d0:b1:28:31:
fb:be:f9:87:42:a0:a5:4c:79:cf:ae:f6:9c:10:2d:
fd:20:c2:49:7e:fc:6c:6c:cb:c8:2c:78:b8:5b:74:
52:b3:6c:fe:22:08:af:db:3d:ca:fe:7b:31:1d:3a:
94:b1:8e:5c:1c:17:71:30:27:7f:21:7f:73:30:d7:
05:57:ea:05:e5:91:e7:18:1b:61:62:51:98:28:fe:
4c:ec:e9:4b:74:5a:92:11:04:31:af:12:76:eb:6f:
e9:03:a4:19:e6:73:12:9e:81:84:1f:5a:09:07:e0:
76:61:fb:7e:aa:d2:7d:f1:e7:f6:7c:8c:89:e9:b3:
81:50:41:82:70:23:2f:b8:24:f7:e1:c6:f9:22:ad:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FD:C8:8A:33:C7:7A:22:37:62:E6:0A:A9:90:3A:1E:DB:CB:56:4B
X509v3 Authority Key Identifier:
keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:38:07:9a:de:11:fe:6c:26:28:87:00:96:e3:92:1b:9b:b1:
bf:99:4d:0a:87:98:aa:8e:0a:a3:21:8a:ec:71:10:1c:af:03:
15:3d:ea:de:21:19:23:a7:1b:e2:c0:95:94:ac:23:71:48:c2:
0b:cf:92:4a:96:2d:55:bd:10:63:4f:be:64:00:c7:78:75:d2:
31:e2:e8:09:33:de:e0:cb:67:66:8f:3a:be:8b:8b:9d:25:95:
02:b2:be:bd:b6:d1:6b:10:f3:42:bd:a5:d2:5c:dc:a2:60:f4:
7e:3d:09:0e:30:20:7c:8d:b9:5b:7a:9c:5e:ea:4a:43:cf:8d:
f8:dd:a8:e5:bb:57:20:f2:61:f1:7c:1c:fc:e8:26:00:aa:fc:
b0:9f:f6:dc:8c:eb:c5:70:fd:c9:93:33:05:46:f2:ee:ca:5b:
0d:43:ca:59:58:da:2f:08:a3:69:b2:04:77:56:cc:01:39:d1:
a3:fb:6b:7a:bd:b6:71:75:c0:57:77:89:61:77:1a:ae:8c:dd:
cd:ae:5f:02:98:5f:1e:b2:07:16:71:38:89:82:38:99:00:53:
4a:82:39:6c:35:82:ff:e1:18:c6:c3:65:87:34:cf:2c:19:5c:
cf:7c:71:c0:e7:57:73:93:95:7d:12:b6:4c:db:8f:0d:f0:cd:
5a:16:f6:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc2RTIxMTAvBgNVBAUTKDZBQUYzRDlCQzNERkEzQTEyNTA4Mjk2NUQ4RkYzM0I4
MTI4RjI5MUYwHhcNMjYxMDE3MDU1NDIzWhcNMjYxMDI0MDU1NDIzWjAYMRYwFAYD
VQQDEw02YWQzMGQ4Zi1iODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApWUbkStrbuRQqtQxjrpXvsJN3xXOTWp59zVJGF/ZEgk5/a19esVF5/Xk2VYE
htBzOxfEKdL9ZpDLytFZSSrsQv8mxLmbOqX4sherKYzJTOzxGxswmZV1rS4Tercq
xBpViv1yV6dQAhgl8TVdgNB0c291oNCxKDH7vvmHQqClTHnPrvacEC39IMJJfvxs
bMvILHi4W3RSs2z+Igiv2z3K/nsxHTqUsY5cHBdxMCd/IX9zMNcFV+oF5ZHnGBth
YlGYKP5M7OlLdFqSEQQxrxJ262/pA6QZ5nMSnoGEH1oJB+B2Yft+qtJ98ef2fIyJ
6bOBUEGCcCMvuCT34cb5Iq0GRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHr9yIoz
x3oiN2LmCqmQOh7by1ZLMB8GA1UdIwQYMBaAFGqvPZvD36OhJQgpZdj/M7gSjykf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZFMi8zQjU0MUYyMENC
M0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82RWxDQ2xsMlA4enVCS1BL
UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtSOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzZFMi8zQjU0MUYyMENCM0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82
RWxDQ2xsMlA4enVCS1BLUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtTgHmt4R/mwmKIcAluOSG5uxv5lNCoeYqo4KoyGK7HEQHK8DFT3q3iEZI6cb
4sCVlKwjcUjCC8+SSpYtVb0QY0++ZADHeHXSMeLoCTPe4MtnZo86vouLnSWVArK+
vbbRaxDzQr2l0lzcomD0fj0JDjAgfI25W3qcXupKQ8+N+N2o5btXIPJh8Xwc/Ogm
AKr8sJ/23IzrxXD9yZMzBUby7spbDUPKWVjaLwijabIEd1bMATnRo/trer22cXXA
V3eJYXcarozdza5fAphfHrIHFnE4iYI4mQBTSoI5bDWC/+EYxsNlhzTPLBlcz3xx
wOdXc5OVfRK2TNuPDfDNWhb2bw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 00:15:03 2026 by rpki-client