
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File: T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier: SFDgviZhnVY5obgfPz+U8OoV+Vuotf6+Ew9mRryP/wQ=
Subject key identifier: B8:F0:A1:C0:D7:29:73:AA:A4:57:54:BE:48:4E:DF:CD:D9:4C:52:51
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number: 015C
Signing time: Sun 25 Oct 2026 06:09:24 +0000
Manifest this update: Sun 25 Oct 2026 06:09:23 +0000
Manifest next update: Sun 01 Nov 2026 06:09:23 +0000
Files and hashes: 1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: CAGqWcRtJ86O59V1v4ye/Jv1WUvCa7mjjLMeTZ+XYpA=)
2: 296AC8B4A5D811F1A738BF2F3611F970.roa (hash: CQnCoRFdfoOMZ69yJprZvbmvvCNKoIKIobem+EKkuls=)
3: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (hash: Wc1DoOxBicG+sk0xmxn0G7rVUatGjhMhpQRJFhbrHSQ=)
4: 32332AD83C8B11F1B51BFC899C833773.roa (hash: SqSvzXIRIVpELXR4zfaIkWV4fICk8+OR6AsXIXWCiYc=)
5: 7B38FA86A5D711F18B57491F3611F970.roa (hash: Qu1AHu1CC+TqDNyF3QGCgiURM+F5fmgCxLQCL8tZhCc=)
6: 502C3A08DFBA11F0A83E81424B6F56BC.roa (hash: 6xHuo0DnepEGRmB08a/9C8nmjyPvfstg4avyUEG2ltc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 06:09:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Validity
Not Before: Oct 25 06:09:23 2026 GMT
Not After : Nov 1 06:09:23 2026 GMT
Subject: CN=6add9d14-0982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:c3:53:cf:ff:89:cc:c7:2e:ee:81:76:3f:
81:55:20:f1:eb:78:ce:e9:75:f7:e1:ce:5b:b8:d9:
5f:35:8f:fe:14:68:d0:65:f8:36:71:1d:2c:84:6b:
d6:8c:c7:76:19:8f:f2:e4:8f:b1:cb:60:77:98:87:
47:02:91:5d:6d:0e:7a:04:67:70:df:dd:ef:fb:32:
04:2e:bf:57:63:28:b2:f5:08:c4:2d:41:07:99:60:
43:e5:12:6e:64:0d:4e:f6:61:a9:6a:0c:42:04:e3:
ea:ff:5d:97:8d:f3:a4:13:32:9d:35:6d:b9:7d:fb:
1f:d0:e7:2d:bd:d1:82:db:48:80:34:b5:9b:9f:94:
ef:6f:ce:7c:f0:6d:95:cd:7e:dc:08:77:02:2e:39:
f2:f5:74:35:10:1a:82:68:df:d0:d7:e4:7e:01:05:
8f:a0:ba:eb:3f:2d:1f:05:c6:c2:06:de:49:6c:d0:
7b:c3:89:d5:71:34:13:08:f4:b0:c0:47:4c:7f:c8:
ac:de:51:10:26:7a:b7:76:a9:34:8f:03:50:e3:e9:
f1:96:1c:31:cf:65:91:b5:4f:97:8b:4c:53:64:0b:
49:9c:b1:b1:17:fe:99:22:fa:cb:c6:9c:3b:4a:04:
c5:f0:4e:ef:f4:62:9c:bc:ef:f8:ee:43:dc:4c:0a:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F0:A1:C0:D7:29:73:AA:A4:57:54:BE:48:4E:DF:CD:D9:4C:52:51
X509v3 Authority Key Identifier:
keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:ea:06:eb:65:a0:09:13:ca:de:70:bb:28:99:9f:a4:04:06:
67:84:95:40:a3:23:be:0c:d7:0e:5a:33:04:7d:51:98:3c:a0:
6d:11:80:fd:17:10:44:c4:19:17:cc:c1:0d:a6:77:fb:c2:c6:
d2:2c:89:b0:04:33:18:e5:5d:2d:8d:b4:b5:7d:68:4f:a1:13:
ba:52:2a:9d:30:71:2d:2b:49:79:92:2c:78:13:d5:cb:5b:41:
4b:ec:72:00:cf:2a:81:04:8a:7a:43:32:3e:ab:5b:c3:e1:81:
b6:4e:6e:4f:02:75:a3:73:db:84:fa:5f:6b:b1:80:ae:20:dd:
2a:bf:65:5b:38:d7:fe:2a:a9:dd:ba:5b:84:ec:17:fd:ff:56:
70:0d:bd:33:c1:a2:92:8a:12:ae:87:0a:25:fd:c1:cd:d4:c5:
6c:10:49:67:63:f9:e2:c4:52:6b:6a:47:33:bd:62:d7:22:b2:
1e:f3:0c:af:ab:d6:68:01:cf:c5:37:20:57:2c:3a:f9:98:ef:
e9:96:c2:0b:98:ea:8f:63:1c:76:77:d2:c4:c4:03:43:1a:6f:
1f:3a:9e:ac:ce:08:b7:5c:ce:67:19:fc:67:49:6f:c1:f3:59:
b2:3a:16:16:a8:59:2e:ff:02:50:19:24:0b:5d:a3:ba:40:18:
85:c6:23:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMzRkIxMTAvBgNVBAUTKDRGNUY3NUE2QzI5ODhGNThCNjAzMDEyQThEQjQ0NUEx
RjM3RDVENzIwHhcNMjYxMDI1MDYwOTIzWhcNMjYxMTAxMDYwOTIzWjAYMRYwFAYD
VQQDEw02YWRkOWQxNC0wOTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAotbDU8//iczHLu6Bdj+BVSDx63jO6XX34c5buNlfNY/+FGjQZfg2cR0shGvW
jMd2GY/y5I+xy2B3mIdHApFdbQ56BGdw393v+zIELr9XYyiy9QjELUEHmWBD5RJu
ZA1O9mGpagxCBOPq/12XjfOkEzKdNW25ffsf0OctvdGC20iANLWbn5Tvb8588G2V
zX7cCHcCLjny9XQ1EBqCaN/Q1+R+AQWPoLrrPy0fBcbCBt5JbNB7w4nVcTQTCPSw
wEdMf8is3lEQJnq3dqk0jwNQ4+nxlhwxz2WRtU+Xi0xTZAtJnLGxF/6ZIvrLxpw7
SgTF8E7v9GKcvO/47kPcTAphQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjwocDX
KXOqpFdUvkhO383ZTFJRMB8GA1UdIwQYMBaAFE9fdabCmI9YtgMBKo20RaHzfV1y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzNGQi83MDE3ODIxNjBC
QTExMUYwOEVGRUQyMTlDNEY5QUUwMi9UMTkxcHNLWWoxaTJBd0VxamJSRm9mTjlY
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1QxOTFwc0tZajFpMkF3RXFqYlJGb2ZOOVhYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzNGQi83MDE3ODIxNjBCQTExMUYwOEVGRUQyMTlDNEY5QUUwMi9UMTkxcHNLWWox
aTJBd0VxamJSRm9mTjlYWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkuoG62WgCRPK3nC7KJmfpAQGZ4SVQKMjvgzXDlozBH1RmDygbRGA/RcQRMQZ
F8zBDaZ3+8LG0iyJsAQzGOVdLY20tX1oT6ETulIqnTBxLStJeZIseBPVy1tBS+xy
AM8qgQSKekMyPqtbw+GBtk5uTwJ1o3PbhPpfa7GAriDdKr9lWzjX/iqp3bpbhOwX
/f9WcA29M8GikooSrocKJf3BzdTFbBBJZ2P54sRSa2pHM71i1yKyHvMMr6vWaAHP
xTcgVyw6+Zjv6ZbCC5jqj2McdnfSxMQDQxpvHzqerM4It1zOZxn8Z0lvwfNZsjoW
FqhZLv8CUBkkC12jukAYhcYj0Q==
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:03:04 2026 by rpki-client