
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
File: ApdxaY8oNwXUpN4S5XOVhcvrjww.mft (raw, json)
Hash identifier: Gy1LHFEAu9ZfzchE6+sslcBtqr9DCPyvAHKoJohaDwo=
Subject key identifier: D0:CC:61:E2:D0:A4:84:26:89:56:20:7B:AE:28:CE:01:E8:DD:B0:5A
Authority key identifier: 02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
Certificate issuer: /CN=A91772FA/serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
Manifest number: 89
Signing time: Sun 25 Oct 2026 00:15:03 +0000
Manifest this update: Sun 25 Oct 2026 00:15:02 +0000
Manifest next update: Sun 01 Nov 2026 00:15:02 +0000
Files and hashes: 1: ApdxaY8oNwXUpN4S5XOVhcvrjww.crl (hash: 0JhNT/IyAVMN7v5/50Pb9PA9q36IxS/biHAOsYyJGvA=)
2: 579B4ED2266411F1AE95FD6DA8833773.roa (hash: 8bYV5yqT5f/vp8IUk+aSf8PEeGU4OsOngNPeYOyshUM=)
3: 56C55F20266411F1AE95FD6DA8833773.roa (hash: Bh/+aoYsXA1eMtFp1ijM0hnLldVk4y3NMxI4DJ5jwNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91772FA, serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Validity
Not Before: Oct 25 00:15:02 2026 GMT
Not After : Nov 1 00:15:02 2026 GMT
Subject: CN=6add4a06-42f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:13:8c:9f:dc:4b:48:bc:c0:66:4e:38:38:
dc:83:c9:6f:d9:c2:5c:30:b7:99:2c:29:ae:a9:6b:
76:7a:2e:e8:bf:0b:db:d6:d6:09:7e:f9:5c:75:bb:
c7:20:43:3e:f9:eb:11:ff:32:54:8a:b7:86:41:45:
08:11:c6:fe:10:71:53:fa:3b:af:d4:c6:0f:51:07:
c8:98:78:b4:fb:4d:af:1b:51:1f:4e:a6:84:61:76:
6e:a3:8a:30:0a:c0:59:2a:f4:e4:ce:2f:99:0e:ac:
c9:fd:5a:5f:22:1f:68:18:8c:db:a3:85:4a:64:51:
cf:58:43:94:65:21:58:81:e2:5d:b7:43:cd:ac:b6:
2c:7d:b4:55:14:fb:94:15:7e:17:c5:44:d4:73:b1:
f3:b3:69:3d:24:15:39:1e:8a:b8:1e:1c:c5:4a:64:
68:5e:42:10:11:7b:5f:d0:fe:d2:3b:91:bc:ed:b4:
e0:e5:51:8c:bf:68:ef:cd:91:ec:b8:91:f5:3d:7b:
e7:f5:72:11:b2:31:dc:65:31:2e:35:d2:4b:37:f0:
ca:46:29:f5:c5:6d:16:58:7c:db:15:35:48:09:c2:
93:82:ad:62:24:95:5e:b5:82:5f:53:d5:ca:ff:02:
03:8d:8d:1d:5e:67:da:af:e8:fa:67:c8:80:6e:3f:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CC:61:E2:D0:A4:84:26:89:56:20:7B:AE:28:CE:01:E8:DD:B0:5A
X509v3 Authority Key Identifier:
keyid:02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8c:12:fd:79:6f:80:a0:7b:60:3e:05:06:28:00:7e:f8:24:
8c:32:6e:6b:51:a2:31:e1:35:aa:8b:1b:ff:8b:ce:3f:42:ff:
d2:7d:8d:d9:01:c8:88:fe:01:ac:55:1f:28:3b:89:79:c1:8a:
6c:d7:56:40:de:22:76:85:d4:ea:e9:5c:cb:12:02:fb:cf:81:
ac:f4:8f:bf:84:d6:61:ac:da:7f:5a:dd:db:d4:9c:01:a2:20:
ef:1c:fd:fa:ec:9b:5d:83:6b:c4:79:13:06:be:23:37:f7:b4:
61:38:78:bb:0a:06:81:37:d2:dd:61:e3:b3:52:fe:e0:66:f0:
d1:6e:fa:50:a9:60:b2:ee:1e:1d:cc:13:2c:dd:15:9a:cd:8f:
c2:df:20:a8:e0:74:d1:24:dc:84:e0:90:13:e7:95:ab:1e:56:
93:29:1e:ef:d2:f4:c4:6f:0d:9a:97:3c:d7:e7:70:46:aa:06:
de:c1:5f:98:0b:a4:85:64:36:df:df:31:9a:e1:94:ed:88:62:
9c:5c:82:03:22:07:a7:93:1b:8c:83:16:2b:87:67:03:e2:48:
db:4d:9e:bc:3c:13:10:36:79:46:e0:92:6b:90:9a:91:60:84:
61:9c:0d:48:23:9e:55:7d:82:21:c8:d7:3a:42:2a:24:45:d7:
76:f6:d0:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzcyRkExMTAvBgNVBAUTKDAyOTc3MTY5OEYyODM3MDVENEE0REUxMkU1NzM5NTg1
Q0JFQjhGMEMwHhcNMjYxMDI1MDAxNTAyWhcNMjYxMTAxMDAxNTAyWjAYMRYwFAYD
VQQDEw02YWRkNGEwNi00MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkjITjJ/cS0i8wGZOODjcg8lv2cJcMLeZLCmuqWt2ei7ovwvb1tYJfvlcdbvH
IEM++esR/zJUireGQUUIEcb+EHFT+juv1MYPUQfImHi0+02vG1EfTqaEYXZuo4ow
CsBZKvTkzi+ZDqzJ/VpfIh9oGIzbo4VKZFHPWEOUZSFYgeJdt0PNrLYsfbRVFPuU
FX4XxUTUc7Hzs2k9JBU5Hoq4HhzFSmRoXkIQEXtf0P7SO5G87bTg5VGMv2jvzZHs
uJH1PXvn9XIRsjHcZTEuNdJLN/DKRin1xW0WWHzbFTVICcKTgq1iJJVetYJfU9XK
/wIDjY0dXmfar+j6Z8iAbj+e7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDMYeLQ
pIQmiVYge64ozgHo3bBaMB8GA1UdIwQYMBaAFAKXcWmPKDcF1KTeEuVzlYXL648M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzJGQS9COEZGMkYxODEx
MUExMUYxOEY2OTk1QUIxNzNEOEM2Ny9BcGR4YVk4b053WFVwTjRTNVhPVmhjdnJq
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0FwZHhhWThvTndYVXBONFM1WE9WaGN2cmp3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzJGQS9COEZGMkYxODExMUExMUYxOEY2OTk1QUIxNzNEOEM2Ny9BcGR4YVk4b053
WFVwTjRTNVhPVmhjdnJqd3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb4wS/XlvgKB7YD4FBigAfvgkjDJua1GiMeE1qosb/4vOP0L/0n2N2QHIiP4B
rFUfKDuJecGKbNdWQN4idoXU6ulcyxIC+8+BrPSPv4TWYazaf1rd29ScAaIg7xz9
+uybXYNrxHkTBr4jN/e0YTh4uwoGgTfS3WHjs1L+4Gbw0W76UKlgsu4eHcwTLN0V
ms2Pwt8gqOB00STchOCQE+eVqx5Wkyke79L0xG8Nmpc81+dwRqoG3sFfmAukhWQ2
398xmuGU7YhinFyCAyIHp5MbjIMWK4dnA+JI202evDwTEDZ5RuCSa5CakWCEYZwN
SCOeVX2CIcjXOkIqJEXXdvbQ5Q==
-----END CERTIFICATE-----
Generated at Sun Oct 25 10:47:08 2026 by rpki-client