
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/fls551SdxPlK4sVAjqiRG48gT-Q.mft
File: fls551SdxPlK4sVAjqiRG48gT-Q.mft (raw, json)
Hash identifier: okPhjRUfWNk53aTrh9RkDWMqZwTUHDOHnjb0e9gjaRM=
Subject key identifier: 88:E8:14:11:DB:9E:3D:D7:8F:8F:AA:89:FE:35:9C:31:98:5D:62:7E
Authority key identifier: 7E:5B:39:E7:54:9D:C4:F9:4A:E2:C5:40:8E:A8:91:1B:8F:20:4F:E4
Certificate issuer: /CN=A91925D1/serialNumber=7E5B39E7549DC4F94AE2C5408EA8911B8F204FE4
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fls551SdxPlK4sVAjqiRG48gT-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/fls551SdxPlK4sVAjqiRG48gT-Q.mft
Manifest number: 0B
Signing time: Wed 07 Oct 2026 09:50:22 +0000
Manifest this update: Wed 07 Oct 2026 09:50:21 +0000
Manifest next update: Wed 14 Oct 2026 09:50:21 +0000
Files and hashes: 1: fls551SdxPlK4sVAjqiRG48gT-Q.crl (hash: J1oyD/tEuWlEzIEZyWvk8PY9idzpHZWVavFjiSFppGI=)
2: F6093276B5E511F18DE38F1E4B11F970.roa (hash: ucPChgB8e/pHTEgSRPnZ6dB6WW9+obb5kZoOkZ5Wni0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/fls551SdxPlK4sVAjqiRG48gT-Q.crl
rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/fls551SdxPlK4sVAjqiRG48gT-Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fls551SdxPlK4sVAjqiRG48gT-Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91925D1, serialNumber=7E5B39E7549DC4F94AE2C5408EA8911B8F204FE4
Validity
Not Before: Oct 7 09:50:21 2026 GMT
Not After : Oct 14 09:50:21 2026 GMT
Subject: CN=6ac615dd-cb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:a6:15:a8:04:c5:a3:0a:26:01:c5:50:a9:
64:98:6f:d3:85:93:cd:ef:9b:17:a4:21:e7:4f:8b:
9e:d6:af:f7:a3:49:5a:e8:a8:fd:76:6e:c5:ea:59:
47:bd:24:b1:ed:7f:ed:51:f0:fa:2c:69:72:84:84:
17:0d:92:b2:88:e0:e6:b9:11:eb:0e:3b:b8:a0:3b:
14:23:70:90:9a:47:d0:64:5d:18:da:08:ff:98:c4:
16:f0:67:b7:48:18:d6:70:e8:76:4f:1f:90:76:6b:
21:07:2f:cd:fa:ed:be:b9:68:db:e6:da:90:54:2b:
41:d6:9b:36:40:53:e4:50:ae:92:2c:43:6a:6a:5e:
61:49:1f:f9:a5:55:21:d0:f0:28:09:c6:16:43:b1:
a8:42:84:7c:bf:34:f8:52:99:02:95:68:3d:db:86:
4c:9d:59:b0:43:a9:02:63:9b:84:1a:3c:b9:f8:04:
1e:81:9a:19:04:00:d2:7b:73:23:b8:90:d0:a1:99:
75:33:34:a9:ec:a7:a2:18:91:68:b6:7a:ee:9e:8e:
3a:96:d7:7a:28:70:56:6b:1d:2e:a7:85:b4:0b:dd:
8f:de:9d:53:31:8f:ba:34:55:91:4e:c0:62:0a:b8:
97:ed:04:80:9b:4b:31:07:dd:5c:fc:01:72:04:0d:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:14:11:DB:9E:3D:D7:8F:8F:AA:89:FE:35:9C:31:98:5D:62:7E
X509v3 Authority Key Identifier:
keyid:7E:5B:39:E7:54:9D:C4:F9:4A:E2:C5:40:8E:A8:91:1B:8F:20:4F:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/fls551SdxPlK4sVAjqiRG48gT-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fls551SdxPlK4sVAjqiRG48gT-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D1/9BE0FF04B5E511F1A36E2DEE4A11F970/fls551SdxPlK4sVAjqiRG48gT-Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2e:34:dc:e3:d4:5c:0f:58:46:cb:be:f0:46:dc:8a:7d:a0:
cb:8c:16:da:1c:61:69:56:15:b2:02:ee:39:ff:e9:d0:73:96:
91:5b:cf:80:32:2e:a0:3e:61:71:a8:49:ae:88:f9:7d:96:00:
09:e7:f6:44:11:11:50:f5:5e:58:b7:f9:84:2c:be:a7:93:95:
e3:f1:80:af:6a:8b:8d:7c:64:4a:1e:40:73:88:e5:3c:f0:37:
e9:cd:c5:99:ce:ed:79:b7:13:45:80:92:de:3e:e9:39:e4:4c:
e4:e4:8a:45:e5:ba:38:b5:bc:3f:4c:1a:a8:48:ea:3e:1c:f6:
f9:f8:6e:55:b3:4a:f2:d2:16:7e:27:1d:07:54:04:81:97:9c:
37:ea:ef:46:78:90:d8:4b:72:3c:74:b1:18:2a:5c:c1:57:4d:
6b:b8:b2:f7:7b:83:31:43:e2:9f:9c:66:78:cb:9a:dd:aa:be:
93:81:95:c3:81:c5:e2:d0:2f:c9:f7:c7:31:fa:e8:dd:a4:b4:
73:b5:a3:c3:9c:2c:32:f2:e3:77:13:5f:62:77:38:a5:7e:cc:
c7:34:ab:07:94:13:5d:77:0b:50:55:eb:9c:4d:8e:fd:14:ac:
64:71:4b:bf:7d:66:07:e5:13:1c:f7:b8:b6:9e:49:82:48:a2:
4d:f0:01:7d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MjVEMTExMC8GA1UEBRMoN0U1QjM5RTc1NDlEQzRGOTRBRTJDNTQwOEVBODkxMUI4
RjIwNEZFNDAeFw0yNjEwMDcwOTUwMjFaFw0yNjEwMTQwOTUwMjFaMBgxFjAUBgNV
BAMTDTZhYzYxNWRkLWNiNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8faYVqATFowomAcVQqWSYb9OFk83vmxekIedPi57Wr/ejSVroqP12bsXqWUe9
JLHtf+1R8PosaXKEhBcNkrKI4Oa5EesOO7igOxQjcJCaR9BkXRjaCP+YxBbwZ7dI
GNZw6HZPH5B2ayEHL8367b65aNvm2pBUK0HWmzZAU+RQrpIsQ2pqXmFJH/mlVSHQ
8CgJxhZDsahChHy/NPhSmQKVaD3bhkydWbBDqQJjm4QaPLn4BB6BmhkEANJ7cyO4
kNChmXUzNKnsp6IYkWi2eu6ejjqW13oocFZrHS6nhbQL3Y/enVMxj7o0VZFOwGIK
uJftBICbSzEH3Vz8AXIEDZD5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiOgUEdue
PdePj6qJ/jWcMZhdYn4wHwYDVR0jBBgwFoAUfls551SdxPlK4sVAjqiRG48gT+Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNUQxLzlCRTBGRjA0QjVF
NTExRjFBMzZFMkRFRTRBMTFGOTcwL2ZsczU1MVNkeFBsSzRzVkFqcWlSRzQ4Z1Qt
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZmxzNTUxU2R4UGxLNHNWQWpxaVJHNDhnVC1RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
NUQxLzlCRTBGRjA0QjVFNTExRjFBMzZFMkRFRTRBMTFGOTcwL2ZsczU1MVNkeFBs
SzRzVkFqcWlSRzQ4Z1QtUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBaLjTc49RcD1hGy77wRtyKfaDLjBbaHGFpVhWyAu45/+nQc5aRW8+AMi6gPmFx
qEmuiPl9lgAJ5/ZEERFQ9V5Yt/mELL6nk5Xj8YCvaouNfGRKHkBziOU88DfpzcWZ
zu15txNFgJLePuk55Ezk5IpF5bo4tbw/TBqoSOo+HPb5+G5Vs0ry0hZ+Jx0HVASB
l5w36u9GeJDYS3I8dLEYKlzBV01ruLL3e4MxQ+KfnGZ4y5rdqr6TgZXDgcXi0C/J
98cx+ujdpLRztaPDnCwy8uN3E19idzilfszHNKsHlBNddwtQVeucTY79FKxkcUu/
fWYH5RMc97i2nkmCSKJN8AF9
-----END CERTIFICATE-----
Generated at Fri Oct 9 09:22:06 2026 by rpki-client