
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier: hL0gX8oU29fzoKIr+G4qj0Hd6+201WarGZjJNfBXdZM=
Subject key identifier: 49:59:0C:C5:83:26:EF:8A:24:9D:B3:3C:55:FA:38:0F:F8:B5:6E:E4
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0E25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number: 0D1E
Signing time: Sat 24 Oct 2026 18:45:53 +0000
Manifest this update: Sat 24 Oct 2026 18:45:52 +0000
Manifest next update: Sat 31 Oct 2026 18:45:52 +0000
Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: 37P28XxlEFZb6rMhmR+zToQdacWXNfLlTjyEeXondHM=)
2: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: fSPgQ0LMQzI8bkHaUu8bL3d8S8z0D/SfCDL4l0l5jeY=)
3: 60A1565CA1F211F1993DFC693F11F970.roa (hash: RFHpBcGzcu8zc3vv4bbihIv1/WTO6k7Pot6Tojz87xo=)
4: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
5: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
6: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
7: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
8: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0=)
9: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
10: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY=)
11: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
12: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
13: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
14: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
15: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
16: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
17: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
18: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: cLjdhUjlRnZ/CysDyvE5WxC4HuYKkSjsastV+5g0hOA=)
19: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
20: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=)
21: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
22: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
23: 0CE85BA6BE1111F18720DB3D5611F970.roa (hash: nz9vc68IV5WJ7mQXbS6rNZIjFtBJkdis8tlOkiay7Qw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 18:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3621 (0xe25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Oct 24 18:45:52 2026 GMT
Not After : Oct 31 18:45:52 2026 GMT
Subject: CN=6adcfce1-8d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:88:40:91:fb:67:64:2f:9c:0d:61:78:3e:
2c:cd:6c:7b:cb:14:18:a5:28:46:b8:a6:72:c4:6f:
77:bf:dd:da:53:ad:0e:54:f4:95:3b:e7:86:dc:15:
09:ea:01:9a:37:07:cf:2e:f5:5e:87:9a:ed:8c:20:
ff:b0:f3:84:2e:0a:32:29:92:c9:52:2d:75:1e:ae:
e4:7a:08:a0:ab:ab:67:2b:b1:9e:d2:e8:5b:d8:a2:
4f:4b:0c:1f:49:a9:e5:b5:49:67:83:5b:5c:bb:51:
c7:86:dd:93:77:98:c6:19:9e:2e:17:4e:3a:91:28:
5f:b1:1a:e5:59:63:be:e8:33:38:8e:a5:a2:17:87:
c4:37:10:ff:3b:25:4a:44:6d:04:8e:02:79:99:de:
75:69:06:7d:dc:a5:81:c6:4e:96:d7:18:c4:70:fd:
d1:47:a0:22:29:da:41:99:99:90:63:87:9c:ef:04:
51:58:27:55:09:f5:8e:da:eb:41:44:d6:bf:68:d2:
55:b5:66:4a:8c:9b:6d:72:ff:98:46:cc:a9:dc:bc:
25:4f:73:88:24:f4:69:4a:61:a3:b4:5e:e6:24:9b:
4b:18:5d:c7:24:db:ee:d9:90:1a:d0:6c:47:63:8f:
82:26:88:96:10:65:6a:96:bf:e4:99:23:1f:86:d3:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:0C:C5:83:26:EF:8A:24:9D:B3:3C:55:FA:38:0F:F8:B5:6E:E4
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:9b:23:7d:4d:f5:b4:67:4d:00:6a:85:f2:2e:e6:72:2e:3f:
ea:57:70:2d:96:8c:ba:e2:45:6f:ab:41:28:30:a1:d1:df:96:
7d:0b:a7:e4:27:99:a2:9b:c9:47:16:f6:2a:2e:cd:50:90:9f:
bf:5d:3a:10:b7:90:9a:91:ff:06:89:90:0f:75:06:83:c8:6b:
46:4d:69:f5:17:72:63:38:4b:8e:e4:ce:84:39:14:a9:4d:e8:
9b:7a:ca:8b:60:a9:64:40:fa:75:57:92:d8:bb:c7:c9:83:87:
95:02:95:93:b8:c3:eb:50:a6:0a:8c:bb:e4:1a:5d:02:a9:4e:
a1:ad:36:a6:9b:ce:01:f6:1d:ec:61:73:f2:72:af:aa:13:04:
eb:ab:2c:10:7c:e0:1d:5c:a0:07:d8:eb:ec:32:b6:60:69:05:
81:ea:ff:c6:7d:1d:95:51:9c:f0:a2:e6:2c:ce:40:f3:2b:ea:
1c:15:f9:c2:4b:0d:e9:24:a5:24:7d:3d:ad:58:c4:21:7f:8b:
9c:a9:a1:3a:6f:08:18:d3:b0:6e:e5:b1:10:db:75:a3:87:df:
ca:98:28:ab:dd:eb:30:cb:8b:87:30:7e:b3:ee:5c:18:98:43:
9a:74:7c:6b:aa:f6:cf:a5:11:7f:cd:5d:af:67:21:31:42:88:
5b:f7:6d:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG
NjlDQkE4NDYwHhcNMjYxMDI0MTg0NTUyWhcNMjYxMDMxMTg0NTUyWjAYMRYwFAYD
VQQDEw02YWRjZmNlMS04ZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsCIQJH7Z2QvnA1heD4szWx7yxQYpShGuKZyxG93v93aU60OVPSVO+eG3BUJ
6gGaNwfPLvVeh5rtjCD/sPOELgoyKZLJUi11Hq7kegigq6tnK7Ge0uhb2KJPSwwf
SanltUlng1tcu1HHht2Td5jGGZ4uF046kShfsRrlWWO+6DM4jqWiF4fENxD/OyVK
RG0EjgJ5md51aQZ93KWBxk6W1xjEcP3RR6AiKdpBmZmQY4ec7wRRWCdVCfWO2utB
RNa/aNJVtWZKjJttcv+YRsyp3LwlT3OIJPRpSmGjtF7mJJtLGF3HJNvu2ZAa0GxH
Y4+CJoiWEGVqlr/kmSMfhtM0awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElZDMWD
Ju+KJJ2zPFX6OA/4tW7kMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE
OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm
M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV5sjfU31tGdNAGqF8i7mci4/6ldwLZaMuuJFb6tBKDCh0d+WfQun5CeZopvJ
Rxb2Ki7NUJCfv106ELeQmpH/BomQD3UGg8hrRk1p9RdyYzhLjuTOhDkUqU3om3rK
i2CpZED6dVeS2LvHyYOHlQKVk7jD61CmCoy75BpdAqlOoa02ppvOAfYd7GFz8nKv
qhME66ssEHzgHVygB9jr7DK2YGkFger/xn0dlVGc8KLmLM5A8yvqHBX5wksN6SSl
JH09rVjEIX+LnKmhOm8IGNOwbuWxENt1o4ffypgoq93rMMuLhzB+s+5cGJhDmnR8
a6r2z6URf81dr2chMUKIW/dtqg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:05 2026 by rpki-client