
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
File: g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft (raw, json)
Hash identifier: EkJ4O0UdK6RtOuacdhWIWZlbZfILCWLtzzj7j3T6P0U=
Subject key identifier: 4B:C7:AF:26:E8:19:15:C2:73:85:9F:52:DE:25:17:05:CC:98:24:32
Authority key identifier: 83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E
Certificate issuer: /CN=A91A7CDD/serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
Manifest number: 01E6
Signing time: Sun 11 Oct 2026 04:00:10 +0000
Manifest this update: Sun 11 Oct 2026 04:00:10 +0000
Manifest next update: Sun 18 Oct 2026 04:00:10 +0000
Files and hashes: 1: g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl (hash: IrPllqLAc+kONPDFI2Zz2C0c6PTl7yh4ogsY9XRNxqA=)
2: 1E595AE8DD0E11EE9833196BC4F9AE02.roa (hash: e8BrutbzfzM1UUyv17uARTWJ09lINCQWQeDDVfsXfGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl
rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CDD, serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E
Validity
Not Before: Oct 11 04:00:10 2026 GMT
Not After : Oct 18 04:00:10 2026 GMT
Subject: CN=6acb09ca-87fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:20:58:c1:8e:87:ef:bb:a6:86:44:e5:8a:
be:c1:ae:cc:e2:59:13:c6:a6:4e:32:a9:76:d1:96:
10:da:82:fa:63:2c:3e:fe:66:3d:94:be:1d:a8:39:
ff:71:cd:c9:7f:39:ef:dc:5b:7d:e5:55:fe:d7:fa:
d9:90:df:a3:e2:72:f5:72:40:4c:85:69:9e:c1:c0:
47:91:95:9c:ce:bf:c0:64:08:ad:3b:b3:57:5f:3a:
40:23:3c:d2:a2:75:12:24:49:2b:13:14:e8:8e:58:
1c:63:96:d3:40:1d:86:46:b8:6d:b6:5c:7f:13:91:
8e:6f:97:b1:1b:6b:03:11:01:ae:d7:52:10:61:17:
09:53:9f:bf:c7:5a:ec:c7:dd:88:12:07:7b:05:ff:
ea:2d:00:d3:73:31:c2:c6:5f:6e:69:c7:8e:1b:df:
79:8b:cd:a7:0f:41:c4:cb:49:bb:0a:4e:6b:87:b3:
58:78:fa:4d:01:50:62:52:72:bc:9b:3a:12:61:fe:
36:7b:ce:50:1a:c1:c2:ec:3c:c1:d0:da:9c:b1:af:
16:aa:8a:9a:30:14:11:fd:08:a4:04:02:2b:f7:61:
de:f7:80:64:cf:2a:79:83:f8:61:5d:19:6e:fc:68:
77:4d:40:70:ff:de:31:91:79:03:5d:06:ca:02:2b:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:AF:26:E8:19:15:C2:73:85:9F:52:DE:25:17:05:CC:98:24:32
X509v3 Authority Key Identifier:
keyid:83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:30:59:f9:5e:bf:92:63:96:8b:c1:2c:04:0b:ca:19:20:a6:
98:a3:37:c4:bf:48:f9:93:6a:20:30:61:2f:db:ba:cb:33:2a:
2a:5c:1a:4d:fc:d8:a2:fb:20:0b:3e:bc:6f:7f:e8:53:60:26:
8f:bf:d2:68:04:7b:ab:22:97:96:dd:a4:23:5c:2d:53:7f:46:
27:07:25:2f:ad:ac:48:ea:5f:7b:e6:b5:38:7f:ee:bd:d6:28:
14:a6:f0:06:6b:0b:c1:28:7a:b8:64:95:46:5d:3a:0c:f9:78:
90:7e:53:b8:7b:c1:c6:e3:b4:12:f0:93:06:59:1f:a6:0b:85:
90:77:26:ec:4c:9d:9b:da:03:3c:a5:f7:b0:70:67:bc:e2:12:
94:7f:d4:74:b7:e9:fd:1e:de:a2:ab:32:86:c2:20:fe:c6:23:
43:37:b1:0c:a1:08:7d:2f:ea:72:dd:a4:7f:27:62:51:a7:f9:
8a:4b:99:97:38:f2:c1:88:aa:0e:d6:6a:f4:61:26:e3:4c:0c:
36:e2:f1:8b:41:24:cd:11:96:7f:84:f4:5b:ff:9a:ac:28:c8:
ca:1c:24:7d:4d:7b:de:ab:49:23:ea:26:3c:ec:d9:45:e9:68:
fe:d2:f0:b2:9f:58:e4:78:48:37:24:f3:e0:b3:6e:2e:e2:f5:
6b:d2:0a:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdDREQxMTAvBgNVBAUTKDgzOEE5NEVEMjUyNDA5NTlBQTZGMTU0OTEwMDNBQzZF
NkQwMzk1N0UwHhcNMjYxMDExMDQwMDEwWhcNMjYxMDE4MDQwMDEwWjAYMRYwFAYD
VQQDEw02YWNiMDljYS04N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmCsgWMGOh++7poZE5Yq+wa7M4lkTxqZOMql20ZYQ2oL6Yyw+/mY9lL4dqDn/
cc3Jfznv3Ft95VX+1/rZkN+j4nL1ckBMhWmewcBHkZWczr/AZAitO7NXXzpAIzzS
onUSJEkrExTojlgcY5bTQB2GRrhttlx/E5GOb5exG2sDEQGu11IQYRcJU5+/x1rs
x92IEgd7Bf/qLQDTczHCxl9uaceOG995i82nD0HEy0m7Ck5rh7NYePpNAVBiUnK8
mzoSYf42e85QGsHC7DzB0Nqcsa8WqoqaMBQR/QikBAIr92He94Bkzyp5g/hhXRlu
/Gh3TUBw/94xkXkDXQbKAiu7swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvHrybo
GRXCc4WfUt4lFwXMmCQyMB8GA1UdIwQYMBaAFIOKlO0lJAlZqm8VSRADrG5tA5V+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NERC84QTIzQTZGOERE
MEQxMUVFOUQyOTJENkFDNEY5QUUwMi9nNHFVN1NVa0NWbXFieFZKRUFPc2JtMERs
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2c0cVU3U1VrQ1ZtcWJ4VkpFQU9zYm0wRGxYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0NERC84QTIzQTZGOEREMEQxMUVFOUQyOTJENkFDNEY5QUUwMi9nNHFVN1NVa0NW
bXFieFZKRUFPc2JtMERsWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALjBZ+V6/kmOWi8EsBAvKGSCmmKM3xL9I+ZNqIDBhL9u6yzMqKlwaTfzYovsg
Cz68b3/oU2Amj7/SaAR7qyKXlt2kI1wtU39GJwclL62sSOpfe+a1OH/uvdYoFKbw
BmsLwSh6uGSVRl06DPl4kH5TuHvBxuO0EvCTBlkfpguFkHcm7Eydm9oDPKX3sHBn
vOISlH/UdLfp/R7eoqsyhsIg/sYjQzexDKEIfS/qct2kfydiUaf5ikuZlzjywYiq
DtZq9GEm40wMNuLxi0EkzRGWf4T0W/+arCjIyhwkfU173qtJI+omPOzZRelo/tLw
sp9Y5HhINyTz4LNuLuL1a9IKaw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 08:25:58 2026 by rpki-client