
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json)
Hash identifier: D1CaYLKC5gom7GWmLHTTdm2wbJdfoWOZ/e/RKIVYpvU=
Subject key identifier: 6A:BB:AA:55:85:08:59:17:B0:2A:70:D8:5E:B7:EE:E5:ED:C4:45:B6
Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
Manifest number: 0240
Signing time: Wed 21 Oct 2026 02:59:25 +0000
Manifest this update: Wed 21 Oct 2026 02:59:24 +0000
Manifest next update: Wed 28 Oct 2026 02:59:24 +0000
Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: 8rP6P5yeD4fNYs6WxLxqczOsCtueg5/99hR+CGYA7z8=)
2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: KT2tiHsvRY9LOJYw0HcT//nfw16eth/WSx/o0UIX/Uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 02:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Validity
Not Before: Oct 21 02:59:24 2026 GMT
Not After : Oct 28 02:59:24 2026 GMT
Subject: CN=6ad82a8d-8f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:9a:48:5a:26:ba:00:57:33:30:f8:91:b3:
11:77:fb:96:ba:bd:d3:03:03:f9:27:52:3f:10:74:
8e:41:6d:18:eb:1c:5e:d4:35:b6:02:3c:ec:fc:1f:
de:28:a9:57:6b:06:24:6b:bf:56:90:c9:14:57:69:
ac:cc:cd:38:95:85:91:bc:b8:7e:37:50:fc:52:bb:
33:2b:d5:86:26:b7:51:df:6d:5e:85:85:a0:6e:7c:
e6:7a:f8:44:0c:33:b7:fb:90:27:b1:d0:3d:88:d9:
c9:50:c4:c5:fd:b4:21:b1:8e:1e:13:b8:13:a2:4c:
15:36:8f:32:ad:7d:83:9a:13:8f:ad:4d:58:be:0a:
6c:60:a1:cb:6a:56:6f:20:a9:38:18:05:a0:e8:5d:
0e:58:09:2b:c0:33:4c:9c:06:32:26:bd:3a:e0:ac:
5d:e1:90:66:0d:9a:85:d8:9c:e1:18:45:5f:86:72:
8a:32:af:75:43:f6:70:ca:76:e8:e3:b8:b2:de:6e:
a6:77:a4:d7:ca:ed:2e:1d:4b:6b:19:2f:02:e3:f7:
a3:b0:de:fd:93:96:8b:1b:1c:52:1a:6b:2e:ea:7d:
64:bb:03:99:bc:4c:94:9e:92:77:2c:a3:7d:65:ad:
69:06:85:6e:d4:bf:53:aa:97:98:0a:63:cf:8c:ae:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BB:AA:55:85:08:59:17:B0:2A:70:D8:5E:B7:EE:E5:ED:C4:45:B6
X509v3 Authority Key Identifier:
keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:5e:35:b3:07:e9:45:94:13:53:39:c2:33:7a:f6:0b:d9:cd:
d8:0c:8d:0b:92:a4:ab:a2:9c:c6:dc:4e:49:29:29:96:a0:01:
45:19:10:42:b0:2e:07:b9:53:9f:6a:8d:df:3f:55:33:72:a9:
99:d2:dc:b1:6c:a0:ef:b8:6b:b7:82:fe:7c:74:7a:50:51:cd:
0e:a7:31:15:0e:1e:72:47:f0:d9:18:21:58:2c:01:09:bd:bf:
61:98:34:00:cb:4b:6f:54:80:93:63:60:99:34:cd:a3:47:60:
68:4b:0f:10:ea:cd:d0:3d:10:80:11:6e:2b:a5:f5:21:d1:f3:
41:eb:83:26:27:90:8d:35:8e:81:4c:03:d0:54:9c:80:65:73:
92:61:9a:5c:69:e8:f9:e1:a1:4e:5b:83:64:f6:4a:67:f4:8a:
58:29:1e:c8:42:13:16:61:0a:71:a6:77:62:4e:88:e5:2a:90:
aa:fc:c3:54:ba:c1:34:80:0a:0c:aa:44:72:17:52:81:f5:dd:
a0:08:30:ee:79:7b:c4:b6:4b:00:4d:d2:4b:60:12:f6:b2:90:
0c:11:bb:05:2e:82:02:77:89:33:14:3e:f2:08:a5:a6:4b:61:
c0:da:25:98:9c:69:80:dd:e0:89:4e:35:60:61:a4:71:ec:0b:
ab:a8:7b:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG
NURERDYwOUYwHhcNMjYxMDIxMDI1OTI0WhcNMjYxMDI4MDI1OTI0WjAYMRYwFAYD
VQQDEw02YWQ4MmE4ZC04Zjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyvqaSFomugBXMzD4kbMRd/uWur3TAwP5J1I/EHSOQW0Y6xxe1DW2Ajzs/B/e
KKlXawYka79WkMkUV2mszM04lYWRvLh+N1D8UrszK9WGJrdR321ehYWgbnzmevhE
DDO3+5AnsdA9iNnJUMTF/bQhsY4eE7gTokwVNo8yrX2DmhOPrU1YvgpsYKHLalZv
IKk4GAWg6F0OWAkrwDNMnAYyJr064Kxd4ZBmDZqF2JzhGEVfhnKKMq91Q/Zwynbo
47iy3m6md6TXyu0uHUtrGS8C4/ejsN79k5aLGxxSGmsu6n1kuwOZvEyUnpJ3LKN9
Za1pBoVu1L9TqpeYCmPPjK70CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGq7qlWF
CFkXsCpw2F637uXtxEW2MB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC
NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x
LUxnaXJacVZtNjMxM2RZSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVl41swfpRZQTUznCM3r2C9nN2AyNC5Kkq6KcxtxOSSkplqABRRkQQrAuB7lT
n2qN3z9VM3KpmdLcsWyg77hrt4L+fHR6UFHNDqcxFQ4eckfw2RghWCwBCb2/YZg0
AMtLb1SAk2NgmTTNo0dgaEsPEOrN0D0QgBFuK6X1IdHzQeuDJieQjTWOgUwD0FSc
gGVzkmGaXGno+eGhTluDZPZKZ/SKWCkeyEITFmEKcaZ3Yk6I5SqQqvzDVLrBNIAK
DKpEchdSgfXdoAgw7nl7xLZLAE3SS2AS9rKQDBG7BS6CAneJMxQ+8gilpkthwNol
mJxpgN3giU41YGGkcewLq6h7fw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 02:25:03 2026 by rpki-client