
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json)
Hash identifier: NvWno8sM29e1miwP7tsp1dbJJt8bX/JHuNYnMllUR80=
Subject key identifier: 7E:91:C4:CA:4F:73:A4:B9:2F:58:B6:D0:02:8C:9B:EB:67:22:E7:8D
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial: 05AF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
Manifest number: 05A4
Signing time: Thu 22 Oct 2026 15:50:16 +0000
Manifest this update: Thu 22 Oct 2026 15:50:16 +0000
Manifest next update: Thu 29 Oct 2026 15:50:16 +0000
Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: IE2AEztCeerau9DOtZr9b0GQwUibFNzqnqSkQL2+JYI=)
2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: M7OYmQFL8/41ldtug+5JoOUb7vy7UyfuPrmsX/809jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 15:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1455 (0x5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Validity
Not Before: Oct 22 15:50:16 2026 GMT
Not After : Oct 29 15:50:16 2026 GMT
Subject: CN=6ada30b8-c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f6:92:74:d2:3d:0b:b4:4f:77:5f:3f:1c:d0:
7f:d3:98:b7:e7:ad:50:b5:67:36:2e:fc:71:a0:21:
cf:10:79:14:08:f5:87:5c:ad:b1:f8:c0:b2:25:85:
10:fb:fe:20:a5:f7:78:50:1f:71:1d:6a:8c:d2:c2:
cc:a8:59:42:1c:04:6a:3b:de:a5:69:8b:0e:b0:95:
a3:c3:59:2b:b7:44:af:de:2a:de:1e:e9:0d:91:eb:
5d:a0:79:f4:f3:9b:17:a2:ff:3d:c0:1d:84:20:35:
55:e0:51:05:91:8c:a3:39:cd:e5:51:0d:13:c3:76:
66:01:7f:5a:81:43:99:95:09:62:64:1f:68:9c:6a:
48:59:fd:3d:49:b0:74:80:13:20:35:f0:2f:a0:73:
8c:10:60:42:fd:7e:97:d2:f0:1e:bd:fc:51:24:73:
01:31:99:c4:28:2f:dd:0d:61:8f:8c:fe:df:e8:cb:
cb:25:94:86:fd:31:a4:dc:92:f2:dc:07:4d:d6:72:
b7:9d:03:57:10:42:65:cb:4f:51:21:ac:07:7c:03:
f0:37:5d:42:27:22:db:8e:8e:7a:8f:32:3e:00:31:
16:fc:b0:f9:b3:45:7b:7e:b9:b4:fb:5a:56:39:08:
54:b4:6c:43:c6:78:c8:19:5d:3b:03:3a:a1:b4:c4:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:91:C4:CA:4F:73:A4:B9:2F:58:B6:D0:02:8C:9B:EB:67:22:E7:8D
X509v3 Authority Key Identifier:
keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:da:ee:93:e9:56:99:76:47:16:3a:34:8d:57:65:ad:3c:6d:
47:08:4c:86:ed:06:b3:9a:7d:a6:25:92:e9:95:67:46:70:ff:
27:1d:3d:55:26:d2:ed:c8:d7:a3:4c:a8:c1:08:99:66:77:ab:
0b:c0:7a:41:e7:23:c8:9d:48:cb:a1:52:49:be:4a:8f:a5:46:
bf:07:d4:e0:9d:57:02:a4:44:4a:d7:66:11:fa:bd:6e:6b:62:
6c:65:2c:f1:21:82:9f:5c:c6:6e:64:02:f1:38:f8:63:6b:b7:
2f:a1:95:fd:e2:fc:ba:79:7b:4f:fd:25:8a:64:2b:f6:35:52:
30:79:81:78:f1:92:f6:26:0b:95:e4:70:5f:53:92:78:b6:da:
53:4e:5f:c9:92:55:cc:92:7f:6e:7c:c4:a6:24:76:da:e1:77:
7e:f0:4e:8e:df:bf:30:9e:2f:27:91:3e:f5:4f:53:21:44:da:
40:29:d1:05:44:ff:2b:7b:d5:32:08:db:f3:06:34:d1:75:f7:
7a:f4:ab:aa:bb:c5:12:60:60:1b:8c:36:d9:9e:fd:84:8c:99:
f7:78:65:95:f6:21:29:f8:ef:7a:dc:9e:34:65:28:34:f0:23:
d7:83:d8:0e:39:7d:5b:03:2c:32:a1:f2:64:ec:c7:11:bf:77:
19:c5:e4:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx
MzY3MDczQjMwHhcNMjYxMDIyMTU1MDE2WhcNMjYxMDI5MTU1MDE2WjAYMRYwFAYD
VQQDEw02YWRhMzBiOC1jNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhfaSdNI9C7RPd18/HNB/05i3561QtWc2LvxxoCHPEHkUCPWHXK2x+MCyJYUQ
+/4gpfd4UB9xHWqM0sLMqFlCHARqO96laYsOsJWjw1krt0Sv3ireHukNketdoHn0
85sXov89wB2EIDVV4FEFkYyjOc3lUQ0Tw3ZmAX9agUOZlQliZB9onGpIWf09SbB0
gBMgNfAvoHOMEGBC/X6X0vAevfxRJHMBMZnEKC/dDWGPjP7f6MvLJZSG/TGk3JLy
3AdN1nK3nQNXEEJly09RIawHfAPwN11CJyLbjo56jzI+ADEW/LD5s0V7frm0+1pW
OQhUtGxDxnjIGV07AzqhtMT9VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6RxMpP
c6S5L1i20AKMm+tnIueNMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE
MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu
ZDltTmhmTDFJZDBUWndjN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtNruk+lWmXZHFjo0jVdlrTxtRwhMhu0Gs5p9piWS6ZVnRnD/Jx09VSbS7cjX
o0yowQiZZnerC8B6QecjyJ1Iy6FSSb5Kj6VGvwfU4J1XAqREStdmEfq9bmtibGUs
8SGCn1zGbmQC8Tj4Y2u3L6GV/eL8unl7T/0limQr9jVSMHmBePGS9iYLleRwX1OS
eLbaU05fyZJVzJJ/bnzEpiR22uF3fvBOjt+/MJ4vJ5E+9U9TIUTaQCnRBUT/K3vV
Mgjb8wY00XX3evSrqrvFEmBgG4w22Z79hIyZ93hllfYhKfjvetyeNGUoNPAj14PY
Djl9WwMsMqHyZOzHEb93GcXkDg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:08:51 2026 by rpki-client