
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier: VTMaenEJDkL4kQjPx0onSoLkDalP/Vw2EiFK8Go7sX4=
Subject key identifier: 0F:DC:D3:35:3A:A8:5E:35:19:AC:CF:8B:9A:5B:A6:C8:66:53:F9:44
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial: 0261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number: 025A
Signing time: Wed 07 Oct 2026 02:41:56 +0000
Manifest this update: Wed 07 Oct 2026 02:41:55 +0000
Manifest next update: Wed 14 Oct 2026 02:41:55 +0000
Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: 15T1y2nZOKAzNeCacy0zbLMaRJ24zILRVWdOJ5oJ4tY=)
2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: l6WlraQHSFxD5ZzijjCLvs/ztCHDvT/RfDgDzcuuDws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Validity
Not Before: Oct 7 02:41:55 2026 GMT
Not After : Oct 14 02:41:55 2026 GMT
Subject: CN=6ac5b174-11a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:35:26:c2:89:66:37:5e:91:af:1a:b8:11:
74:69:09:ed:c0:26:a1:dd:f0:83:a4:e2:e7:cc:f0:
71:cb:dc:04:b3:97:62:3c:d7:75:34:3d:13:eb:00:
35:18:35:b2:bc:80:c0:85:58:35:93:ff:5e:13:f6:
75:da:69:2d:6d:53:0e:a6:3b:73:d0:6b:bc:9d:1c:
ac:01:e8:cd:b7:f4:95:22:9f:c6:a7:51:d3:b5:20:
20:9a:39:22:4e:2d:9a:24:9d:d4:6e:9f:d8:96:83:
9e:e8:1f:53:7d:7e:0a:02:38:54:67:cc:06:0d:96:
20:4b:42:3e:e8:b8:14:f6:f8:26:33:59:62:29:5b:
33:6b:16:20:ed:c4:f0:ed:93:d4:bd:28:0c:93:a6:
7e:fa:2c:1d:3d:79:05:22:9e:51:3d:13:10:20:6a:
c8:42:ad:10:65:ff:da:c6:22:23:b1:a0:4c:0d:6d:
5a:91:0e:ca:03:6d:17:66:89:46:c4:40:27:2b:b3:
21:da:55:b9:78:d3:c0:81:02:a7:bf:7f:2b:62:db:
87:21:92:c5:28:23:4a:f7:9b:6e:50:32:7d:55:35:
77:2e:bf:88:13:8b:b6:97:0b:94:6b:00:30:c5:d8:
14:ab:07:d3:0c:38:4e:c9:b8:7f:d4:ac:da:f7:1f:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DC:D3:35:3A:A8:5E:35:19:AC:CF:8B:9A:5B:A6:C8:66:53:F9:44
X509v3 Authority Key Identifier:
keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:af:6e:22:27:ee:57:e0:ab:33:b2:a8:a3:9a:77:8e:20:
2d:e6:45:98:5a:31:15:cc:44:66:50:45:62:64:6e:a6:e4:1b:
64:4c:d9:a1:14:eb:7f:b1:0f:ce:e8:cf:06:27:b9:e3:c0:57:
29:ac:3c:10:4d:a7:85:d7:62:73:91:74:56:fd:77:4e:4f:61:
2c:d2:03:97:73:e1:69:15:c2:92:f9:d6:97:02:0a:f6:67:55:
67:45:84:f8:bd:30:96:cb:87:e5:d8:14:c8:f7:57:a0:78:3d:
cb:54:78:47:d3:0d:a2:52:33:0f:f5:d4:88:56:e6:96:7a:35:
76:bd:65:7c:e0:4d:d3:38:c1:d9:f3:42:89:6d:07:7a:f7:5a:
f9:59:b7:7c:78:a5:d5:1e:5f:a2:9f:1f:67:74:3c:91:a1:ea:
dd:2a:6f:3f:50:44:be:60:c7:c6:72:1a:29:e4:66:f7:36:c9:
bd:d8:fa:cf:51:a5:15:b6:84:cb:07:cc:4c:0a:ad:a2:c7:3b:
d3:fc:ff:2a:12:b3:dd:d7:65:c0:94:ad:9a:5a:10:1c:74:0f:
19:21:90:27:9e:91:51:ad:9e:fb:93:b7:aa:9f:d3:41:de:54:
25:e2:62:97:92:ab:e5:26:92:86:41:c1:fa:77:97:f8:83:af:
e5:c8:47:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND
OEJGREEwRTcwHhcNMjYxMDA3MDI0MTU1WhcNMjYxMDE0MDI0MTU1WjAYMRYwFAYD
VQQDEw02YWM1YjE3NC0xMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgE1JsKJZjdeka8auBF0aQntwCah3fCDpOLnzPBxy9wEs5diPNd1ND0T6wA1
GDWyvIDAhVg1k/9eE/Z12mktbVMOpjtz0Gu8nRysAejNt/SVIp/Gp1HTtSAgmjki
Ti2aJJ3Ubp/YloOe6B9TfX4KAjhUZ8wGDZYgS0I+6LgU9vgmM1liKVszaxYg7cTw
7ZPUvSgMk6Z++iwdPXkFIp5RPRMQIGrIQq0QZf/axiIjsaBMDW1akQ7KA20XZolG
xEAnK7Mh2lW5eNPAgQKnv38rYtuHIZLFKCNK95tuUDJ9VTV3Lr+IE4u2lwuUawAw
xdgUqwfTDDhOybh/1Kza9x8hgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/c0zU6
qF41GazPi5pbpshmU/lEMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG
NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du
MGpNcHZKa29TaVBJdjlvT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU4avbiIn7lfgqzOyqKOad44gLeZFmFoxFcxEZlBFYmRupuQbZEzZoRTrf7EP
zujPBie548BXKaw8EE2nhddic5F0Vv13Tk9hLNIDl3PhaRXCkvnWlwIK9mdVZ0WE
+L0wlsuH5dgUyPdXoHg9y1R4R9MNolIzD/XUiFbmlno1dr1lfOBN0zjB2fNCiW0H
evda+Vm3fHil1R5fop8fZ3Q8kaHq3SpvP1BEvmDHxnIaKeRm9zbJvdj6z1GlFbaE
ywfMTAqtosc70/z/KhKz3ddlwJStmloQHHQPGSGQJ56RUa2e+5O3qp/TQd5UJeJi
l5Kr5SaShkHB+neX+IOv5chHuw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 21:37:55 2026 by rpki-client