
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
File: N_UNneVOb9butTKnYVzzDtJC72E.mft (raw, json)
Hash identifier: vD/bWqSLyAsh2LvoABieKtRJg2KyQ3rXqJPdh9WH9mg=
Subject key identifier: 5B:D0:62:DF:12:15:B5:5B:2E:37:EA:24:1A:AD:07:1B:1D:D8:94:66
Authority key identifier: 37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61
Certificate issuer: /CN=A91B42CA/serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61
Certificate serial: 1871
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
Manifest number: 5593
Signing time: Thu 08 Oct 2026 15:04:30 +0000
Manifest this update: Thu 08 Oct 2026 15:04:29 +0000
Manifest next update: Thu 15 Oct 2026 15:04:29 +0000
Files and hashes: 1: N_UNneVOb9butTKnYVzzDtJC72E.crl (hash: H1IvlljrWoIlbNIjbu4VVFCViQ2IZ/ju+LEpE0YXGZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl
rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6257 (0x1871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B42CA, serialNumber=37F50D9DE54E6FD6EEB532A7615CF30ED242EF61
Validity
Not Before: Oct 8 15:04:29 2026 GMT
Not After : Oct 15 15:04:29 2026 GMT
Subject: CN=6ac7b0fe-c1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:a1:cf:43:ab:ff:98:4c:31:a1:8a:95:32:
c6:39:7a:ad:6c:8c:4e:f3:bc:1e:9f:22:5a:18:65:
9c:ab:09:c0:a1:0f:b7:9f:99:66:d2:27:00:a2:9e:
03:a7:3a:4d:df:2a:ab:9c:bd:13:5d:b5:b2:30:5a:
3a:58:67:c7:c0:13:20:ac:79:d3:4a:ca:6d:fd:37:
b3:58:5a:cb:f9:8f:1a:19:f7:05:08:e8:ed:ef:6a:
20:2c:a3:d4:8e:3f:1b:ea:60:38:d5:80:04:08:df:
52:df:11:82:0a:d6:0e:4e:53:50:52:da:f3:f0:82:
d6:7b:18:8a:ec:63:c7:92:c1:92:44:98:5a:96:21:
68:f2:08:23:8e:33:43:d2:49:3f:91:34:eb:13:0d:
f5:a1:2e:46:12:88:f9:f0:62:d3:9b:f7:5a:2c:b4:
51:5e:98:26:30:f5:97:27:6e:8b:35:0b:a2:ac:a1:
be:bb:0b:31:36:15:5d:e6:55:83:9a:cb:40:88:9a:
91:d5:d4:69:f2:5a:c8:f0:ba:2f:d8:f6:be:ea:2b:
e4:1a:ea:6b:b4:e9:fa:6e:5a:39:98:66:b4:90:ec:
f7:77:16:9f:dd:28:e0:e1:eb:41:19:9b:90:21:6f:
82:f2:95:10:93:64:14:f2:10:65:1f:06:2a:51:c3:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:62:DF:12:15:B5:5B:2E:37:EA:24:1A:AD:07:1B:1D:D8:94:66
X509v3 Authority Key Identifier:
keyid:37:F5:0D:9D:E5:4E:6F:D6:EE:B5:32:A7:61:5C:F3:0E:D2:42:EF:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N_UNneVOb9butTKnYVzzDtJC72E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/N_UNneVOb9butTKnYVzzDtJC72E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:f9:64:8f:6a:dc:bb:eb:8d:1e:51:c3:41:14:f8:df:b0:02:
3e:38:88:7e:7f:6c:58:39:e8:22:42:5e:2f:62:b5:ba:d7:4c:
0b:67:4b:6e:33:8c:ab:46:40:32:62:18:0d:ef:2b:28:dd:c4:
9b:c6:bc:95:87:af:0a:da:8a:3b:f0:40:25:51:66:cd:e1:a9:
ae:a9:ef:5b:4a:d3:2e:f6:3c:48:c0:0a:a0:61:c1:83:3e:14:
35:4b:ac:11:81:ac:6b:83:10:16:db:74:aa:4d:7f:c3:8d:9b:
bd:b5:c3:28:22:1c:fc:ac:32:ed:2a:9a:4b:2d:88:31:1b:d7:
ab:ce:cd:d1:a8:63:a6:a4:fd:df:a5:20:5e:13:b7:0c:94:b0:
c4:b2:85:7e:4e:82:e2:50:bb:ca:72:c6:e7:f5:99:c1:36:3f:
ed:34:f0:37:d1:90:fb:02:79:87:2f:9f:94:c7:08:d7:4a:13:
7b:40:ec:64:6b:1d:b3:74:13:2a:82:68:72:81:b6:21:2b:69:
df:fc:f2:bd:c2:f2:dc:f6:87:be:8b:27:60:47:8e:98:80:b8:
69:ac:bd:39:e6:6a:d0:c0:f7:96:d7:0a:1e:b7:d7:3f:cb:20:
b2:be:ab:2f:60:4b:ac:53:9d:96:c9:2d:a5:02:62:3f:23:0c:
a9:c6:9a:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQyQ0ExMTAvBgNVBAUTKDM3RjUwRDlERTU0RTZGRDZFRUI1MzJBNzYxNUNGMzBF
RDI0MkVGNjEwHhcNMjYxMDA4MTUwNDI5WhcNMjYxMDE1MTUwNDI5WjAYMRYwFAYD
VQQDEw02YWM3YjBmZS1jMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4Ghz0Or/5hMMaGKlTLGOXqtbIxO87wenyJaGGWcqwnAoQ+3n5lm0icAop4D
pzpN3yqrnL0TXbWyMFo6WGfHwBMgrHnTSspt/TezWFrL+Y8aGfcFCOjt72ogLKPU
jj8b6mA41YAECN9S3xGCCtYOTlNQUtrz8ILWexiK7GPHksGSRJhaliFo8ggjjjND
0kk/kTTrEw31oS5GEoj58GLTm/daLLRRXpgmMPWXJ26LNQuirKG+uwsxNhVd5lWD
mstAiJqR1dRp8lrI8Lov2Pa+6ivkGuprtOn6blo5mGa0kOz3dxaf3Sjg4etBGZuQ
IW+C8pUQk2QU8hBlHwYqUcMONwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvQYt8S
FbVbLjfqJBqtBxsd2JRmMB8GA1UdIwQYMBaAFDf1DZ3lTm/W7rUyp2Fc8w7SQu9h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE
QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5YnV0VEtuWVZ6ekR0SkM3
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05fVU5uZVZPYjlidXRUS25ZVnp6RHRKQzcyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9OX1VObmVWT2I5
YnV0VEtuWVZ6ekR0SkM3MkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYvlkj2rcu+uNHlHDQRT437ACPjiIfn9sWDnoIkJeL2K1utdMC2dLbjOMq0ZA
MmIYDe8rKN3Em8a8lYevCtqKO/BAJVFmzeGprqnvW0rTLvY8SMAKoGHBgz4UNUus
EYGsa4MQFtt0qk1/w42bvbXDKCIc/Kwy7SqaSy2IMRvXq87N0ahjpqT936UgXhO3
DJSwxLKFfk6C4lC7ynLG5/WZwTY/7TTwN9GQ+wJ5hy+flMcI10oTe0DsZGsds3QT
KoJocoG2IStp3/zyvcLy3PaHvosnYEeOmIC4aay9OeZq0MD3ltcKHrfXP8sgsr6r
L2BLrFOdlsktpQJiPyMMqcaarA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:49:59 2026 by rpki-client