
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
File: REhMnzpz9xlXK4vIoaH9nln6hPY.mft (raw, json)
Hash identifier: nducKE9a/q//x1ycexJimGUBJvlP6zMthHQG9nYE/Dk=
Subject key identifier: D3:0A:8A:70:C6:2B:6B:11:00:52:7B:88:39:50:A9:F6:7E:E2:43:DD
Authority key identifier: 44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6
Certificate issuer: /CN=A91BD73B/serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
Certificate serial: 3582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
Manifest number: 3582
Signing time: Fri 02 Oct 2026 15:18:57 +0000
Manifest this update: Fri 02 Oct 2026 15:18:56 +0000
Manifest next update: Fri 09 Oct 2026 15:18:56 +0000
Files and hashes: 1: REhMnzpz9xlXK4vIoaH9nln6hPY.crl (hash: NAnhNpQ8rR2ye9eVl4mhkv+f3lnKlxTxLqn02KwT+CY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl
rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13698 (0x3582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD73B, serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
Validity
Not Before: Oct 2 15:18:56 2026 GMT
Not After : Oct 9 15:18:56 2026 GMT
Subject: CN=6abfcb60-9cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:fd:f5:e9:48:67:b6:6d:d4:70:49:af:50:
f9:70:88:97:93:9d:24:37:61:de:c0:55:2c:9d:74:
0f:c5:08:9c:ac:5d:7a:dd:e1:e7:23:50:fc:c7:8a:
c1:77:0c:ab:fa:3e:85:b1:3d:21:e9:19:11:86:ff:
b0:42:0b:f0:2d:17:3c:cd:c4:a1:7f:9c:a3:49:28:
56:e5:c9:e7:f7:0c:48:f0:fd:88:6e:e5:85:4e:e6:
22:22:95:fb:09:74:72:d3:8d:71:cd:55:39:77:4d:
8c:ac:a7:8f:87:0f:0e:fd:5f:59:08:d2:ce:5a:01:
b6:80:ef:b2:01:c8:80:18:01:e6:c1:60:30:e5:22:
f4:9a:95:4f:cc:db:e3:56:77:d9:5a:f5:b5:65:ea:
c5:4d:d1:d1:e9:4f:b4:1f:52:07:d2:20:77:8c:8e:
80:a1:3f:92:66:98:29:4b:b9:eb:e6:58:b6:38:0a:
4e:3c:85:c5:f0:13:74:bd:eb:2a:c3:dd:8e:a0:55:
54:e6:37:d0:46:9c:0a:80:d8:86:35:fa:f6:2c:c7:
d2:c7:28:00:97:83:37:0d:4d:c9:51:66:00:4c:dc:
10:62:95:09:86:97:c5:7f:2e:08:02:11:ba:fc:79:
d5:af:11:cf:a4:7d:bf:3f:53:0d:57:87:32:16:c6:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:8A:70:C6:2B:6B:11:00:52:7B:88:39:50:A9:F6:7E:E2:43:DD
X509v3 Authority Key Identifier:
keyid:44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:af:fb:41:04:a1:9b:18:64:ef:5a:43:bc:c4:ef:c5:a7:6d:
d9:8e:8d:d8:69:4f:c6:03:1d:72:fc:94:a2:49:7d:fc:d6:db:
ad:49:68:2f:43:71:61:84:c8:a6:54:08:90:f6:2e:72:cf:83:
2d:bb:cb:45:b5:59:f9:3d:58:2b:57:7e:2a:80:2b:ef:10:a4:
6c:0c:ec:05:7e:d1:87:0d:66:04:bb:aa:3b:e6:62:6a:d1:1a:
5e:11:1b:45:6e:ce:2a:e0:79:af:22:23:f7:ef:53:bc:17:0c:
99:28:23:59:30:f5:2d:28:f7:c2:31:bc:fb:54:9e:0c:6b:85:
9f:65:75:02:63:01:cf:58:16:2f:88:97:6f:7f:e7:ac:49:63:
08:17:59:52:b7:08:70:6e:c9:59:c8:62:47:8f:94:21:bd:01:
b0:51:11:7b:f7:41:4a:c9:4b:b2:2d:f6:89:06:74:35:7c:63:
54:ce:93:7b:ba:1d:67:88:b1:74:a9:bd:02:7e:79:c0:4e:f3:
b8:f7:b0:f5:ec:c1:0e:cf:13:86:26:ef:1f:f5:10:98:cf:00:
73:37:1a:f6:6d:88:2a:75:81:3f:b4:dc:44:2c:cb:4a:59:5e:
df:5a:42:5a:1b:29:58:bd:f6:51:47:9c:3d:0b:26:c7:d9:df:
b9:cf:f6:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ3M0IxMTAvBgNVBAUTKDQ0NDg0QzlGM0E3M0Y3MTk1NzJCOEJDOEExQTFGRDlF
NTlGQTg0RjYwHhcNMjYxMDAyMTUxODU2WhcNMjYxMDA5MTUxODU2WjAYMRYwFAYD
VQQDEw02YWJmY2I2MC05Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvm399elIZ7Zt1HBJr1D5cIiXk50kN2HewFUsnXQPxQicrF163eHnI1D8x4rB
dwyr+j6FsT0h6RkRhv+wQgvwLRc8zcShf5yjSShW5cnn9wxI8P2IbuWFTuYiIpX7
CXRy041xzVU5d02MrKePhw8O/V9ZCNLOWgG2gO+yAciAGAHmwWAw5SL0mpVPzNvj
VnfZWvW1ZerFTdHR6U+0H1IH0iB3jI6AoT+SZpgpS7nr5li2OApOPIXF8BN0vesq
w92OoFVU5jfQRpwKgNiGNfr2LMfSxygAl4M3DU3JUWYATNwQYpUJhpfFfy4IAhG6
/HnVrxHPpH2/P1MNV4cyFsYI9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMKinDG
K2sRAFJ7iDlQqfZ+4kPdMB8GA1UdIwQYMBaAFERITJ86c/cZVyuLyKGh/Z5Z+oT2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDczQi8yNkJERjMyQzFE
QUExMUUyQkUyNUE2QTUwOEIwMkNEMi9SRWhNbnpwejl4bFhLNHZJb2FIOW5sbjZo
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFaE1uenB6OXhsWEs0dklvYUg5bmxuNmhQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDczQi8yNkJERjMyQzFEQUExMUUyQkUyNUE2QTUwOEIwMkNEMi9SRWhNbnpwejl4
bFhLNHZJb2FIOW5sbjZoUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA6/7QQShmxhk71pDvMTvxadt2Y6N2GlPxgMdcvyUokl9/NbbrUloL0NxYYTI
plQIkPYucs+DLbvLRbVZ+T1YK1d+KoAr7xCkbAzsBX7Rhw1mBLuqO+ZiatEaXhEb
RW7OKuB5ryIj9+9TvBcMmSgjWTD1LSj3wjG8+1SeDGuFn2V1AmMBz1gWL4iXb3/n
rEljCBdZUrcIcG7JWchiR4+UIb0BsFERe/dBSslLsi32iQZ0NXxjVM6Te7odZ4ix
dKm9An55wE7zuPew9ezBDs8ThibvH/UQmM8Aczca9m2IKnWBP7TcRCzLSlle31pC
WhspWL32UUecPQsmx9nfuc/2eg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:49:54 2026 by rpki-client