
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json)
Hash identifier: h2AmIlFVroFD1/QSIJl5ntaFKAs02/ZMMoomGUoTeVU=
Subject key identifier: F5:D6:1F:A6:CA:76:8B:19:4F:F5:27:83:B8:D3:8D:B4:D7:40:68:62
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
Manifest number: 0155
Signing time: Thu 03 Sep 2026 05:54:00 +0000
Manifest this update: Thu 03 Sep 2026 05:54:00 +0000
Manifest next update: Thu 10 Sep 2026 05:54:00 +0000
Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: g+IwIXQqbm8gI5Vf+icZuo/3SsEBDSa+d6F31fdMzao=)
2: 8BB9BA0A739411F195A6A0F072A30FBC.roa (hash: FzVInQGTXeLkU7QD7YhuspnWb0dDGRHG9zYuBhHsID4=)
3: BC6277B8700211F19DFE431193A30FBC.roa (hash: GSeqy5s5t10nUG8tqKIEN6PcxnTZQTa977Nxb8Hr8hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Validity
Not Before: Sep 3 05:54:00 2026 GMT
Not After : Sep 10 05:54:00 2026 GMT
Subject: CN=6a990b78-3519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:79:9a:d6:a1:25:26:45:ba:9e:15:8d:dd:
fe:1f:9f:e3:eb:a4:f1:d0:0a:2e:16:c2:67:2c:b1:
be:3c:41:fc:02:4e:63:8f:83:4c:ac:60:58:3a:1f:
46:22:84:15:10:7f:08:c8:20:21:8e:c4:60:5b:48:
8d:e7:5e:66:ba:84:a3:28:3b:a4:3d:46:4b:82:4a:
91:1d:81:0e:bf:b4:96:16:33:9e:02:5d:58:f5:87:
1a:8c:c8:93:a4:0d:51:11:2a:bc:04:c8:44:48:91:
15:86:d7:7c:7f:e8:b8:29:c0:50:db:15:7d:71:38:
15:7a:22:cd:f3:a5:d7:89:c9:bd:8d:31:54:40:89:
20:97:16:3f:7f:c5:63:45:ed:7b:8c:c1:dd:06:77:
57:05:09:10:b4:1e:38:a2:52:3f:33:14:82:b1:f0:
ed:41:5f:5d:ec:52:ce:7f:77:61:13:0f:f5:33:97:
ce:7a:4b:6c:6c:4a:16:ab:a5:9a:26:9c:66:d3:c9:
9d:d0:75:45:78:f5:f4:7a:29:f8:28:6e:89:72:5d:
f1:b4:76:8c:58:8b:79:fa:92:a0:97:8c:eb:14:a9:
7f:96:1e:0e:16:e0:dd:91:7e:18:bf:d2:44:b1:aa:
77:3d:3f:fe:1f:fb:27:ea:2d:92:76:10:0a:95:7a:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:1F:A6:CA:76:8B:19:4F:F5:27:83:B8:D3:8D:B4:D7:40:68:62
X509v3 Authority Key Identifier:
keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:b4:e6:41:6d:61:af:82:b1:2a:b7:e7:c9:23:ba:13:27:36:
33:e7:c5:ac:9d:13:87:3d:ad:3d:2c:26:3d:89:b5:69:e9:b6:
b8:86:d9:ad:56:76:43:29:35:84:1a:2d:53:a8:2a:11:63:25:
21:15:07:88:45:54:13:4b:28:75:10:39:84:fe:92:05:28:1b:
59:8e:6b:92:d6:16:4d:95:96:5f:e5:02:95:3a:e6:15:6b:77:
d0:c7:0d:32:48:f9:9f:a3:b2:81:4f:6c:fe:e8:94:86:ce:82:
ae:7c:a2:c9:9b:b4:0c:9b:24:8c:b5:cc:7e:84:5d:a4:66:20:
57:17:5e:b5:5c:94:7f:38:5c:18:19:b2:36:65:bd:53:4e:fb:
8c:6c:7a:83:ec:7d:ee:c1:ce:2e:c2:d0:1b:2f:b6:25:33:b0:
0c:ca:fa:ef:95:53:f9:5e:e4:4f:b4:27:35:d9:5a:3c:c1:de:
2c:fa:34:64:0d:09:8c:92:2b:7e:1b:9a:8d:9f:42:ca:80:38:
bb:08:b6:b8:23:0c:6c:6d:00:81:30:67:18:63:e1:0f:57:f2:
18:7b:fe:fb:5c:f7:58:63:e2:af:68:4b:3c:57:b9:d3:15:9d:
11:12:79:9a:0c:ee:94:ee:5f:ac:1f:56:52:c5:d4:9d:c5:7a:
e8:2e:ee:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3
MDE2Qzk5MDQwHhcNMjYwOTAzMDU1NDAwWhcNMjYwOTEwMDU1NDAwWjAYMRYwFAYD
VQQDEw02YTk5MGI3OC0zNTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnH55mtahJSZFup4Vjd3+H5/j66Tx0AouFsJnLLG+PEH8Ak5jj4NMrGBYOh9G
IoQVEH8IyCAhjsRgW0iN515muoSjKDukPUZLgkqRHYEOv7SWFjOeAl1Y9YcajMiT
pA1RESq8BMhESJEVhtd8f+i4KcBQ2xV9cTgVeiLN86XXicm9jTFUQIkglxY/f8Vj
Re17jMHdBndXBQkQtB44olI/MxSCsfDtQV9d7FLOf3dhEw/1M5fOektsbEoWq6Wa
Jpxm08md0HVFePX0ein4KG6Jcl3xtHaMWIt5+pKgl4zrFKl/lh4OFuDdkX4Yv9JE
sap3PT/+H/sn6i2SdhAKlXpnpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXWH6bK
dosZT/Ung7jTjbTXQGhiMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1
RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk
QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASLTmQW1hr4KxKrfnySO6Eyc2M+fFrJ0Thz2tPSwmPYm1aem2uIbZrVZ2Qyk1
hBotU6gqEWMlIRUHiEVUE0sodRA5hP6SBSgbWY5rktYWTZWWX+UClTrmFWt30McN
Mkj5n6OygU9s/uiUhs6CrnyiyZu0DJskjLXMfoRdpGYgVxdetVyUfzhcGBmyNmW9
U077jGx6g+x97sHOLsLQGy+2JTOwDMr675VT+V7kT7QnNdlaPMHeLPo0ZA0JjJIr
fhuajZ9CyoA4uwi2uCMMbG0AgTBnGGPhD1fyGHv++1z3WGPir2hLPFe50xWdERJ5
mgzulO5frB9WUsXUncV66C7uLg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:56 2026 by rpki-client