
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier: DQdJQa3sVjPtMDf1mJzxcSKNRcr+5brFFR/uTyLtlB4=
Subject key identifier: 99:56:43:A4:C1:99:91:41:CB:CE:C2:0C:C1:31:17:6F:81:F4:E9:61
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial: 08D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number: 08C0
Signing time: Sun 04 Oct 2026 20:36:20 +0000
Manifest this update: Sun 04 Oct 2026 20:36:20 +0000
Manifest next update: Sun 11 Oct 2026 20:36:20 +0000
Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: Iwz+oUMJ6LAwn6eVVTPWU5MfyT51gZT9B1Qcr0fqlFI=)
2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: ZEKagWdv0yeK8YKk4M4X2WCGHhhS2XrEDrg/1/ecl20=)
3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: W7VEuZ0XJHIgHkuqLntiZruVzDvsuhDDdtNUQSpIguA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Validity
Not Before: Oct 4 20:36:20 2026 GMT
Not After : Oct 11 20:36:20 2026 GMT
Subject: CN=6ac2b8c4-8a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:40:95:14:b9:2b:e1:7e:22:3f:39:4b:15:
57:f4:e3:50:79:9d:01:e1:9e:e0:5b:7d:6c:b2:fd:
3c:8e:27:34:73:bb:51:6e:53:e7:72:70:49:1f:44:
af:0d:b6:f0:62:36:78:53:7f:be:6b:66:25:b8:a3:
f0:93:21:ce:ae:a5:04:f8:17:55:12:c1:cd:ac:55:
2d:e2:fe:60:2e:07:64:be:f5:8d:24:50:2f:7f:bb:
03:47:5d:f3:3a:ae:63:7e:81:35:99:8a:ed:08:f1:
13:dd:2f:f3:3c:54:98:ca:d0:48:92:ce:0f:c1:e8:
54:01:f5:fa:19:aa:2d:ac:65:2a:ad:03:00:6f:e1:
74:be:be:68:57:44:b2:c4:ee:95:13:12:ee:b5:f4:
61:25:aa:d1:79:1b:01:33:ac:a2:eb:48:05:79:00:
be:d6:51:cf:e5:92:1e:fe:fe:28:07:e9:99:ff:c6:
f1:0b:81:cd:31:54:14:16:b0:94:0f:d3:a7:f4:19:
0f:36:1e:3f:49:cc:4a:68:b2:cb:2f:86:db:94:33:
76:42:1b:a9:2d:3a:d5:9b:8c:3e:af:9b:1c:38:af:
44:8b:b8:cb:da:fc:64:21:6f:82:5a:41:70:ed:67:
d8:3d:63:3a:08:9f:5e:ef:fa:16:f9:eb:ad:de:20:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:43:A4:C1:99:91:41:CB:CE:C2:0C:C1:31:17:6F:81:F4:E9:61
X509v3 Authority Key Identifier:
keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:cb:e1:a5:18:9b:5d:15:1b:68:c6:fc:ce:67:3c:c0:e7:a2:
3a:06:18:20:fc:d6:9f:05:28:ef:0f:2a:15:5f:d1:e2:92:5c:
76:f0:85:3a:dd:81:56:70:a9:46:aa:f4:0b:69:f8:83:14:1e:
b3:91:9c:5d:23:ae:21:e5:ab:42:83:f9:40:68:fb:fc:a4:f5:
b9:1c:e3:f9:3d:c3:bf:b4:26:66:ed:17:98:0d:c5:e3:b6:f8:
46:d6:d3:b9:3e:cb:3c:72:8d:9c:c5:fe:c2:f2:f0:19:32:8d:
78:41:a3:1b:21:a4:2a:5b:d6:78:fb:9b:a2:83:7e:cd:39:44:
2d:48:d0:98:23:1f:5e:88:63:1d:3a:04:56:3f:63:62:29:cd:
5f:2a:17:61:d0:be:eb:4b:80:83:3e:d9:92:23:ca:71:3c:84:
98:d9:5e:6e:f8:f1:0c:b8:cf:67:f4:af:5d:16:be:91:16:5a:
69:12:b0:b5:10:40:4e:6b:64:b2:2f:ff:00:4b:ba:31:73:f9:
db:13:da:47:25:a3:8e:3b:c2:0b:30:6d:1f:06:2d:1c:69:0c:
25:f7:71:47:db:8f:ea:44:aa:d7:c8:5d:76:13:00:97:b1:f2:
be:75:ef:82:bb:d5:64:f5:b4:c5:ae:11:0b:9e:18:d1:43:2b:
35:ba:b4:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE
NkMyQUI5QjQwHhcNMjYxMDA0MjAzNjIwWhcNMjYxMDExMjAzNjIwWjAYMRYwFAYD
VQQDEw02YWMyYjhjNC04YTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtORAlRS5K+F+Ij85SxVX9ONQeZ0B4Z7gW31ssv08jic0c7tRblPncnBJH0Sv
DbbwYjZ4U3++a2YluKPwkyHOrqUE+BdVEsHNrFUt4v5gLgdkvvWNJFAvf7sDR13z
Oq5jfoE1mYrtCPET3S/zPFSYytBIks4PwehUAfX6GaotrGUqrQMAb+F0vr5oV0Sy
xO6VExLutfRhJarReRsBM6yi60gFeQC+1lHP5ZIe/v4oB+mZ/8bxC4HNMVQUFrCU
D9On9BkPNh4/ScxKaLLLL4bblDN2QhupLTrVm4w+r5scOK9Ei7jL2vxkIW+CWkFw
7WfYPWM6CJ9e7/oW+eut3iCORwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlWQ6TB
mZFBy87CDMExF2+B9OlhMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE
NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T
N2h5SGFqSVdjZUhXd3F1YlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF8vhpRibXRUbaMb8zmc8wOeiOgYYIPzWnwUo7w8qFV/R4pJcdvCFOt2BVnCp
Rqr0C2n4gxQes5GcXSOuIeWrQoP5QGj7/KT1uRzj+T3Dv7QmZu0XmA3F47b4RtbT
uT7LPHKNnMX+wvLwGTKNeEGjGyGkKlvWePubooN+zTlELUjQmCMfXohjHToEVj9j
YinNXyoXYdC+60uAgz7ZkiPKcTyEmNlebvjxDLjPZ/SvXRa+kRZaaRKwtRBATmtk
si//AEu6MXP52xPaRyWjjjvCCzBtHwYtHGkMJfdxR9uP6kSq18hddhMAl7HyvnXv
grvVZPW0xa4RC54Y0UMrNbq06A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:29:28 2026 by rpki-client