
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File: tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier: 4wRxI6EiZuqicDRnhFPRJNLFW0S2Ajks6MQ08J1/DTM=
Subject key identifier: F4:FD:74:0A:F0:3B:7B:59:AE:8A:4B:3D:09:CA:4A:D5:60:51:7D:CB
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial: 0D91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number: 0D5E
Signing time: Fri 18 Sep 2026 18:07:35 +0000
Manifest this update: Fri 18 Sep 2026 18:07:35 +0000
Manifest next update: Fri 25 Sep 2026 18:07:35 +0000
Files and hashes: 1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: mSDnYItVd0JvY9idjhX0m2BXOI35yx1g4XN2Yb9aI7E=)
2: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: l1iCGSn/PX7oFU8pYAYmto407lNna+dcfVIeQPwpey4=)
3: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: 98uYds8I1pxO4Y6dKdHlz74HRamQ9x93aGa9N7uQZao=)
4: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: hFVkKE+Qi5ASFcR8wJP4hxF2ONROpTw8ANjmt7CoeCQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Validity
Not Before: Sep 18 18:07:35 2026 GMT
Not After : Sep 25 18:07:35 2026 GMT
Subject: CN=6aad7de7-05f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:a3:88:c9:05:f2:9f:51:68:39:7c:72:e3:
39:71:31:ac:ef:33:5c:18:19:f1:f1:42:79:ea:ff:
23:e9:34:38:96:c3:ea:3a:15:3f:df:85:6d:d5:0d:
44:95:59:07:08:d3:80:f1:7a:13:2e:56:10:8a:33:
ad:1c:6a:18:b3:9b:27:ad:79:aa:0d:c1:43:11:59:
6c:32:38:6f:f2:c6:25:ab:ae:bb:ed:5c:b8:20:44:
03:69:e6:87:51:f3:ef:f3:0b:08:6e:72:fb:41:22:
ea:5e:e7:91:be:e3:13:c8:95:a7:a0:ca:2a:47:d5:
38:b5:40:88:b5:bc:92:12:f1:28:11:63:64:1b:98:
b5:72:e5:a5:f4:e3:2c:85:b6:54:f6:88:5e:39:94:
6e:b6:da:4c:47:31:ee:a4:c4:4c:9a:4b:1b:27:fd:
ca:3f:5b:ee:7e:d0:4f:b8:ca:20:db:45:9e:b3:4b:
1f:7c:f8:33:9d:ca:46:62:72:28:e1:6f:0b:3e:64:
91:f3:48:ed:ac:02:d7:99:01:8d:37:7d:f4:0c:13:
b9:83:64:9b:74:f2:a3:85:c6:3d:fc:a0:54:ae:31:
57:34:09:a8:7d:4d:44:a8:65:2e:e4:1a:fd:64:70:
97:14:0a:37:8c:76:3a:34:d7:4c:8a:f6:0e:13:68:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:74:0A:F0:3B:7B:59:AE:8A:4B:3D:09:CA:4A:D5:60:51:7D:CB
X509v3 Authority Key Identifier:
keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:46:6c:4a:a0:a0:6a:a5:e4:46:3e:ce:c7:de:2a:a8:59:de:
27:55:36:96:51:7c:77:c1:95:72:b8:26:01:0c:0f:5f:bb:5a:
cf:a8:b3:c7:b7:78:12:1b:76:97:00:71:4b:fe:18:62:44:3f:
cc:7c:52:c4:69:82:76:26:a5:39:c4:bd:6d:64:e3:c2:4e:3d:
80:29:51:6c:12:aa:84:09:4d:ba:fd:5e:99:fc:79:de:df:1e:
1b:a5:52:1f:9f:af:a7:a1:c2:bf:3d:33:75:d5:dc:f8:51:35:
4b:29:2a:8d:85:ac:cf:a1:ea:c3:99:7a:10:a7:e5:c3:bf:20:
4e:09:17:fe:d5:12:75:38:dd:02:d7:06:f4:d1:58:19:92:ed:
10:de:41:32:57:43:e5:5b:8d:a6:41:18:3c:0d:bf:1b:63:47:
59:47:d2:f6:b9:8f:d5:37:61:6b:3c:41:db:12:75:aa:27:b9:
d6:8a:f4:22:7b:44:35:5e:f9:bb:4d:2d:ae:bf:1b:b5:9e:db:
33:ca:74:df:b2:1c:ea:53:a9:f3:a0:3e:a4:e0:e3:00:8a:6c:
27:1b:42:bd:4c:77:64:a7:d1:32:28:38:1f:18:ec:ec:48:eb:
ba:17:1b:0d:b7:af:2d:b6:69:0b:ed:ab:76:4f:54:88:cd:ba:
27:d2:03:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy
QzM4OEIxMEMwHhcNMjYwOTE4MTgwNzM1WhcNMjYwOTI1MTgwNzM1WjAYMRYwFAYD
VQQDEw02YWFkN2RlNy0wNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6ejiMkF8p9RaDl8cuM5cTGs7zNcGBnx8UJ56v8j6TQ4lsPqOhU/34Vt1Q1E
lVkHCNOA8XoTLlYQijOtHGoYs5snrXmqDcFDEVlsMjhv8sYlq6677Vy4IEQDaeaH
UfPv8wsIbnL7QSLqXueRvuMTyJWnoMoqR9U4tUCItbySEvEoEWNkG5i1cuWl9OMs
hbZU9oheOZRuttpMRzHupMRMmksbJ/3KP1vuftBPuMog20Wes0sffPgzncpGYnIo
4W8LPmSR80jtrALXmQGNN330DBO5g2SbdPKjhcY9/KBUrjFXNAmofU1EqGUu5Br9
ZHCXFAo3jHY6NNdMivYOE2jqywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPT9dArw
O3tZropLPQnKStVgUX3LMB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1
MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNBMy8yMDkxREM4RTA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUy
WFFWT2piNlE4MDhzT0lzUXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgkZsSqCgaqXkRj7Ox94qqFneJ1U2llF8d8GVcrgmAQwPX7taz6izx7d4Eht2
lwBxS/4YYkQ/zHxSxGmCdialOcS9bWTjwk49gClRbBKqhAlNuv1emfx53t8eG6VS
H5+vp6HCvz0zddXc+FE1SykqjYWsz6Hqw5l6EKflw78gTgkX/tUSdTjdAtcG9NFY
GZLtEN5BMldD5VuNpkEYPA2/G2NHWUfS9rmP1TdhazxB2xJ1qie51or0IntENV75
u00trr8btZ7bM8p037Ic6lOp86A+pODjAIpsJxtCvUx3ZKfRMig4Hxjs7Ejruhcb
DbevLbZpC+2rdk9UiM26J9IDtg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:26:59 2026 by rpki-client