
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier: BAIOucuYHXkFuQeIB+NIMNLT02DeX9jQS3yXxTj6mac=
Subject key identifier: 90:F3:D8:85:4D:F6:DA:8A:F9:8F:83:77:0D:4E:61:D4:C4:A4:09:32
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 037C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number: 036C
Signing time: Sun 01 Nov 2026 01:26:37 +0000
Manifest this update: Sun 01 Nov 2026 01:26:37 +0000
Manifest next update: Sun 08 Nov 2026 01:26:37 +0000
Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: 7Hf6m/8zIxe8jhYPWCLyx0qofEEvzcI3y+5uPOvhraA=)
2: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: tk4c7G833HPeAT7xsQ2QRS5FqGHMrz9NZ4mUp7MbCLo=)
3: 834FFE88679911EEB8243436C4F9AE02.roa (hash: /XrFkp538mkdImpdeQlJ9CZ/LmuWEPqGTmqkDlHmP7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 01:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892 (0x37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: Nov 1 01:26:37 2026 GMT
Not After : Nov 8 01:26:37 2026 GMT
Subject: CN=6ae6954d-2605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:b6:2f:a7:93:52:16:07:a1:70:2f:e7:84:
9b:72:aa:8d:be:c7:15:a9:d3:e2:0d:2a:4e:7c:88:
55:70:cb:4a:81:70:e5:c2:24:3f:4a:ff:62:96:93:
a1:87:20:70:90:89:9e:02:67:35:6a:fb:e1:cb:6d:
ad:db:13:5d:82:d3:e4:68:9a:3e:25:b0:99:02:1f:
e3:47:f6:61:d5:11:e5:92:cc:16:63:c4:a4:d5:ea:
be:71:b1:44:94:e1:03:21:43:2a:4c:a6:94:6a:cd:
46:6c:d8:3b:90:b1:af:c2:2d:81:ef:51:53:e8:37:
2c:f2:c7:53:5b:52:16:ce:91:4b:9b:19:58:00:1c:
41:df:15:19:9f:b3:2e:70:3e:d3:46:fb:18:3b:1d:
54:f1:18:c1:47:6e:bc:3e:9d:76:41:a4:bd:b7:61:
c9:80:f2:b3:ea:2b:2e:a4:0d:13:1b:8c:3e:f4:1b:
de:41:88:20:dc:a2:06:3c:ef:b9:b6:e0:f4:96:d6:
e2:d8:75:34:f3:dd:7a:8b:18:37:63:e1:97:43:40:
e5:46:8d:9f:49:a9:26:2c:95:8d:a7:14:b2:c2:ca:
5d:99:12:84:f2:b2:5c:5f:5d:bb:1a:7f:e5:23:4c:
59:5f:6e:08:89:e9:bf:60:09:83:e2:f6:c4:c1:41:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F3:D8:85:4D:F6:DA:8A:F9:8F:83:77:0D:4E:61:D4:C4:A4:09:32
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:f4:8e:2d:d4:49:9a:a7:58:cb:3c:1c:af:1f:3e:61:0a:f5:
cc:c2:07:9e:a6:0a:20:40:f0:8f:f8:57:23:c2:10:32:f7:74:
f3:0b:31:d2:85:24:90:70:b7:d0:4d:07:9c:0c:fb:b2:4e:7a:
73:8a:ab:67:0c:1a:22:3c:ea:9f:de:29:53:3c:fa:0d:a9:75:
dc:7b:ba:14:ad:d1:81:31:18:89:2f:5a:6f:8c:be:81:e3:83:
48:f2:ed:73:02:24:8d:3a:1f:87:0a:85:34:12:ec:21:ae:ab:
6e:ac:29:a5:87:24:b1:58:fe:d3:ad:ad:52:75:16:a9:17:c6:
37:68:67:4d:60:29:75:9b:fc:a6:d3:16:33:8b:48:da:e0:c9:
84:4d:91:f5:dd:f6:45:69:83:6b:83:da:a4:77:73:e9:3f:84:
72:81:38:a3:43:44:fe:dd:99:8c:ce:aa:6d:1b:eb:b8:fa:23:
21:c4:ec:d4:56:2c:6a:df:23:52:f2:1f:a2:ec:41:ec:aa:e7:
98:dd:38:ff:e6:52:24:76:8e:fb:76:d2:6a:c2:56:7f:7f:07:
48:f7:3b:d4:6f:f9:71:e9:54:c2:c4:37:49:0e:96:fc:c8:84:
af:9e:4d:d2:87:ca:64:8d:bd:28:2d:ec:b1:4e:d6:de:be:33:
12:2a:28:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy
QjNEQUExOTQwHhcNMjYxMTAxMDEyNjM3WhcNMjYxMTA4MDEyNjM3WjAYMRYwFAYD
VQQDEw02YWU2OTU0ZC0yNjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5e2L6eTUhYHoXAv54SbcqqNvscVqdPiDSpOfIhVcMtKgXDlwiQ/Sv9ilpOh
hyBwkImeAmc1avvhy22t2xNdgtPkaJo+JbCZAh/jR/Zh1RHlkswWY8Sk1eq+cbFE
lOEDIUMqTKaUas1GbNg7kLGvwi2B71FT6Dcs8sdTW1IWzpFLmxlYABxB3xUZn7Mu
cD7TRvsYOx1U8RjBR268Pp12QaS9t2HJgPKz6isupA0TG4w+9BveQYgg3KIGPO+5
tuD0ltbi2HU08916ixg3Y+GXQ0DlRo2fSakmLJWNpxSywspdmRKE8rJcX127Gn/l
I0xZX24Iiem/YAmD4vbEwUEMzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDz2IVN
9tqK+Y+Ddw1OYdTEpAkyMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5
NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3
ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE/SOLdRJmqdYyzwcrx8+YQr1zMIHnqYKIEDwj/hXI8IQMvd08wsx0oUkkHC3
0E0HnAz7sk56c4qrZwwaIjzqn94pUzz6Dal13Hu6FK3RgTEYiS9ab4y+geODSPLt
cwIkjTofhwqFNBLsIa6rbqwppYcksVj+062tUnUWqRfGN2hnTWApdZv8ptMWM4tI
2uDJhE2R9d32RWmDa4PapHdz6T+EcoE4o0NE/t2ZjM6qbRvruPojIcTs1FYsat8j
UvIfouxB7KrnmN04/+ZSJHaO+3bSasJWf38HSPc71G/5celUwsQ3SQ6W/MiEr55N
0ofKZI29KC3ssU7W3r4zEioohw==
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:58:06 2026 by rpki-client