
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier: ai1rI9qXPcLvj2QzKzl0wzvlBZ3eoiYpwZaQznhZFPM=
Subject key identifier: 47:1C:23:4D:14:53:D1:FB:D0:96:CE:0A:43:B5:22:38:34:F3:C1:ED
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial: 026B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number: 0259
Signing time: Wed 07 Oct 2026 02:44:19 +0000
Manifest this update: Wed 07 Oct 2026 02:44:19 +0000
Manifest next update: Wed 14 Oct 2026 02:44:19 +0000
Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: rH8I0ad6ud3ZgjxudB4/pErFQyLM+V6RQKVO2aG1sxI=)
2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: oIFWU2U3FpoDzzLzWPnxsOr677OIj+OUoCa9oBm5yVg=)
3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: pEZ4PzrQv6b6ndP0HpfE6ghr1BZrsxRE21MGz3Ej87E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 619 (0x26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Validity
Not Before: Oct 7 02:44:19 2026 GMT
Not After : Oct 14 02:44:19 2026 GMT
Subject: CN=6ac5b203-109d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:76:68:68:d9:50:b9:02:a9:dc:5b:27:07:
a3:07:12:13:88:be:12:79:86:e8:7a:52:04:ab:57:
07:06:bd:b6:d4:cf:12:0d:bb:56:b8:20:ea:18:04:
b2:f5:de:41:05:73:2b:2e:c7:7a:ef:7f:8a:c5:72:
3a:b5:e7:ac:b9:10:ad:58:21:dd:d4:f2:ed:e5:8d:
cd:22:e5:95:9a:67:5d:82:e1:c9:40:da:fc:e0:a0:
5f:bb:f2:92:db:f4:44:73:6b:c5:e6:00:94:b9:4e:
ef:12:79:8a:8f:de:00:3d:65:9c:12:71:fc:63:67:
71:a2:88:a5:a5:0e:4f:5b:19:a8:78:36:f4:e1:91:
64:bb:ff:88:a8:e3:45:62:03:9e:3b:c0:36:f0:d6:
96:9e:e3:51:82:38:cb:a1:03:6e:ab:8a:f7:06:a8:
50:80:4e:e3:35:cc:8d:f1:da:34:eb:85:cb:43:ad:
ac:de:b3:0d:99:89:e3:79:9d:d0:ae:f4:c1:f3:b9:
c8:14:c5:67:25:05:2e:15:9c:5d:a4:29:26:46:8e:
0f:50:31:d0:7e:ca:5b:39:6b:b4:74:62:c6:38:d3:
fa:ad:86:ef:08:10:f4:45:dc:53:c3:3b:b8:cf:b2:
a6:1b:e9:82:88:43:be:b4:5f:77:35:94:4e:24:85:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:23:4D:14:53:D1:FB:D0:96:CE:0A:43:B5:22:38:34:F3:C1:ED
X509v3 Authority Key Identifier:
keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:1a:9e:83:6d:0f:26:9d:20:af:7f:51:9a:0a:07:25:9b:41:
34:6d:92:90:83:ab:06:59:ff:90:71:e4:bb:6d:70:ea:0e:bb:
e1:80:d3:3e:40:10:e3:dd:77:3d:d2:20:1c:60:5e:61:87:fa:
f6:82:51:6b:54:4b:e0:8c:e0:1b:7f:2d:cd:97:66:2a:0d:9a:
71:ce:19:04:9c:02:a1:4c:a6:84:8c:b9:e9:69:40:85:de:bb:
ee:6f:48:14:63:d1:86:3a:69:9a:c4:f8:a0:dc:9b:db:4b:e4:
70:b2:f7:ef:aa:0c:19:78:90:45:5f:74:dd:49:3a:09:66:67:
2c:b2:49:1b:69:4e:09:de:f0:e7:78:33:a4:73:92:5d:c2:66:
ce:70:53:ac:dd:16:c6:cb:a6:b1:c0:4f:99:86:9e:78:5f:7a:
97:46:15:72:fc:a1:48:2d:c1:df:d7:3c:9a:2c:bf:a7:51:0f:
27:fd:83:91:90:a7:96:01:ec:ee:c6:27:b7:25:73:d9:a8:9c:
0a:d8:ab:98:71:dc:47:43:62:f2:d3:77:e3:56:74:71:dc:9c:
77:4b:0d:91:63:a5:f6:44:99:4b:be:5c:34:23:f1:ee:3b:f1:
96:87:79:35:d0:23:7e:20:0b:0f:fd:ff:78:29:13:fb:2d:ed:
59:8d:10:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy
QUJEQjQ0RTMwHhcNMjYxMDA3MDI0NDE5WhcNMjYxMDE0MDI0NDE5WjAYMRYwFAYD
VQQDEw02YWM1YjIwMy0xMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3O12aGjZULkCqdxbJwejBxITiL4SeYboelIEq1cHBr221M8SDbtWuCDqGASy
9d5BBXMrLsd673+KxXI6teesuRCtWCHd1PLt5Y3NIuWVmmddguHJQNr84KBfu/KS
2/REc2vF5gCUuU7vEnmKj94APWWcEnH8Y2dxooilpQ5PWxmoeDb04ZFku/+IqONF
YgOeO8A28NaWnuNRgjjLoQNuq4r3BqhQgE7jNcyN8do064XLQ62s3rMNmYnjeZ3Q
rvTB87nIFMVnJQUuFZxdpCkmRo4PUDHQfspbOWu0dGLGONP6rYbvCBD0RdxTwzu4
z7KmG+mCiEO+tF93NZROJIV+kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEccI00U
U9H70JbOCkO1Ijg088HtMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz
NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz
TWFNN1hyZnFfR3NxdmJST00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABRqeg20PJp0gr39RmgoHJZtBNG2SkIOrBln/kHHku21w6g674YDTPkAQ4913
PdIgHGBeYYf69oJRa1RL4IzgG38tzZdmKg2acc4ZBJwCoUymhIy56WlAhd677m9I
FGPRhjppmsT4oNyb20vkcLL376oMGXiQRV903Uk6CWZnLLJJG2lOCd7w53gzpHOS
XcJmznBTrN0WxsumscBPmYaeeF96l0YVcvyhSC3B39c8miy/p1EPJ/2DkZCnlgHs
7sYntyVz2aicCtirmHHcR0Ni8tN341Z0cdycd0sNkWOl9kSZS75cNCPx7jvxlod5
NdAjfiALD/3/eCkT+y3tWY0QPQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:01:19 2026 by rpki-client