
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
File: ijL6yit6Kieb3e2pT1iNAGddgKQ.mft (raw, json)
Hash identifier: +b0LvvFwZoOxO6NDUhe/3ZJK4Gr6bquPsKppZR444Hs=
Subject key identifier: C1:1D:4D:E2:2D:62:20:8D:67:0C:83:79:56:D1:EA:1D:ED:66:B7:E7
Authority key identifier: 8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
Certificate issuer: /CN=A91D6835/serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
Manifest number: 86
Signing time: Fri 09 Oct 2026 08:24:20 +0000
Manifest this update: Fri 09 Oct 2026 08:24:20 +0000
Manifest next update: Fri 16 Oct 2026 08:24:20 +0000
Files and hashes: 1: ijL6yit6Kieb3e2pT1iNAGddgKQ.crl (hash: iV35oPqYkesNDC61XJV6cCuaB+Q03Ef3XNiwNvE4lik=)
2: 8F628C6C000E11F1B0B593243F6F56BC.roa (hash: +uCC4RxvvM2jLwWeFZZmtoCiHRrr+bxpylbILtMobiQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6835, serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4
Validity
Not Before: Oct 9 08:24:20 2026 GMT
Not After : Oct 16 08:24:20 2026 GMT
Subject: CN=6ac8a4b4-2dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:18:d6:d1:30:a8:9a:9d:99:78:eb:5d:af:
91:6d:76:26:2b:1d:33:26:a8:59:b7:8d:ee:42:4e:
a2:f6:3c:eb:58:e7:7b:c3:1b:0e:08:b0:11:65:22:
3f:72:f8:9a:89:6a:da:02:64:78:ad:0e:02:50:27:
4e:5c:60:f1:38:f4:46:32:86:bb:b7:a5:93:95:d0:
11:bf:4e:8b:35:43:45:54:64:33:bd:c9:75:a2:49:
48:7b:9e:1f:de:00:37:47:fe:48:a0:b8:56:1b:6e:
5c:bc:9b:21:e2:91:1d:97:50:85:1f:8a:b4:fa:79:
a2:4e:a0:56:47:e3:87:f5:59:47:78:d8:e4:a1:a2:
03:e4:88:2c:7e:6d:12:a2:19:f2:48:c5:db:69:68:
69:87:95:8c:9d:ca:18:bd:dc:49:55:31:f2:ce:1b:
ab:f6:ff:03:a3:91:d3:1b:b8:97:eb:4c:f2:cd:72:
32:99:b2:5b:1f:fe:e2:1a:11:82:4e:71:9b:f4:93:
c6:65:5e:ca:08:d9:00:2f:bf:f0:ae:80:87:0e:75:
09:5f:c3:1e:f2:c1:67:65:ab:1b:d0:e3:6a:e7:f0:
58:46:71:8f:0e:e5:f9:46:70:2b:a3:e2:89:83:dc:
ee:21:7f:ed:6d:95:63:42:8e:22:29:4b:82:a9:2c:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1D:4D:E2:2D:62:20:8D:67:0C:83:79:56:D1:EA:1D:ED:66:B7:E7
X509v3 Authority Key Identifier:
keyid:8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:df:94:2c:22:ee:06:c5:af:83:33:45:4d:df:16:33:ac:1e:
91:e3:aa:e5:f6:0c:3f:5d:23:8a:21:27:39:02:2b:cf:71:68:
bc:9f:01:26:8d:2d:22:a8:08:6b:0a:fb:60:f0:b1:db:f5:96:
5d:a1:05:36:b1:cc:88:92:3e:57:db:5f:fc:b7:f2:19:35:b1:
17:13:86:6c:a2:5a:bf:f7:1e:ea:7d:7d:e3:e0:9b:26:58:2d:
42:09:8b:61:1a:ee:f3:15:93:11:9c:5c:ca:b2:8e:00:25:19:
13:3d:f5:5a:90:1c:07:0e:eb:6e:4c:be:1c:d4:15:a8:07:16:
5c:1e:ef:2c:04:c0:11:1a:c8:f4:2e:0c:63:7f:93:09:1b:33:
1c:e7:6a:45:ae:f3:f9:db:6f:ac:71:7f:10:8e:45:b5:ab:2a:
16:56:95:32:f2:86:aa:53:5f:fd:f8:9e:7d:d4:fc:60:1d:cd:
11:f8:64:f7:94:9c:94:28:57:f1:be:bd:f9:a6:d0:d6:fe:6c:
5f:b2:9f:8d:c2:90:38:91:cd:53:7a:52:cf:f4:11:52:90:a2:
eb:1f:e8:c8:a2:d2:83:a4:36:46:c4:d9:c9:e2:a2:b1:b7:6b:
e1:28:98:30:90:4e:f7:22:81:84:03:b7:d9:18:7a:e9:50:60:
46:3f:ad:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY4MzUxMTAvBgNVBAUTKDhBMzJGQUNBMkI3QTJBMjc5QkRERURBOTRGNTg4RDAw
Njc1RDgwQTQwHhcNMjYxMDA5MDgyNDIwWhcNMjYxMDE2MDgyNDIwWjAYMRYwFAYD
VQQDEw02YWM4YTRiNC0yZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzv8Y1tEwqJqdmXjrXa+RbXYmKx0zJqhZt43uQk6i9jzrWOd7wxsOCLARZSI/
cviaiWraAmR4rQ4CUCdOXGDxOPRGMoa7t6WTldARv06LNUNFVGQzvcl1oklIe54f
3gA3R/5IoLhWG25cvJsh4pEdl1CFH4q0+nmiTqBWR+OH9VlHeNjkoaID5Igsfm0S
ohnySMXbaWhph5WMncoYvdxJVTHyzhur9v8Do5HTG7iX60zyzXIymbJbH/7iGhGC
TnGb9JPGZV7KCNkAL7/wroCHDnUJX8Me8sFnZasb0ONq5/BYRnGPDuX5RnAro+KJ
g9zuIX/tbZVjQo4iKUuCqSxYnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEdTeIt
YiCNZwyDeVbR6h3tZrfnMB8GA1UdIwQYMBaAFIoy+soreionm93tqU9YjQBnXYCk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjgzNS80NjVDRjVBMjAw
MEUxMUYxQTZCMzE0OEIzRTZGNTZCQy9pakw2eWl0NktpZWIzZTJwVDFpTkFHZGRn
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lqTDZ5aXQ2S2llYjNlMnBUMWlOQUdkZGdLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjgzNS80NjVDRjVBMjAwMEUxMUYxQTZCMzE0OEIzRTZGNTZCQy9pakw2eWl0Nktp
ZWIzZTJwVDFpTkFHZGRnS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXt+ULCLuBsWvgzNFTd8WM6wekeOq5fYMP10jiiEnOQIrz3FovJ8BJo0tIqgI
awr7YPCx2/WWXaEFNrHMiJI+V9tf/LfyGTWxFxOGbKJav/ce6n194+CbJlgtQgmL
YRru8xWTEZxcyrKOACUZEz31WpAcBw7rbky+HNQVqAcWXB7vLATAERrI9C4MY3+T
CRszHOdqRa7z+dtvrHF/EI5FtasqFlaVMvKGqlNf/fiefdT8YB3NEfhk95SclChX
8b69+abQ1v5sX7KfjcKQOJHNU3pSz/QRUpCi6x/oyKLSg6Q2RsTZyeKisbdr4SiY
MJBO9yKBhAO32Rh66VBgRj+tcw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:56:48 2026 by rpki-client