
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json)
Hash identifier: 0F+L9NYQjYDJpj04F0jQqi6aUCp3P7A4gmXQNpYGBR0=
Subject key identifier: C7:D0:0A:B5:5C:B4:F7:31:92:A9:92:EF:0F:75:FE:C0:AA:48:3C:22
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
Manifest number: 01A8
Signing time: Mon 19 Oct 2026 04:45:51 +0000
Manifest this update: Mon 19 Oct 2026 04:45:50 +0000
Manifest next update: Mon 26 Oct 2026 04:45:50 +0000
Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: hbSOTEXBrd9HwubBuh9NEOB2PXnJL5E7OHsQbmkgLS8=)
2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: XlfXtiHFNX7/67H2UR1inFOAMG5dLCk4KBq/ZXW7m4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 04:45:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Validity
Not Before: Oct 19 04:45:50 2026 GMT
Not After : Oct 26 04:45:50 2026 GMT
Subject: CN=6ad5a07f-1fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:50:6f:57:12:8a:0b:ce:68:e5:22:9f:d9:
1c:0b:9c:5b:e2:74:84:4b:5f:bd:bd:6d:df:c1:95:
92:47:c2:f6:52:84:f3:18:c3:d5:27:89:7c:0a:86:
a0:3a:ee:68:b6:1f:65:3e:1f:d0:00:ef:0c:48:15:
42:eb:df:28:8e:a1:7b:1d:de:35:e3:27:3f:8b:46:
dd:c2:f7:fa:ec:e5:40:dd:15:d1:73:c9:aa:52:2e:
a5:a4:87:61:5a:ff:d8:8f:d2:9b:5b:a5:0c:0d:c2:
80:bb:4c:23:60:5d:1d:3e:8b:99:68:28:78:31:83:
2a:c1:9c:8f:83:33:11:34:1c:7f:d0:a3:e0:ab:08:
03:e4:4b:f1:de:f8:0b:d3:cc:95:47:99:7a:e3:1e:
e6:f9:2b:f1:af:8d:68:ab:77:72:2e:a7:37:02:5f:
da:a7:e4:60:95:ed:f5:f4:5d:f8:f1:04:f1:7d:0b:
b3:0e:a2:d3:49:ae:62:ce:4c:fc:20:d0:99:1e:bc:
c2:50:ff:78:5e:38:3b:83:c9:7a:67:e1:1e:3b:32:
88:06:2d:41:94:92:c9:75:97:8c:69:07:60:cc:7e:
ea:59:7e:1a:a3:9e:a9:62:7c:d3:6d:2e:f7:8a:40:
f8:eb:8e:37:71:ce:65:59:20:eb:d0:ed:d1:c3:9f:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D0:0A:B5:5C:B4:F7:31:92:A9:92:EF:0F:75:FE:C0:AA:48:3C:22
X509v3 Authority Key Identifier:
keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4d:0f:b6:90:77:85:58:4a:a2:bb:65:4e:9d:02:bf:c2:f4:
b0:5d:82:f5:87:b8:c1:fc:70:ab:85:f9:03:b5:42:48:3c:f8:
6a:55:48:40:32:91:21:60:b2:b1:3b:b3:27:0c:44:26:47:ee:
cb:4c:b0:0e:83:83:1b:77:6d:3f:4c:a9:fc:01:41:d0:89:82:
77:b7:6e:cc:a5:2d:08:4f:3b:7c:d6:8a:6b:57:d5:72:8e:8c:
99:c0:92:6b:fb:2a:e8:0c:fb:36:14:94:d9:6b:01:c5:13:1f:
c9:81:a1:0a:99:2e:89:8f:16:8f:c9:67:88:3f:44:f4:c3:65:
94:df:35:a4:1d:54:18:2e:51:85:fe:e6:ac:36:c3:9c:a1:c5:
49:96:b6:6e:fe:96:b9:cd:eb:69:86:4f:ac:55:f8:8a:20:70:
33:44:53:52:8d:e6:41:20:c8:ae:6c:e7:0f:eb:1a:c9:a0:1e:
8f:cc:8b:a1:a0:54:8b:13:c8:b3:8f:a1:a5:18:cb:55:3a:fc:
b9:5f:1a:80:44:b1:1c:4e:2c:ad:f7:db:54:69:f8:3e:dd:89:
ca:79:e9:f6:aa:49:22:84:53:f4:7c:a6:66:c2:b6:54:f2:5c:
9b:06:2c:c8:99:0e:68:aa:de:4b:ba:2e:99:6f:33:7c:c1:93:
6a:ec:de:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5
OEQ0RUJEMUQwHhcNMjYxMDE5MDQ0NTUwWhcNMjYxMDI2MDQ0NTUwWjAYMRYwFAYD
VQQDEw02YWQ1YTA3Zi0xZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9lQb1cSigvOaOUin9kcC5xb4nSES1+9vW3fwZWSR8L2UoTzGMPVJ4l8Coag
Ou5oth9lPh/QAO8MSBVC698ojqF7Hd414yc/i0bdwvf67OVA3RXRc8mqUi6lpIdh
Wv/Yj9KbW6UMDcKAu0wjYF0dPouZaCh4MYMqwZyPgzMRNBx/0KPgqwgD5Evx3vgL
08yVR5l64x7m+Svxr41oq3dyLqc3Al/ap+Rgle319F348QTxfQuzDqLTSa5izkz8
INCZHrzCUP94Xjg7g8l6Z+EeOzKIBi1BlJLJdZeMaQdgzH7qWX4ao56pYnzTbS73
ikD46443cc5lWSDr0O3Rw58vEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfQCrVc
tPcxkqmS7w91/sCqSDwiMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1
QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv
Wml4ZTVvRFAzd3lZMU92UjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtU0PtpB3hVhKortlTp0Cv8L0sF2C9Ye4wfxwq4X5A7VCSDz4alVIQDKRIWCy
sTuzJwxEJkfuy0ywDoODG3dtP0yp/AFB0ImCd7duzKUtCE87fNaKa1fVco6MmcCS
a/sq6Az7NhSU2WsBxRMfyYGhCpkuiY8Wj8lniD9E9MNllN81pB1UGC5Rhf7mrDbD
nKHFSZa2bv6Wuc3raYZPrFX4iiBwM0RTUo3mQSDIrmznD+sayaAej8yLoaBUixPI
s4+hpRjLVTr8uV8agESxHE4srffbVGn4Pt2Jynnp9qpJIoRT9HymZsK2VPJcmwYs
yJkOaKreS7oumW8zfMGTauzeXg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:27:42 2026 by rpki-client