
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json)
Hash identifier: hnKjsUs2/h080MC6tvrQ2DOBR35HmiveyNppbmH/BD0=
Subject key identifier: 35:6F:F8:D0:E9:07:06:CE:C6:14:3F:83:A5:2A:71:44:35:98:3C:56
Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E
Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
Manifest number: 0191
Signing time: Sun 25 Oct 2026 04:53:26 +0000
Manifest this update: Sun 25 Oct 2026 04:53:26 +0000
Manifest next update: Sun 01 Nov 2026 04:53:26 +0000
Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: pUo649uUGww1R967NiR6II3i9H8zIPaCXOsxRzZ74G8=)
2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: ZtI1ULWvNzaGuOxzNApdN7RurMHYNZ/g5Q6BC00hvHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl
rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 04:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E
Validity
Not Before: Oct 25 04:53:26 2026 GMT
Not After : Nov 1 04:53:26 2026 GMT
Subject: CN=6add8b46-934e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:49:c5:21:eb:a0:32:77:65:c3:fe:15:41:
47:a8:9b:0a:2b:1d:a9:aa:6d:eb:cf:b9:8d:55:c9:
02:e1:53:dd:5a:3a:b9:5f:99:6c:c8:04:29:e3:74:
8c:10:33:4c:25:2d:65:a8:f1:5a:1c:1d:f1:8b:79:
e0:68:6b:01:1e:bd:9f:5d:94:00:92:df:7a:db:a9:
57:e4:61:3c:76:3e:ca:99:12:19:f0:d5:e9:91:98:
77:26:84:96:c3:bc:3c:7b:90:f9:2e:cf:3d:2b:9f:
80:b0:a7:97:88:06:dc:f0:47:16:3c:57:04:63:dd:
8a:75:0c:ed:71:15:1a:ae:58:72:39:58:bb:ec:82:
d6:a8:36:42:87:8f:4b:13:bb:da:4f:f9:e0:77:22:
dd:47:f8:8d:a6:65:f4:cb:3d:7a:6f:ff:0d:55:bb:
89:2e:68:aa:51:98:5a:44:13:b8:42:af:bc:64:8c:
d0:8c:5a:c6:15:c1:f5:ae:32:7b:a0:93:57:45:d8:
ca:c0:59:27:4c:11:56:b8:7b:ff:a0:87:98:16:6a:
fc:e8:6a:cc:b2:f3:cd:cf:93:96:98:dc:fd:2a:09:
16:a9:a0:8f:52:c8:3b:71:c4:e0:40:23:d5:d5:26:
63:0e:d5:a4:68:73:33:4b:ba:5e:f3:60:02:53:76:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6F:F8:D0:E9:07:06:CE:C6:14:3F:83:A5:2A:71:44:35:98:3C:56
X509v3 Authority Key Identifier:
keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:94:3c:22:6b:cf:4d:4a:01:8c:21:bd:c3:3f:ac:a8:6f:fd:
33:45:61:3a:d6:5b:b6:74:f1:79:04:5a:f9:ca:cb:63:43:0b:
0c:90:08:52:c0:d6:5e:ce:db:5f:7d:46:5a:f9:7b:2b:4a:be:
24:93:a4:ee:e5:1b:70:f1:5f:b2:40:d8:df:88:09:be:df:89:
6d:0c:26:5f:54:f9:97:0c:2e:90:19:7b:71:70:49:4f:ca:8f:
8d:ca:a2:dc:1e:52:a0:ad:e4:7f:02:7f:e9:ca:c8:a7:88:86:
42:a0:db:73:74:b9:8e:9f:95:ca:7f:e9:a2:26:49:08:7e:9d:
ab:9c:06:9a:c2:e1:8e:78:3b:e7:f3:2d:f7:9a:90:a0:53:18:
6e:ab:db:2d:93:0d:2d:c7:a1:1b:26:96:ec:ad:42:9d:32:37:
4b:3c:93:28:70:66:87:34:d5:e5:2e:e6:e7:05:f7:d8:c1:53:
19:b8:54:00:e4:c3:f0:60:5e:ae:d9:5a:dc:df:aa:aa:fd:e6:
c4:97:72:14:58:8e:19:01:99:0c:c1:68:36:ed:47:7b:29:6c:
51:1c:db:f4:10:32:e9:83:77:ad:60:1c:0a:0b:1b:c8:96:a4:
d7:61:50:05:30:e7:cc:91:69:98:05:76:b6:4b:fa:1f:ef:da:
ad:15:36:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy
NjBCQTk5MEUwHhcNMjYxMDI1MDQ1MzI2WhcNMjYxMTAxMDQ1MzI2WjAYMRYwFAYD
VQQDEw02YWRkOGI0Ni05MzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3LVJxSHroDJ3ZcP+FUFHqJsKKx2pqm3rz7mNVckC4VPdWjq5X5lsyAQp43SM
EDNMJS1lqPFaHB3xi3ngaGsBHr2fXZQAkt9626lX5GE8dj7KmRIZ8NXpkZh3JoSW
w7w8e5D5Ls89K5+AsKeXiAbc8EcWPFcEY92KdQztcRUarlhyOVi77ILWqDZCh49L
E7vaT/ngdyLdR/iNpmX0yz16b/8NVbuJLmiqUZhaRBO4Qq+8ZIzQjFrGFcH1rjJ7
oJNXRdjKwFknTBFWuHv/oIeYFmr86GrMsvPNz5OWmNz9KgkWqaCPUsg7ccTgQCPV
1SZjDtWkaHMzS7pe82ACU3a/8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVv+NDp
BwbOxhQ/g6UqcUQ1mDxWMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw
RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL
NjVhamhsVmd1ZkltQzZtUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG5Q8ImvPTUoBjCG9wz+sqG/9M0VhOtZbtnTxeQRa+crLY0MLDJAIUsDWXs7b
X31GWvl7K0q+JJOk7uUbcPFfskDY34gJvt+JbQwmX1T5lwwukBl7cXBJT8qPjcqi
3B5SoK3kfwJ/6crIp4iGQqDbc3S5jp+Vyn/poiZJCH6dq5wGmsLhjng75/Mt95qQ
oFMYbqvbLZMNLcehGyaW7K1CnTI3SzyTKHBmhzTV5S7m5wX32MFTGbhUAOTD8GBe
rtla3N+qqv3mxJdyFFiOGQGZDMFoNu1HeylsURzb9BAy6YN3rWAcCgsbyJak12FQ
BTDnzJFpmAV2tkv6H+/arRU2NQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 05:50:44 2026 by rpki-client