
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json)
Hash identifier: 6mx4vO1KIn14Lt8VW02fbximhH61cd8IcSgdr1skpR0=
Subject key identifier: 00:8E:33:FE:F5:1F:F0:01:74:08:AF:70:69:82:0C:FA:32:4C:F4:56
Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
Manifest number: D3
Signing time: Sat 31 Oct 2026 06:51:57 +0000
Manifest this update: Sat 31 Oct 2026 06:51:56 +0000
Manifest next update: Sat 07 Nov 2026 06:51:56 +0000
Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: ahJAzIuLrLxgWBiU4XEVC51LEm2TVmfc1PMjDubX2y0=)
2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: 8wP/NlNE2Z/JRbzUdllp1czpJ2kBXEzpgll4z9yQeFg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 06:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Validity
Not Before: Oct 31 06:51:56 2026 GMT
Not After : Nov 7 06:51:56 2026 GMT
Subject: CN=6ae5900d-faf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:63:95:60:ae:bb:3e:6b:3f:3e:50:45:3a:
27:80:cd:33:8a:46:ef:af:e0:8e:3f:05:7f:8e:96:
1a:6f:52:82:63:07:02:29:77:5b:73:84:9a:d9:ec:
49:c5:3b:c3:7f:2d:32:c5:0d:cb:0f:fd:15:7e:c2:
4d:22:85:9f:0a:d7:b8:e7:50:f4:7e:14:f9:dc:2d:
dd:00:63:48:6c:8f:de:6a:25:70:43:65:e8:fe:c7:
1e:d0:16:ae:8a:8f:1a:3e:ce:c1:11:97:a5:18:54:
aa:08:7b:f7:3a:6e:98:28:4f:e0:4a:e2:a7:0a:aa:
ba:45:56:e4:36:35:df:1c:d0:85:e2:1c:e4:08:c9:
cf:a3:13:f7:05:55:c1:91:5a:e6:0a:a7:f7:ad:fc:
d5:e8:00:42:c1:9c:62:4e:cc:1e:f6:89:02:47:df:
8c:58:4d:2a:ff:4f:c1:8c:8b:79:be:bb:85:50:0d:
f1:32:78:5d:46:d1:8f:8b:a8:cc:be:85:8d:a3:a9:
f2:94:3b:24:8d:84:7d:fe:f8:a9:ee:6e:de:de:ac:
3f:c5:ed:9a:69:c7:75:1b:f6:10:99:13:45:78:79:
0e:7a:c3:68:21:b9:b7:12:04:9f:b6:06:3f:84:ca:
47:5c:97:8b:d3:6d:b8:73:ab:2f:3b:ce:eb:be:3a:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8E:33:FE:F5:1F:F0:01:74:08:AF:70:69:82:0C:FA:32:4C:F4:56
X509v3 Authority Key Identifier:
keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:9d:6c:1f:48:ba:9c:af:54:82:26:97:c8:e0:21:1a:76:81:
3c:fd:51:95:3b:c2:66:46:a5:d4:63:b4:1e:b1:86:64:15:be:
c0:c5:1e:31:29:60:63:2d:10:eb:7d:bf:ed:3e:a1:af:69:5f:
18:9d:00:00:cf:72:52:6a:a9:c6:e2:ff:b1:21:9b:cc:c0:1e:
92:5e:2d:fb:90:c9:80:73:65:ab:58:57:cb:ca:db:b8:ce:9f:
46:a7:e1:0a:65:54:ad:40:34:b2:49:2f:97:34:11:ce:49:d4:
53:d9:dc:3b:31:47:56:43:b4:34:16:b2:28:50:bf:6e:5e:fb:
76:b8:c1:d8:30:44:0e:4e:8d:c3:e2:a5:4e:78:4f:e1:48:21:
4b:0e:8b:11:5b:ff:a9:b0:12:32:84:63:77:82:0e:a5:df:16:
af:37:6e:82:15:3c:50:68:ec:e8:4d:bd:c0:65:6d:af:b3:5f:
93:3a:11:9f:c7:d2:cf:22:c2:6f:7f:49:58:42:6b:0c:49:f8:
4d:62:93:4b:5a:fd:0f:a8:8c:c7:82:34:1d:32:f5:a8:70:df:
13:de:21:c6:b6:14:27:a8:44:9d:b8:e9:8f:28:b2:07:a0:00:
f4:9a:19:2c:c5:92:e5:7e:00:2e:b0:a8:0f:70:bf:a9:ba:b2:
c1:b3:68:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCMDExMTAvBgNVBAUTKDQ0N0Q1OTgzQkYwREI5MTFBRDhGRENCNjc0MTQ1RjZD
NThGODNDRDUwHhcNMjYxMDMxMDY1MTU2WhcNMjYxMTA3MDY1MTU2WjAYMRYwFAYD
VQQDEw02YWU1OTAwZC1mYWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnLVjlWCuuz5rPz5QRTongM0zikbvr+COPwV/jpYab1KCYwcCKXdbc4Sa2exJ
xTvDfy0yxQ3LD/0VfsJNIoWfCte451D0fhT53C3dAGNIbI/eaiVwQ2Xo/sce0Bau
io8aPs7BEZelGFSqCHv3Om6YKE/gSuKnCqq6RVbkNjXfHNCF4hzkCMnPoxP3BVXB
kVrmCqf3rfzV6ABCwZxiTswe9okCR9+MWE0q/0/BjIt5vruFUA3xMnhdRtGPi6jM
voWNo6nylDskjYR9/vip7m7e3qw/xe2aacd1G/YQmRNFeHkOesNoIbm3EgSftgY/
hMpHXJeL0224c6svO87rvjpNeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACOM/71
H/ABdAivcGmCDPoyTPRWMB8GA1UdIwQYMBaAFER9WYO/DbkRrY/ctnQUX2xY+DzV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIwMS8zMkVFMEE2RTk5
RTkxMUYwOTc4RDQwNzJDNEY5QUUwMi9SSDFaZzc4TnVSR3RqOXkyZEJSZmJGajRQ
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUIwMS8zMkVFMEE2RTk5RTkxMUYwOTc4RDQwNzJDNEY5QUUwMi9SSDFaZzc4TnVS
R3RqOXkyZEJSZmJGajRQTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk51sH0i6nK9UgiaXyOAhGnaBPP1RlTvCZkal1GO0HrGGZBW+wMUeMSlgYy0Q
632/7T6hr2lfGJ0AAM9yUmqpxuL/sSGbzMAekl4t+5DJgHNlq1hXy8rbuM6fRqfh
CmVUrUA0skkvlzQRzknUU9ncOzFHVkO0NBayKFC/bl77drjB2DBEDk6Nw+KlTnhP
4UghSw6LEVv/qbASMoRjd4IOpd8WrzdughU8UGjs6E29wGVtr7NfkzoRn8fSzyLC
b39JWEJrDEn4TWKTS1r9D6iMx4I0HTL1qHDfE94hxrYUJ6hEnbjpjyiyB6AA9JoZ
LMWS5X4ALrCoD3C/qbqywbNoYA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:57:56 2026 by rpki-client