
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json)
Hash identifier: 9lUNzrx1R3OiUstu2c8jNSbV7m8iJnsHL0TpCtcAJ5g=
Subject key identifier: CC:13:1B:95:9B:92:5C:3D:5A:DD:D5:30:58:7A:FC:A0:5A:91:72:E2
Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE
Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
Certificate serial: 0294
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
Manifest number: 028F
Signing time: Mon 05 Oct 2026 02:04:21 +0000
Manifest this update: Mon 05 Oct 2026 02:04:21 +0000
Manifest next update: Mon 12 Oct 2026 02:04:21 +0000
Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: IlEXhN1rQSg6JblbqmcMoB45kGj3DTp3TyUVfDOW3AQ=)
2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: /M5ng39afjLPfZ5AOS9CJ6KKpMpgabRugCVrFbVwO48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl
rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF0A8, serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE
Validity
Not Before: Oct 5 02:04:21 2026 GMT
Not After : Oct 12 02:04:21 2026 GMT
Subject: CN=6ac305a5-c53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:e7:a2:44:d4:b2:a9:4c:97:ab:98:09:e5:
5e:53:34:6b:5d:31:ae:9f:40:9f:0c:fc:7d:3d:d0:
da:ca:97:cf:08:5a:74:74:9e:7e:3c:02:42:2f:a9:
f2:61:ac:b2:db:36:b2:b8:50:04:b8:a4:a6:e3:c3:
f6:ed:09:c4:63:a8:2b:93:b0:ef:64:f3:4e:2b:59:
3b:ac:a4:90:b7:65:9a:04:ac:c9:fc:c3:39:36:4e:
d6:a6:0d:af:10:bc:cf:55:2a:9f:d9:8b:af:26:04:
6c:38:62:0b:0f:86:98:7f:e1:04:ac:d0:60:58:c0:
88:e9:9d:4d:bd:64:b1:fd:64:68:dd:85:bc:50:e0:
22:a8:61:a6:8b:b7:cc:3c:3b:a1:33:64:8a:89:0c:
71:aa:d7:02:70:b7:8b:eb:54:a3:cf:c1:3a:62:6f:
34:ff:e9:67:4b:6f:1d:77:84:a2:35:a9:19:69:d1:
2c:cf:69:b3:0a:18:9f:5f:19:9c:f3:7c:53:eb:92:
54:25:e6:29:e0:91:fe:56:8e:2d:27:6a:84:8b:4b:
8f:7c:a0:be:14:97:4f:ce:65:2b:06:66:3a:c0:6c:
23:8e:19:d3:d8:cd:02:6f:2c:99:4f:fd:13:d5:97:
74:ab:4c:44:4d:67:82:be:63:8e:cb:36:29:01:a3:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:13:1B:95:9B:92:5C:3D:5A:DD:D5:30:58:7A:FC:A0:5A:91:72:E2
X509v3 Authority Key Identifier:
keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:96:67:d1:b3:ef:e3:38:0f:12:d1:cd:6f:f1:61:d6:b4:82:
c8:5c:a7:5b:43:dd:54:a4:e5:8c:2f:49:a4:e5:53:96:bd:06:
ef:3c:da:06:9c:2f:a0:6d:a4:75:53:59:fd:50:ab:94:f2:19:
9a:ca:2e:8a:ee:ab:6b:b0:e5:93:86:da:d2:97:fa:cc:17:fa:
3e:bb:48:57:6b:b4:f7:8c:e4:a7:39:57:b1:43:1e:fc:09:d3:
93:a2:8c:c7:19:89:56:08:28:62:07:60:d5:fc:be:76:b6:9e:
04:96:11:0d:96:47:43:6b:53:66:4c:58:6c:1a:83:1c:28:a7:
5f:1b:f1:98:5d:93:99:46:08:62:c3:30:d0:e6:27:8b:c4:d5:
e5:44:1d:fb:13:5b:f6:28:6c:ee:c6:20:23:b3:70:c9:c6:40:
39:90:b4:6f:84:27:57:be:c5:0c:5d:0b:f8:42:98:c1:6b:38:
94:2f:bf:f6:61:46:a0:26:9f:20:30:df:dc:c2:c3:ff:ea:d1:
34:e6:01:30:54:d5:1d:35:79:df:d0:7b:04:ce:f2:2b:cb:fa:
b0:83:e1:e4:79:c3:53:b9:e0:fc:b8:fc:d8:1c:7c:63:87:a5:
5a:bd:21:ea:7f:db:aa:f8:da:b1:ef:59:4e:09:7a:b4:c4:0e:
7d:20:61:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy
M0M5Rjk0QUUwHhcNMjYxMDA1MDIwNDIxWhcNMjYxMDEyMDIwNDIxWjAYMRYwFAYD
VQQDEw02YWMzMDVhNS1jNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQ7nokTUsqlMl6uYCeVeUzRrXTGun0CfDPx9PdDaypfPCFp0dJ5+PAJCL6ny
Yayy2zayuFAEuKSm48P27QnEY6grk7DvZPNOK1k7rKSQt2WaBKzJ/MM5Nk7Wpg2v
ELzPVSqf2YuvJgRsOGILD4aYf+EErNBgWMCI6Z1NvWSx/WRo3YW8UOAiqGGmi7fM
PDuhM2SKiQxxqtcCcLeL61Sjz8E6Ym80/+lnS28dd4SiNakZadEsz2mzChifXxmc
83xT65JUJeYp4JH+Vo4tJ2qEi0uPfKC+FJdPzmUrBmY6wGwjjhnT2M0CbyyZT/0T
1Zd0q0xETWeCvmOOyzYpAaM80QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwTG5Wb
klw9Wt3VMFh6/KBakXLiMB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3
NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q
U3c5SmJGYzhrT0VqeWZsSzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlZZn0bPv4zgPEtHNb/Fh1rSCyFynW0PdVKTljC9JpOVTlr0G7zzaBpwvoG2k
dVNZ/VCrlPIZmsouiu6ra7Dlk4ba0pf6zBf6PrtIV2u094zkpzlXsUMe/AnTk6KM
xxmJVggoYgdg1fy+draeBJYRDZZHQ2tTZkxYbBqDHCinXxvxmF2TmUYIYsMw0OYn
i8TV5UQd+xNb9ihs7sYgI7NwycZAOZC0b4QnV77FDF0L+EKYwWs4lC+/9mFGoCaf
IDDf3MLD/+rRNOYBMFTVHTV539B7BM7yK8v6sIPh5HnDU7ng/Lj82Bx8Y4elWr0h
6n/bqvjase9ZTgl6tMQOfSBhcw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:17:17 2026 by rpki-client