
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json)
Hash identifier: RyEKmB8wGVnMEPaExnPh2TUQBoH4UnqbQQw/+vssyQg=
Subject key identifier: FE:7C:3B:33:E0:F3:D0:0F:48:0D:54:82:75:12:D9:49:80:EB:F8:F8
Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Certificate serial: 04AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
Manifest number: 049D
Signing time: Sun 11 Oct 2026 00:04:28 +0000
Manifest this update: Sun 11 Oct 2026 00:04:27 +0000
Manifest next update: Sun 18 Oct 2026 00:04:27 +0000
Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: 8c7er+OIUrkOgYFebnQO91k8YvYQnPD/XzMjjVuyqtU=)
2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: ZgTDAqJuWTqg5a+cwxQv+P4kHAUdq+ZFgMxWzkPMWYc=)
3: qQKMj7mufvubqOBxlzgTv_MTy7E.asa (hash: cnWxrPBGq3u7cR+J5jct2rCoWApxFXgDzletqk7VGOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Validity
Not Before: Oct 11 00:04:27 2026 GMT
Not After : Oct 18 00:04:27 2026 GMT
Subject: CN=6acad28c-1f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:9a:46:af:64:fa:22:6c:83:c0:a2:78:ee:
6b:8f:78:10:43:08:11:a9:9d:4d:18:ed:a1:35:44:
bf:08:d0:a4:75:44:33:4a:3f:3e:d3:ed:89:21:aa:
38:15:bb:a8:61:40:dd:11:0c:64:29:d7:19:f0:bb:
34:f7:af:7c:a0:fc:30:84:38:b4:b2:ae:86:9c:93:
52:22:60:81:42:00:b2:1b:c3:f2:86:43:48:6c:91:
66:59:96:8b:68:cc:fe:5d:3c:f0:57:b9:fd:f2:2c:
39:9f:70:12:fb:f5:53:cd:58:97:f1:7f:e3:0b:dd:
a1:dd:f3:02:dd:07:4d:f7:4e:1f:85:4a:f3:84:7c:
75:fd:d1:fc:55:be:fa:59:b8:fd:f8:59:eb:35:12:
47:80:3a:a6:59:6a:62:14:47:44:cb:e9:f1:e8:3a:
86:4d:b6:fb:7b:8a:05:8e:c9:99:34:eb:57:f4:c5:
62:19:78:d0:0f:ef:92:ab:0b:bb:95:b2:8d:8b:b8:
68:e9:36:6d:08:1c:0d:5e:36:a7:6c:75:64:10:8f:
34:37:e1:fe:7c:ff:e6:0e:8a:02:49:2b:76:3a:55:
fb:43:46:32:d1:1e:49:9b:86:ab:be:d7:ba:d6:55:
fb:0b:a9:fe:ab:84:5a:cc:84:81:22:66:d7:10:eb:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7C:3B:33:E0:F3:D0:0F:48:0D:54:82:75:12:D9:49:80:EB:F8:F8
X509v3 Authority Key Identifier:
keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:35:fa:f2:92:b8:f0:a6:d1:06:71:9b:1a:cd:a5:92:c7:94:
9a:af:e5:d9:8a:07:a8:27:09:22:6a:45:17:31:62:e6:9c:83:
a2:c8:d4:b8:54:68:00:4f:5d:e9:ba:8e:14:ed:20:74:84:18:
ab:82:e7:7b:a6:9a:d1:b0:6b:62:dd:42:94:63:d2:ef:48:52:
d3:59:9c:17:0c:7b:79:9c:17:52:51:eb:41:cf:f0:df:27:12:
27:66:67:13:e2:0f:ea:d5:35:54:43:f6:c1:e2:45:ce:e8:c5:
a0:a6:d1:df:c0:ef:f5:ca:34:e0:c2:09:a1:a0:bc:0a:f0:df:
4f:07:bf:11:86:14:f1:9d:05:54:1e:e3:e6:d8:8c:de:ca:47:
70:cb:95:3e:1e:1d:83:ae:c7:fc:be:a5:02:c4:81:d7:14:56:
81:26:55:e4:3e:43:01:55:ca:43:ba:d5:10:45:c1:a9:76:68:
71:28:e7:82:8f:89:b5:c9:6f:17:34:32:28:81:e6:e4:f8:e0:
4b:8a:36:67:08:c7:5c:b5:d1:93:42:04:a1:9c:01:39:d7:9a:
66:60:6e:bc:57:15:a0:a6:39:24:3a:62:e8:12:72:5e:9b:3d:
3a:08:d5:54:97:86:b9:fe:cd:ed:04:16:d7:d8:21:06:ea:08:
84:52:ca:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFEOTExMTAvBgNVBAUTKDcwNTU4MUQ0MEM5NTgxQTI2NTFFNTMyNTIzOERCM0JE
Q0IzQTdEMDUwHhcNMjYxMDExMDAwNDI3WhcNMjYxMDE4MDAwNDI3WjAYMRYwFAYD
VQQDEw02YWNhZDI4Yy0xZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA12CaRq9k+iJsg8CieO5rj3gQQwgRqZ1NGO2hNUS/CNCkdUQzSj8+0+2JIao4
FbuoYUDdEQxkKdcZ8Ls09698oPwwhDi0sq6GnJNSImCBQgCyG8PyhkNIbJFmWZaL
aMz+XTzwV7n98iw5n3AS+/VTzViX8X/jC92h3fMC3QdN904fhUrzhHx1/dH8Vb76
Wbj9+FnrNRJHgDqmWWpiFEdEy+nx6DqGTbb7e4oFjsmZNOtX9MViGXjQD++Sqwu7
lbKNi7ho6TZtCBwNXjanbHVkEI80N+H+fP/mDooCSSt2OlX7Q0Yy0R5Jm4arvte6
1lX7C6n+q4RazISBImbXEOv76wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP58OzPg
89APSA1UgnUS2UmA6/j4MB8GA1UdIwQYMBaAFHBVgdQMlYGiZR5TJSONs73LOn0F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ5MS81RDhDMTcxMkEw
NDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5VmdhSmxIbE1sSTQyenZjczZm
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NGV0IxQXlWZ2FKbEhsTWxJNDJ6dmNzNmZRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUQ5MS81RDhDMTcxMkEwNDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5Vmdh
SmxIbE1sSTQyenZjczZmUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALzX68pK48KbRBnGbGs2lkseUmq/l2YoHqCcJImpFFzFi5pyDosjUuFRoAE9d
6bqOFO0gdIQYq4Lne6aa0bBrYt1ClGPS70hS01mcFwx7eZwXUlHrQc/w3ycSJ2Zn
E+IP6tU1VEP2weJFzujFoKbR38Dv9co04MIJoaC8CvDfTwe/EYYU8Z0FVB7j5tiM
3spHcMuVPh4dg67H/L6lAsSB1xRWgSZV5D5DAVXKQ7rVEEXBqXZocSjngo+Jtclv
FzQyKIHm5PjgS4o2ZwjHXLXRk0IEoZwBOdeaZmBuvFcVoKY5JDpi6BJyXps9OgjV
VJeGuf7N7QQW19ghBuoIhFLKHA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:17:34 2026 by rpki-client