
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
File: b9CIejkD49bhe7nP2O8mknC6ywc.mft (raw, json)
Hash identifier: Jf4tPEEfhfa9/Me8o8gzqpMjpuNOiaB8dcd4BAhYuss=
Subject key identifier: 9E:CF:D1:F0:72:A5:7A:9B:BE:16:01:4A:3E:DC:9A:1E:E0:BA:CF:12
Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07
Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
Manifest number: 0162
Signing time: Sun 25 Oct 2026 05:32:24 +0000
Manifest this update: Sun 25 Oct 2026 05:32:23 +0000
Manifest next update: Sun 01 Nov 2026 05:32:23 +0000
Files and hashes: 1: b9CIejkD49bhe7nP2O8mknC6ywc.crl (hash: u+7CkGuFRCvt3aCcKAI5tFmdXgoD+nSj9mTB0DAK/P8=)
2: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (hash: 7y7RETYbuZ100fvQ4OZzDzZF974c+TgTdz2U9WNxBsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl
rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 05:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
Validity
Not Before: Oct 25 05:32:23 2026 GMT
Not After : Nov 1 05:32:23 2026 GMT
Subject: CN=6add9468-d0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:05:0b:46:93:ed:e7:c9:30:f5:97:d6:23:
84:37:6e:89:ca:64:a7:a4:70:c1:9d:9c:4b:6b:89:
8b:4d:09:97:09:98:63:36:a3:ec:8b:f6:d6:6b:82:
82:93:d0:cb:96:77:a1:12:79:cb:34:12:36:ca:24:
b6:9f:ce:53:05:51:34:cd:b7:12:b7:7e:d0:f4:b4:
92:36:2f:f3:17:9e:82:bc:2d:a7:d0:99:74:70:a8:
dc:f9:ea:54:c9:29:07:f4:1d:da:b6:05:f1:b5:c1:
3f:4e:ad:3f:95:45:d6:e3:a0:8c:f0:67:4e:f2:89:
e9:11:e8:4e:4f:32:d8:a8:0d:8f:dd:5f:78:3e:e2:
4c:55:89:ac:cc:61:fe:70:05:3c:6c:fe:5e:af:ed:
03:60:f5:fc:a9:d2:a2:1a:13:d7:f9:4e:37:6b:ce:
88:8a:06:2d:1c:94:c3:de:b9:84:f4:bf:4e:f6:26:
49:dd:42:ab:5d:de:7a:c0:25:d1:b6:96:b6:ac:62:
86:34:b0:36:74:b0:2f:e1:2d:b1:10:c7:6b:38:39:
5e:f8:48:c2:45:8e:e7:fb:e5:af:3a:7c:74:74:b6:
32:0a:3d:8c:09:bc:46:4d:14:04:17:3c:0c:69:b3:
dd:47:4c:11:8f:88:c9:97:2b:e6:42:c5:a0:1c:e4:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:D1:F0:72:A5:7A:9B:BE:16:01:4A:3E:DC:9A:1E:E0:BA:CF:12
X509v3 Authority Key Identifier:
keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:1a:27:4c:f2:19:90:f3:b9:13:02:36:bf:45:e8:e1:a3:6f:
9c:55:d3:d4:f1:9a:c9:0d:58:35:1f:e4:af:64:3b:ad:01:e9:
40:59:4e:03:a4:b7:81:25:7c:c8:bb:a9:6e:e9:17:c7:45:76:
b3:05:39:69:06:13:82:58:52:a6:22:5a:ec:ae:3e:55:78:ab:
6e:7c:67:07:31:66:42:d2:bc:5b:d6:6c:89:43:a5:4a:d0:e2:
d7:b6:32:d8:c1:7c:9a:36:09:45:34:b0:cf:a5:a4:3c:85:8c:
6e:d8:3a:19:83:30:f5:cc:a1:09:4a:83:16:4b:f0:ca:9a:23:
db:c2:ab:23:c8:3f:fd:49:eb:dd:90:db:69:3b:6a:f1:81:69:
76:b4:e0:f2:f2:56:ab:59:8a:ea:23:f9:01:ef:6a:c3:2e:c5:
54:2f:f9:85:ed:97:14:ff:9e:ef:f9:56:66:e0:66:91:cb:32:
83:9a:fa:82:83:02:b5:0b:a4:82:8e:e7:39:ed:46:23:42:80:
1c:fb:9f:8c:7f:f8:01:84:8d:2c:e5:58:81:85:85:7f:6c:4e:
b5:24:f7:35:28:3f:2d:23:ed:58:d9:5e:cf:a3:b0:28:25:23:
81:ac:0a:57:96:a2:ad:0d:1b:0b:09:69:58:7b:2a:b9:c3:30:
44:48:a7:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCRTMxMTAvBgNVBAUTKDZGRDA4ODdBMzkwM0UzRDZFMTdCQjlDRkQ4RUYyNjky
NzBCQUNCMDcwHhcNMjYxMDI1MDUzMjIzWhcNMjYxMTAxMDUzMjIzWjAYMRYwFAYD
VQQDEw02YWRkOTQ2OC1kMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyuIFC0aT7efJMPWX1iOEN26JymSnpHDBnZxLa4mLTQmXCZhjNqPsi/bWa4KC
k9DLlnehEnnLNBI2yiS2n85TBVE0zbcSt37Q9LSSNi/zF56CvC2n0Jl0cKjc+epU
ySkH9B3atgXxtcE/Tq0/lUXW46CM8GdO8onpEehOTzLYqA2P3V94PuJMVYmszGH+
cAU8bP5er+0DYPX8qdKiGhPX+U43a86IigYtHJTD3rmE9L9O9iZJ3UKrXd56wCXR
tpa2rGKGNLA2dLAv4S2xEMdrODle+EjCRY7n++WvOnx0dLYyCj2MCbxGTRQEFzwM
abPdR0wRj4jJlyvmQsWgHOStAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7P0fBy
pXqbvhYBSj7cmh7gus8SMB8GA1UdIwQYMBaAFG/QiHo5A+PW4Xu5z9jvJpJwussH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FNkU2QkU0NEJG
OUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5YmhlN25QMk84bWtuQzZ5
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEJFMy9FNkU2QkU0NEJGOUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5
YmhlN25QMk84bWtuQzZ5d2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdhonTPIZkPO5EwI2v0Xo4aNvnFXT1PGayQ1YNR/kr2Q7rQHpQFlOA6S3gSV8
yLupbukXx0V2swU5aQYTglhSpiJa7K4+VXirbnxnBzFmQtK8W9ZsiUOlStDi17Yy
2MF8mjYJRTSwz6WkPIWMbtg6GYMw9cyhCUqDFkvwypoj28KrI8g//Unr3ZDbaTtq
8YFpdrTg8vJWq1mK6iP5Ae9qwy7FVC/5he2XFP+e7/lWZuBmkcsyg5r6goMCtQuk
go7nOe1GI0KAHPufjH/4AYSNLOVYgYWFf2xOtST3NSg/LSPtWNlez6OwKCUjgawK
V5airQ0bCwlpWHsqucMwREin4g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:57:24 2026 by rpki-client