
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json)
Hash identifier: b6nVDc4SqhuLqaO4pxLlvMU/r31wxlxSoLaCLhm+pT8=
Subject key identifier: 11:9C:13:11:FA:EE:D9:EA:D6:B0:D0:34:82:50:1C:DF:2E:47:29:65
Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
Manifest number: 021F
Signing time: Fri 11 Sep 2026 02:53:58 +0000
Manifest this update: Fri 11 Sep 2026 02:53:57 +0000
Manifest next update: Fri 18 Sep 2026 02:53:57 +0000
Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: 2Fu8/9jqHi2IFI65akuLVJ/bPwawthnc31b/kAsQ0MU=)
2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: CKnFh68MZ6vWZLs6HZZnzt3hxWfZ7SKFfyFAeNeD5aI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Validity
Not Before: Sep 11 02:53:57 2026 GMT
Not After : Sep 18 02:53:57 2026 GMT
Subject: CN=6aa36d45-1368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:63:62:5b:93:33:2f:83:58:a4:3b:71:26:
28:19:0d:9c:6e:5e:cf:a2:76:ef:f4:97:02:0c:33:
87:a3:d7:a1:c1:03:dc:b7:ce:a7:c8:1e:fb:47:bc:
73:e2:1e:b5:ab:fe:5d:6e:50:2b:15:79:6c:60:8a:
91:78:9a:24:d2:44:7d:53:76:9f:fb:a0:e5:73:ba:
d2:2e:2e:28:aa:c0:cd:f8:0e:62:50:dd:9b:95:cb:
84:10:9d:5e:ea:1c:d3:81:27:cd:00:89:ce:af:3d:
1f:80:3b:b1:00:b2:63:55:d2:47:f3:21:9f:82:5c:
c2:5c:22:2b:38:ab:ec:e5:af:60:76:32:ef:57:68:
33:44:86:43:4d:7b:d1:1a:a8:62:14:19:ae:5e:5b:
10:35:77:d3:17:2f:23:5e:a8:1c:39:e0:6d:8a:14:
bb:10:57:ba:23:e6:30:49:4e:55:7d:73:20:0e:be:
96:89:24:5b:1c:72:1a:1d:5b:6b:76:1a:2f:1b:90:
d6:42:0c:9c:98:71:05:16:a0:f1:96:91:27:32:92:
55:6b:0b:cb:c1:df:e9:fc:b3:a3:02:71:bd:c5:22:
3d:df:d8:fd:dd:52:3b:f3:2a:e6:3e:19:be:d1:99:
02:79:3e:a8:05:b6:fe:72:fd:2e:43:09:f8:78:ba:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:13:11:FA:EE:D9:EA:D6:B0:D0:34:82:50:1C:DF:2E:47:29:65
X509v3 Authority Key Identifier:
keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f7:d3:f1:91:36:ca:d3:60:d0:bb:d0:7f:bf:05:a5:9d:d5:
01:0a:63:aa:47:bc:11:63:a4:4b:8d:d7:7f:2e:8a:81:45:cf:
38:0b:14:80:ff:83:69:95:8b:11:e9:5c:8e:49:f4:ec:88:19:
68:05:3d:94:8c:e4:bf:47:7c:38:2d:aa:96:6d:56:a4:5e:77:
34:df:ff:e4:88:d7:d9:bc:0c:0f:42:91:9a:62:ba:66:f7:ce:
d6:05:fa:0b:bc:c6:8f:65:a0:58:47:14:90:39:d0:cf:b9:53:
81:10:05:f4:3f:e4:b1:b3:4f:1b:a9:65:a9:e6:53:58:58:5b:
46:31:92:07:b2:78:af:0f:ff:5c:e0:a9:6c:92:7e:d4:3e:d6:
97:5b:4a:66:78:a1:e6:c5:cd:e6:9d:11:36:1b:2e:bd:cd:f3:
ef:9f:c2:25:b9:3a:ef:25:4f:10:dc:f0:69:03:13:69:2c:ac:
c1:fb:3f:56:2b:0a:1c:16:ea:63:02:2a:a4:3b:d7:7b:46:be:
7b:e4:09:12:28:7d:92:6a:c6:4c:2f:12:8f:12:15:47:ee:7e:
3f:70:db:54:da:e2:b3:e8:8a:0d:25:4b:91:a3:52:68:51:8e:
02:2a:76:8c:6d:2b:00:b7:f1:a1:f1:ed:b6:19:fa:2f:b1:c4:
53:62:1a:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx
NUFDMjYxNkIwHhcNMjYwOTExMDI1MzU3WhcNMjYwOTE4MDI1MzU3WjAYMRYwFAYD
VQQDEw02YWEzNmQ0NS0xMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0HRjYluTMy+DWKQ7cSYoGQ2cbl7Ponbv9JcCDDOHo9ehwQPct86nyB77R7xz
4h61q/5dblArFXlsYIqReJok0kR9U3af+6Dlc7rSLi4oqsDN+A5iUN2blcuEEJ1e
6hzTgSfNAInOrz0fgDuxALJjVdJH8yGfglzCXCIrOKvs5a9gdjLvV2gzRIZDTXvR
GqhiFBmuXlsQNXfTFy8jXqgcOeBtihS7EFe6I+YwSU5VfXMgDr6WiSRbHHIaHVtr
dhovG5DWQgycmHEFFqDxlpEnMpJVawvLwd/p/LOjAnG9xSI939j93VI78yrmPhm+
0ZkCeT6oBbb+cv0uQwn4eLqVlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGcExH6
7tnq1rDQNIJQHN8uRyllMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF
N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh
V3MxUXBZdElrV29WckNZV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH/fT8ZE2ytNg0LvQf78FpZ3VAQpjqke8EWOkS43Xfy6KgUXPOAsUgP+DaZWL
Eelcjkn07IgZaAU9lIzkv0d8OC2qlm1WpF53NN//5IjX2bwMD0KRmmK6ZvfO1gX6
C7zGj2WgWEcUkDnQz7lTgRAF9D/ksbNPG6llqeZTWFhbRjGSB7J4rw//XOCpbJJ+
1D7Wl1tKZnih5sXN5p0RNhsuvc3z75/CJbk67yVPENzwaQMTaSyswfs/VisKHBbq
YwIqpDvXe0a+e+QJEih9kmrGTC8SjxIVR+5+P3DbVNris+iKDSVLkaNSaFGOAip2
jG0rALfxofHtthn6L7HEU2IarA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 12:35:00 2026 by rpki-client