
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
File: v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json)
Hash identifier: 0d197WmDW2LHKSywhsW+sm6VkJAlZzJS9sQHDaUvblI=
Subject key identifier: 17:7A:F7:B1:7F:1A:BD:C4:C9:A7:59:11:32:F2:23:80:93:5F:D8:00
Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Certificate issuer: /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
Manifest number: 0190
Signing time: Tue 29 Sep 2026 04:51:31 +0000
Manifest this update: Tue 29 Sep 2026 04:51:30 +0000
Manifest next update: Tue 06 Oct 2026 04:51:30 +0000
Files and hashes: 1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: xF3rMF07sE7/jmK4QafHbpINc267s4KciShPMMBxS9E=)
2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: Z763OA2aGYPDmj4qlpDVEyptMjmrPDNUtAJf94UbdWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 04:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Validity
Not Before: Sep 29 04:51:30 2026 GMT
Not After : Oct 6 04:51:30 2026 GMT
Subject: CN=6abb43d2-120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:b1:96:20:1c:b4:a4:25:37:c2:4d:f5:73:
50:91:89:0d:62:a5:db:77:dd:54:1c:8d:2e:cd:3c:
9c:07:0f:b5:3a:37:b1:e5:90:ef:b6:31:41:b7:b9:
73:ae:08:9f:6f:a8:05:54:56:cc:43:c8:ec:60:6d:
32:62:55:ae:3c:03:30:57:7a:77:f0:31:1a:71:79:
f1:a6:04:7a:33:67:ab:ac:57:b3:66:88:7b:bf:80:
73:1c:61:dd:37:3b:03:e5:57:3a:4a:55:86:f8:d2:
27:04:e8:c3:6f:64:bf:98:3b:35:eb:82:3c:47:6a:
cb:ef:32:fa:ea:fa:0f:07:f1:4c:f4:c5:11:44:7c:
d2:d3:ba:b1:2c:15:76:75:fb:cb:6e:bf:c0:9a:8c:
2d:6c:36:da:6d:03:3a:46:bd:1e:f3:fe:d0:69:71:
8c:b3:17:59:54:e7:c7:1e:08:6d:86:82:22:6a:95:
85:a8:a4:02:98:fc:1f:8e:c2:8b:a3:e2:3b:27:d4:
36:a6:a2:b6:41:28:d7:50:7d:ad:82:ac:1e:e5:36:
e0:f4:4f:e9:57:3e:4c:bb:ff:e2:c5:2c:7a:cf:3b:
3f:4c:5a:93:40:19:40:c1:ce:a0:4b:b7:7e:0b:51:
19:e5:5a:77:46:13:aa:e4:7a:75:34:97:60:9c:42:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7A:F7:B1:7F:1A:BD:C4:C9:A7:59:11:32:F2:23:80:93:5F:D8:00
X509v3 Authority Key Identifier:
keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:34:93:65:72:eb:85:d4:64:ef:8d:c7:fc:9e:66:7c:6c:b5:
36:f1:c7:0d:0f:62:4e:eb:88:80:74:87:9e:66:f1:52:d8:69:
b4:16:24:6c:f7:64:26:75:a9:16:82:03:97:ac:d2:fb:17:a5:
a6:19:f1:71:e0:51:d2:9d:dc:ae:ce:c5:cc:51:03:4b:e8:f7:
1e:87:35:e9:5d:1e:8d:e3:8c:2a:c1:18:a5:d9:33:9d:e6:0d:
09:9b:f4:1a:5a:3a:2a:74:0e:26:d4:64:11:dc:42:bf:ea:83:
68:bd:93:55:e2:6a:9f:b3:c5:40:3d:a1:b0:f0:0f:8c:10:fb:
eb:4d:2c:97:65:ec:c0:3e:2a:39:b4:57:9c:ea:12:a5:1b:e6:
3f:b6:ed:51:2f:14:df:36:6a:95:ec:ac:7b:c6:a5:29:8c:ff:
71:23:c8:88:e6:b6:9b:42:bc:dd:cc:c6:ad:bd:85:cc:10:90:
0f:d3:8b:75:2e:21:ed:02:ac:46:8b:6a:f3:06:7e:1c:30:98:
7a:9d:25:b3:8d:ee:ff:30:f3:a1:bc:95:25:be:ee:bc:07:ad:
8f:3d:f9:30:c7:d6:9a:92:f2:5d:93:ce:17:b1:ad:34:bf:27:
7b:e4:55:33:93:36:2a:48:40:20:da:9f:8b:e4:e3:6e:f7:b5:
29:67:35:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ1OTYxMTAvBgNVBAUTKEJGNzFGNUJGMTE2OEE3ODQwNTc2RTAwMDZGM0JCQzY1
RkM0ODM0MEIwHhcNMjYwOTI5MDQ1MTMwWhcNMjYxMDA2MDQ1MTMwWjAYMRYwFAYD
VQQDEw02YWJiNDNkMi0xMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAldSxliActKQlN8JN9XNQkYkNYqXbd91UHI0uzTycBw+1Ojex5ZDvtjFBt7lz
rgifb6gFVFbMQ8jsYG0yYlWuPAMwV3p38DEacXnxpgR6M2errFezZoh7v4BzHGHd
NzsD5Vc6SlWG+NInBOjDb2S/mDs164I8R2rL7zL66voPB/FM9MURRHzS07qxLBV2
dfvLbr/AmowtbDbabQM6Rr0e8/7QaXGMsxdZVOfHHghthoIiapWFqKQCmPwfjsKL
o+I7J9Q2pqK2QSjXUH2tgqwe5Tbg9E/pVz5Mu//ixSx6zzs/TFqTQBlAwc6gS7d+
C1EZ5Vp3RhOq5Hp1NJdgnEIjAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBd697F/
Gr3EyadZETLyI4CTX9gAMB8GA1UdIwQYMBaAFL9x9b8RaKeEBXbgAG87vGX8SDQL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wNTcyREQ4QTVB
RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0UUZkdUFBYnp1OFpmeElO
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3YzSDF2eEZvcDRRRmR1QUFienU4WmZ4SU5Bcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDU5Ni8wNTcyREQ4QTVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0
UUZkdUFBYnp1OFpmeElOQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcTSTZXLrhdRk743H/J5mfGy1NvHHDQ9iTuuIgHSHnmbxUthptBYkbPdkJnWp
FoIDl6zS+xelphnxceBR0p3crs7FzFEDS+j3Hoc16V0ejeOMKsEYpdkzneYNCZv0
Glo6KnQOJtRkEdxCv+qDaL2TVeJqn7PFQD2hsPAPjBD7600sl2XswD4qObRXnOoS
pRvmP7btUS8U3zZqleyse8alKYz/cSPIiOa2m0K83czGrb2FzBCQD9OLdS4h7QKs
Rotq8wZ+HDCYep0ls43u/zDzobyVJb7uvAetjz35MMfWmpLyXZPOF7GtNL8ne+RV
M5M2KkhAINqfi+Tjbve1KWc1BQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:07:02 2026 by rpki-client