
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json)
Hash identifier: d5WCZv60M3CaMWtnC/ZnU44LwJBKAPiGp9sYJ01x6c8=
Subject key identifier: A0:76:CC:B3:07:5F:A1:B4:13:F6:07:82:B3:CD:AB:8A:9F:B1:F4:0D
Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
Manifest number: 0179
Signing time: Fri 09 Oct 2026 05:25:22 +0000
Manifest this update: Fri 09 Oct 2026 05:25:21 +0000
Manifest next update: Fri 16 Oct 2026 05:25:21 +0000
Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: XaW2NjtfMLU/4wsFCAEbzByuXeYDxGdtw6Xx8DQruoo=)
2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: feWCSr9eRlRlJ3Q0tbYJyvoDzByu6lr0VTjjRj/M/Xo=)
3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: am92Gr0MD4Jd5/4EoBAS/UqJDGiw/kv6GtuALWW7PUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Validity
Not Before: Oct 9 05:25:21 2026 GMT
Not After : Oct 16 05:25:21 2026 GMT
Subject: CN=6ac87ac2-b8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:75:82:1f:db:74:60:a8:d8:12:0b:58:3e:
0c:08:a4:60:2d:f3:5e:4a:1e:d9:92:05:0a:36:fe:
13:d6:c9:4e:4a:73:c1:da:43:7b:97:70:df:59:98:
dc:5b:5b:cc:7d:6d:1e:e2:f8:30:0c:95:17:1b:56:
c5:72:4c:7d:06:9e:de:db:c5:50:5a:1b:49:d9:dd:
b5:b1:09:0c:00:bb:9a:71:b5:b9:38:0d:c1:88:05:
5b:87:01:95:58:04:aa:77:fc:26:7c:c1:1b:2d:d0:
04:83:f7:c2:82:7b:ec:ba:70:99:47:f1:df:2e:f4:
ae:27:28:36:06:1b:f9:40:bd:5c:7e:c9:67:9f:4a:
69:50:62:68:f3:6d:27:10:84:51:97:80:6b:00:e9:
dc:89:cf:cb:a5:7c:5f:bd:a2:05:77:1f:17:54:4b:
88:1b:65:59:8b:41:6a:9e:74:66:a8:ca:25:cd:e2:
87:71:91:68:31:ca:ea:95:80:76:4d:82:74:e1:d4:
c7:d5:df:76:35:f6:5b:8e:95:79:88:c8:73:90:e9:
1f:43:28:d6:29:e5:fe:01:d1:98:17:67:fc:e9:82:
bb:5a:55:a3:3d:4a:99:2b:8f:5d:51:64:cb:3f:1b:
2c:9b:b5:86:6c:68:f1:5e:bd:d7:4e:64:14:ec:e4:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:CC:B3:07:5F:A1:B4:13:F6:07:82:B3:CD:AB:8A:9F:B1:F4:0D
X509v3 Authority Key Identifier:
keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:82:dd:80:21:d4:3c:ee:0f:19:10:9f:2d:5a:64:25:d4:06:
55:2a:aa:59:49:1f:e3:b4:7c:3e:fa:8f:1a:46:93:9d:a4:c7:
20:7c:6b:73:cf:c3:a8:6e:4b:5e:43:08:e7:7a:5f:c2:d5:c7:
74:4b:3f:af:02:51:49:f3:7a:af:35:0e:1e:14:33:8c:73:8e:
84:1e:5c:2d:c9:1a:e5:40:e9:3a:f2:f2:25:43:70:aa:67:3f:
9a:af:99:7d:ca:36:98:df:6a:0c:9f:c4:b3:3f:49:ba:4e:2d:
61:9d:4f:6b:57:c7:5f:7e:88:66:34:a0:c6:e7:77:c7:15:39:
fb:6b:4e:3c:fb:09:94:7d:5f:68:7c:c1:a7:42:cf:38:ea:a9:
51:7c:5a:26:ab:92:a9:66:ab:ee:e5:71:25:83:14:c6:49:2b:
96:c7:49:0b:c0:1c:4a:b2:00:5b:56:f4:9b:ff:2f:0a:88:07:
2a:8d:2e:fd:89:0a:12:ea:ee:8f:6e:a2:3f:9e:e4:78:82:9b:
cd:27:ae:0a:e3:91:c9:6f:83:39:48:68:c9:c3:8d:fe:96:dc:
7f:bd:6d:41:79:66:2c:34:d0:6f:15:d9:46:f8:72:a0:81:af:
88:89:7f:b6:d3:fa:c5:09:2c:8f:e1:19:c8:90:06:00:33:4d:
5a:fd:32:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz
QUI5RjRDNDAwHhcNMjYxMDA5MDUyNTIxWhcNMjYxMDE2MDUyNTIxWjAYMRYwFAYD
VQQDEw02YWM4N2FjMi1iOGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArfZ1gh/bdGCo2BILWD4MCKRgLfNeSh7ZkgUKNv4T1slOSnPB2kN7l3DfWZjc
W1vMfW0e4vgwDJUXG1bFckx9Bp7e28VQWhtJ2d21sQkMALuacbW5OA3BiAVbhwGV
WASqd/wmfMEbLdAEg/fCgnvsunCZR/HfLvSuJyg2Bhv5QL1cfslnn0ppUGJo820n
EIRRl4BrAOncic/LpXxfvaIFdx8XVEuIG2VZi0FqnnRmqMolzeKHcZFoMcrqlYB2
TYJ04dTH1d92NfZbjpV5iMhzkOkfQyjWKeX+AdGYF2f86YK7WlWjPUqZK49dUWTL
Pxssm7WGbGjxXr3XTmQU7OS7QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKB2zLMH
X6G0E/YHgrPNq4qfsfQNMB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD
QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlO
Z2ktWnE5NG4ta0E2dWZURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaYLdgCHUPO4PGRCfLVpkJdQGVSqqWUkf47R8PvqPGkaTnaTHIHxrc8/DqG5L
XkMI53pfwtXHdEs/rwJRSfN6rzUOHhQzjHOOhB5cLcka5UDpOvLyJUNwqmc/mq+Z
fco2mN9qDJ/Esz9Juk4tYZ1Pa1fHX36IZjSgxud3xxU5+2tOPPsJlH1faHzBp0LP
OOqpUXxaJquSqWar7uVxJYMUxkkrlsdJC8AcSrIAW1b0m/8vCogHKo0u/YkKEuru
j26iP57keIKbzSeuCuORyW+DOUhoycON/pbcf71tQXlmLDTQbxXZRvhyoIGviIl/
ttP6xQksj+EZyJAGADNNWv0ydw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:41:49 2026 by rpki-client