
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json)
Hash identifier: W2/qNq/NG5x1fEDop9ekeVVuSOu+wwfFLCPzuNkhuUs=
Subject key identifier: 83:34:28:4D:8B:EE:49:2B:FD:0C:47:37:0B:66:0F:81:1C:53:A8:0B
Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Certificate serial: 0A86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
Manifest number: 0A70
Signing time: Thu 08 Oct 2026 19:45:58 +0000
Manifest this update: Thu 08 Oct 2026 19:45:57 +0000
Manifest next update: Thu 15 Oct 2026 19:45:57 +0000
Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: hyqvTYd+Fgm7Qx/Lva7PrKHOSRAB5MzApdjxpjWAl98=)
2: 7AEEA290829E11F0975FC440C4F9AE02.roa (hash: NJ63YJDh2rXhGyC41ze8yWJyNkK6DiJWZj8EZ4mClWY=)
3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: BWMRKEzqCdvPb4VJWbmdWJfwpPUSHKLOetVFGH3P10s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2694 (0xa86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Validity
Not Before: Oct 8 19:45:57 2026 GMT
Not After : Oct 15 19:45:57 2026 GMT
Subject: CN=6ac7f2f5-833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:f8:d0:4f:41:3b:86:33:9d:46:55:ef:f4:
b2:70:1a:53:91:1a:e4:ee:1e:f6:0d:49:04:82:59:
e5:2d:45:94:5f:ce:ba:ef:58:6c:20:18:93:f0:6d:
b8:63:d0:bc:fc:46:48:7a:c5:35:f9:9f:fa:3a:b3:
cd:ae:5a:bf:11:a6:a1:71:30:c9:02:c4:f2:62:fc:
01:8d:f7:8f:b1:84:1d:8b:d3:b9:4b:a1:ea:ef:9a:
3f:09:c2:48:02:cb:1d:9f:a9:33:db:8a:b0:ec:8e:
0d:9c:89:2f:20:a3:80:7f:5d:2e:34:7d:27:59:84:
06:17:61:d3:46:cf:2a:41:2f:86:b5:17:8f:da:f3:
37:bb:3b:af:a5:d9:b6:7e:b7:61:18:68:bb:59:d1:
0d:c5:7d:da:a2:38:3b:c2:73:67:28:8d:54:cd:ce:
37:2e:51:27:df:61:f1:ee:0f:2c:5a:13:82:9b:be:
cf:e9:dc:47:aa:80:c9:30:18:17:19:2f:35:b9:6e:
1c:fd:7d:bd:64:48:34:fe:86:69:9e:01:07:7f:31:
24:cc:e3:aa:01:a4:02:f9:cc:95:43:2f:6c:90:29:
00:a3:d9:43:17:eb:83:ba:aa:c6:58:06:06:46:c4:
c0:5d:60:4f:a8:e9:8d:64:33:bf:b9:02:74:fc:e5:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:34:28:4D:8B:EE:49:2B:FD:0C:47:37:0B:66:0F:81:1C:53:A8:0B
X509v3 Authority Key Identifier:
keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:8f:63:8c:20:35:41:84:7d:7e:b7:57:6e:cc:17:87:61:e9:
ed:a8:df:08:8c:ae:be:72:76:1e:56:01:54:a7:a8:36:d9:7e:
86:f3:f3:39:00:1a:86:d8:48:4f:04:db:66:39:ab:20:a8:2a:
fb:7f:60:72:c4:63:28:c1:ad:92:a5:9d:d8:b7:dc:59:25:5a:
1c:3f:67:0c:bc:81:23:01:42:3a:82:41:9d:97:d8:c4:25:0c:
8d:18:d7:c7:3b:78:3d:6d:71:12:d8:8a:52:d5:4a:e9:50:ac:
5b:de:a3:3a:8d:d0:cf:1b:8e:e8:c1:be:52:01:87:e5:5b:02:
78:72:6b:22:62:07:5f:12:b5:a0:a6:28:dc:15:a6:f0:e5:d6:
30:ff:55:19:38:13:7a:ed:ca:dc:10:7d:7d:59:d5:0f:c0:ab:
d1:b0:89:47:cd:f0:18:b2:19:c1:6f:01:ec:c8:80:48:71:96:
05:e1:9c:89:13:09:57:d3:a0:58:9c:ec:21:3e:b1:f5:6c:a0:
3b:5d:d5:b3:bc:3e:b2:cd:c2:66:83:d3:02:52:b5:59:13:2f:
95:cb:78:ad:3d:af:8e:a9:95:bb:59:b6:e3:59:cd:5a:69:2c:
44:d5:7b:f5:5a:2b:c2:d1:28:60:63:da:44:6b:af:46:bf:61:
27:86:ad:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0
RDgzQ0M4RjUwHhcNMjYxMDA4MTk0NTU3WhcNMjYxMDE1MTk0NTU3WjAYMRYwFAYD
VQQDEw02YWM3ZjJmNS04MzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmIH40E9BO4YznUZV7/SycBpTkRrk7h72DUkEglnlLUWUX86671hsIBiT8G24
Y9C8/EZIesU1+Z/6OrPNrlq/EaahcTDJAsTyYvwBjfePsYQdi9O5S6Hq75o/CcJI
Assdn6kz24qw7I4NnIkvIKOAf10uNH0nWYQGF2HTRs8qQS+GtReP2vM3uzuvpdm2
frdhGGi7WdENxX3aojg7wnNnKI1Uzc43LlEn32Hx7g8sWhOCm77P6dxHqoDJMBgX
GS81uW4c/X29ZEg0/oZpngEHfzEkzOOqAaQC+cyVQy9skCkAo9lDF+uDuqrGWAYG
RsTAXWBPqOmNZDO/uQJ0/OWM9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIM0KE2L
7kkr/QxHNwtmD4EcU6gLMB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0
QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTczNS9FOEU2NjdDQTk0QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9H
THRqaFRYY0duMGROZzh5UFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvo9jjCA1QYR9frdXbswXh2Hp7ajfCIyuvnJ2HlYBVKeoNtl+hvPzOQAahthI
TwTbZjmrIKgq+39gcsRjKMGtkqWd2LfcWSVaHD9nDLyBIwFCOoJBnZfYxCUMjRjX
xzt4PW1xEtiKUtVK6VCsW96jOo3QzxuO6MG+UgGH5VsCeHJrImIHXxK1oKYo3BWm
8OXWMP9VGTgTeu3K3BB9fVnVD8Cr0bCJR83wGLIZwW8B7MiASHGWBeGciRMJV9Og
WJzsIT6x9WygO13Vs7w+ss3CZoPTAlK1WRMvlct4rT2vjqmVu1m241nNWmksRNV7
9VorwtEoYGPaRGuvRr9hJ4atKg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:29:26 2026 by rpki-client