
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
File: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft (raw, json)
Hash identifier: 9D0YCelaiX3YsPs2nAnTbcSummGHnzab0umOgtvEXSw=
Subject key identifier: BF:4E:4B:39:CB:14:22:61:34:C2:8E:32:34:3E:EE:76:F8:20:F0:6E
Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
Certificate issuer: /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
Manifest number: 022B
Signing time: Sat 31 Oct 2026 03:17:03 +0000
Manifest this update: Sat 31 Oct 2026 03:17:03 +0000
Manifest next update: Sat 07 Nov 2026 03:17:03 +0000
Files and hashes: 1: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl (hash: taC6eT2V0B1zXkN9/JGqQ6a3mWW3jws7ZGeB4vdBB/4=)
2: 66D4A06E651411EF9F534031C4F9AE02.roa (hash: zkNUDLjXuqFNaipi5YVq9yVdI9wqBX+vkJTiE60LyPI=)
3: 6ABF5CFAB24311F093F9B04EC4F9AE02.roa (hash: T9d4VibSASPmkCyH9NpIJk4mWr2jmH2I4BlIvYJVUCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 03:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F006D, serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A
Validity
Not Before: Oct 31 03:17:03 2026 GMT
Not After : Nov 7 03:17:03 2026 GMT
Subject: CN=6ae55daf-f299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:1f:fd:4b:9e:79:ef:1b:71:1e:38:80:8b:
b9:46:56:5f:4f:3a:d3:0e:41:26:0b:f6:32:9b:0d:
da:40:a0:c4:3f:ad:9e:d9:b4:24:ca:72:98:85:7e:
b0:be:ab:58:ab:6d:41:df:17:c3:ce:92:1a:2c:af:
c4:f9:03:bd:98:93:2d:0f:a3:b1:87:d2:3b:67:e7:
30:d2:88:0c:d5:9d:c5:20:ef:20:91:0e:a4:cf:ea:
91:da:82:65:63:4d:57:0d:bb:00:48:4e:04:76:a3:
65:d5:c9:c0:da:36:b2:51:5b:68:b2:15:6e:0b:50:
6f:05:b2:4b:81:4a:e5:99:14:d3:cf:c7:d0:22:5c:
d7:eb:ab:3d:a5:71:de:7d:eb:47:b8:25:86:41:20:
50:f8:b6:15:11:38:e3:bf:2a:83:b2:d2:d5:f0:67:
57:81:f2:c8:3e:4c:2d:71:d3:99:40:86:ca:1d:4f:
b3:d8:c5:8d:0f:af:14:e0:0c:67:02:aa:d0:d6:f4:
4e:5e:4a:09:94:a1:6e:59:10:c4:14:75:a3:7a:e8:
c2:b9:23:34:92:89:42:2f:bd:9f:16:45:3e:bf:40:
9d:82:18:33:19:79:57:eb:f0:c3:ae:fe:86:62:df:
35:fe:5b:dd:6f:21:6d:27:24:d5:87:ca:aa:fc:02:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:4B:39:CB:14:22:61:34:C2:8E:32:34:3E:EE:76:F8:20:F0:6E
X509v3 Authority Key Identifier:
keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:72:f4:3f:95:a6:84:76:a7:24:62:e7:f2:26:95:91:44:0a:
9e:32:a6:9a:d9:2c:4f:87:9e:96:d2:77:37:9a:6e:df:82:cb:
98:80:55:71:a5:70:50:f1:08:bd:81:67:ba:96:5b:67:df:8f:
87:2a:b0:0e:e0:36:8d:db:cb:07:8a:4f:89:70:f1:98:13:95:
8a:fd:c1:de:b0:15:41:47:b8:a2:b8:0c:3f:ff:19:2f:d4:b5:
f0:3b:7e:64:e1:10:5c:6f:42:16:b6:a2:af:9a:c4:20:e9:75:
33:f6:20:e5:33:84:11:2b:2a:c4:e0:52:97:b2:97:24:8c:50:
81:bf:06:1c:59:38:b5:ef:1b:12:cf:8b:09:d3:d0:84:1d:78:
82:84:f2:90:ea:94:3a:d7:d4:83:5a:6a:df:ae:54:13:65:c2:
dd:f1:09:ce:6a:53:11:e8:62:c0:90:78:0c:75:05:8d:45:98:
7d:e0:96:86:dd:d1:d0:07:ea:47:41:e8:53:cd:ce:46:88:45:
85:1e:1c:1b:d5:8f:23:b5:19:98:87:d5:01:b6:e2:1c:76:7b:
80:3c:3c:25:f0:bc:31:62:bb:46:ef:db:25:a7:b4:73:b7:dd:
d3:2b:b1:b0:06:e1:d8:78:40:ad:9d:a2:c6:49:90:14:d1:20:
8c:53:57:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjAwNkQxMTAvBgNVBAUTKDQ2Rjk3MkQ3QjgzRENBMDYxREI5REZBQUYwMTc3RjJE
REYxRUU5MEEwHhcNMjYxMDMxMDMxNzAzWhcNMjYxMTA3MDMxNzAzWjAYMRYwFAYD
VQQDEw02YWU1NWRhZi1mMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkhgf/Uueee8bcR44gIu5RlZfTzrTDkEmC/Yymw3aQKDEP62e2bQkynKYhX6w
vqtYq21B3xfDzpIaLK/E+QO9mJMtD6Oxh9I7Z+cw0ogM1Z3FIO8gkQ6kz+qR2oJl
Y01XDbsASE4EdqNl1cnA2jayUVtoshVuC1BvBbJLgUrlmRTTz8fQIlzX66s9pXHe
fetHuCWGQSBQ+LYVETjjvyqDstLV8GdXgfLIPkwtcdOZQIbKHU+z2MWND68U4Axn
AqrQ1vROXkoJlKFuWRDEFHWjeujCuSM0kolCL72fFkU+v0CdghgzGXlX6/DDrv6G
Yt81/lvdbyFtJyTVh8qq/AIuKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9OSznL
FCJhNMKOMjQ+7nb4IPBuMB8GA1UdIwQYMBaAFEb5cte4PcoGHbnfqvAXfy3fHukK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDA2RC8zQzEwMEM5Mjk4
QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXlnWWR1ZC1xOEJkX0xkOGU2
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J2bHkxN2c5eWdZZHVkLXE4QmRfTGQ4ZTZRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDA2RC8zQzEwMEM5Mjk4QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXln
WWR1ZC1xOEJkX0xkOGU2UW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmnL0P5WmhHanJGLn8iaVkUQKnjKmmtksT4eeltJ3N5pu34LLmIBVcaVwUPEI
vYFnupZbZ9+PhyqwDuA2jdvLB4pPiXDxmBOViv3B3rAVQUe4orgMP/8ZL9S18Dt+
ZOEQXG9CFrair5rEIOl1M/Yg5TOEESsqxOBSl7KXJIxQgb8GHFk4te8bEs+LCdPQ
hB14goTykOqUOtfUg1pq365UE2XC3fEJzmpTEehiwJB4DHUFjUWYfeCWht3R0Afq
R0HoU83ORohFhR4cG9WPI7UZmIfVAbbiHHZ7gDw8JfC8MWK7Ru/bJae0c7fd0yux
sAbh2HhArZ2ixkmQFNEgjFNXaw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:51:15 2026 by rpki-client