
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft (raw, json)
Hash identifier: GJ1TfKA9hwhHSutW0EAyUF041WgmpE7CoqmxkTq8Nk4=
Subject key identifier: 04:78:A9:BC:B9:38:47:75:B2:90:8A:84:A7:46:91:14:F6:B6:D7:F2
Authority key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
Certificate issuer: /CN=A91F231C/serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
Manifest number: AD
Signing time: Mon 05 Oct 2026 07:34:48 +0000
Manifest this update: Mon 05 Oct 2026 07:34:48 +0000
Manifest next update: Mon 12 Oct 2026 07:34:48 +0000
Files and hashes: 1: aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl (hash: 0d7RhIVnJJUR/6TeedjYd4KdogNymeuuA62RW0d+1II=)
2: 7F29585EC43011F09039384AC4F9AE02.roa (hash: RzqxKvmQcOshBo/Ug1Mj842tyGjNfSYs0TkOvcUwxSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56
Validity
Not Before: Oct 5 07:34:48 2026 GMT
Not After : Oct 12 07:34:48 2026 GMT
Subject: CN=6ac35318-351a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:d2:15:dc:38:c7:bc:3b:35:3b:55:3b:56:
bc:55:b5:f5:29:80:89:2d:f3:5b:67:30:97:8a:c7:
6f:76:1e:2b:78:2d:4f:67:84:8c:15:f3:ca:3b:c8:
20:a0:67:d1:98:ad:16:a6:66:ec:13:9e:58:8e:a6:
c6:d5:12:22:2f:8e:f5:51:27:a6:63:76:4f:b2:fd:
9a:f8:4a:af:fc:c9:c6:89:72:b4:58:5b:ae:04:e7:
bd:42:33:6f:85:76:c1:3d:fa:fb:dc:dc:64:f1:07:
4a:db:86:3f:0f:17:4f:7c:4e:e8:f8:be:b1:06:9a:
b0:26:ab:bb:bf:f0:1d:e8:e5:91:6c:cc:78:64:97:
9f:5a:7b:f1:40:56:96:47:80:3e:eb:bb:6b:30:e1:
29:61:41:92:12:d3:15:84:38:2f:11:7a:0c:a3:bd:
aa:dd:11:aa:8a:f7:3d:81:49:a1:34:1e:95:b0:bb:
09:3b:4a:a6:03:28:79:2b:c4:be:81:40:6d:09:97:
37:57:db:44:fc:cb:86:08:e4:d4:eb:c9:c8:65:77:
cd:26:cb:44:21:95:ef:e2:f4:50:41:93:a0:14:87:
d8:96:1e:e4:ac:be:09:37:b1:98:de:71:c7:b7:67:
02:6f:fa:22:c3:93:e2:d6:bc:39:04:93:d5:73:3a:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:78:A9:BC:B9:38:47:75:B2:90:8A:84:A7:46:91:14:F6:B6:D7:F2
X509v3 Authority Key Identifier:
keyid:68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cc:e6:af:77:e7:03:06:33:f4:da:48:1e:01:08:4a:36:b6:
ef:cc:90:71:83:45:0d:a8:57:cb:1d:73:3f:6b:88:26:89:c0:
e9:0b:e1:fc:95:54:62:a2:13:ce:a4:d8:7e:a6:bf:a6:d9:fb:
87:2e:8b:b3:37:79:f2:bc:56:71:fd:cc:cb:94:99:2d:d8:d0:
41:2a:75:ab:bf:06:dc:d8:65:83:9d:99:48:f0:f7:94:b1:71:
cf:ff:9d:6c:52:b9:90:8c:39:15:d0:a0:12:89:42:c6:54:d3:
da:85:d1:76:99:f2:5e:74:ab:f9:e2:65:bb:83:8a:6a:b5:50:
0c:ed:4f:4b:ef:18:f9:70:1c:c3:1b:6a:22:1c:7c:17:c3:31:
ca:9e:8b:8a:36:1c:e8:26:bf:3e:e5:65:39:89:38:65:91:f3:
c7:c6:99:50:61:85:3b:72:b2:77:4f:f6:e9:7d:b1:fc:b7:fb:
b5:a0:95:0f:aa:5a:b8:82:cc:ae:54:2e:82:1f:2a:d4:bb:09:
74:9c:6b:a5:f0:dc:90:06:15:c1:82:14:99:ee:38:dc:dc:e7:
b7:44:0a:18:da:f9:b8:b6:b4:6b:20:06:33:6b:fe:5f:ab:b3:
23:90:f3:42:28:52:13:cd:d2:ff:a3:42:8c:48:e6:f2:11:d3:
15:ef:9c:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjIzMUMxMTAvBgNVBAUTKDY4RDE0NjY0MzM5NTg0MTZERDgxQTdENEFCRjJCMjQz
RUU3RDhCNTYwHhcNMjYxMDA1MDczNDQ4WhcNMjYxMDEyMDczNDQ4WjAYMRYwFAYD
VQQDEw02YWMzNTMxOC0zNTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5QXSFdw4x7w7NTtVO1a8VbX1KYCJLfNbZzCXisdvdh4reC1PZ4SMFfPKO8gg
oGfRmK0WpmbsE55YjqbG1RIiL471USemY3ZPsv2a+Eqv/MnGiXK0WFuuBOe9QjNv
hXbBPfr73Nxk8QdK24Y/DxdPfE7o+L6xBpqwJqu7v/Ad6OWRbMx4ZJefWnvxQFaW
R4A+67trMOEpYUGSEtMVhDgvEXoMo72q3RGqivc9gUmhNB6VsLsJO0qmAyh5K8S+
gUBtCZc3V9tE/MuGCOTU68nIZXfNJstEIZXv4vRQQZOgFIfYlh7krL4JN7GY3nHH
t2cCb/oiw5Pi1rw5BJPVczp5qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAR4qby5
OEd1spCKhKdGkRT2ttfyMB8GA1UdIwQYMBaAFGjRRmQzlYQW3YGn1KvyskPufYtW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjMxQy8yOEU4M0U2QUM0
MzAxMUYwOTZDRTlDNDlDNEY5QUUwMi9hTkZHWkRPVmhCYmRnYWZVcV9LeVEtNTlp
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FORkdaRE9WaEJiZGdhZlVxX0t5US01OWkxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjMxQy8yOEU4M0U2QUM0MzAxMUYwOTZDRTlDNDlDNEY5QUUwMi9hTkZHWkRPVmhC
YmRnYWZVcV9LeVEtNTlpMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwMzmr3fnAwYz9NpIHgEISja278yQcYNFDahXyx1zP2uIJonA6Qvh/JVUYqIT
zqTYfqa/ptn7hy6Lszd58rxWcf3My5SZLdjQQSp1q78G3Nhlg52ZSPD3lLFxz/+d
bFK5kIw5FdCgEolCxlTT2oXRdpnyXnSr+eJlu4OKarVQDO1PS+8Y+XAcwxtqIhx8
F8Mxyp6LijYc6Ca/PuVlOYk4ZZHzx8aZUGGFO3Kyd0/26X2x/Lf7taCVD6pauILM
rlQugh8q1LsJdJxrpfDckAYVwYIUme443Nznt0QKGNr5uLa0ayAGM2v+X6uzI5Dz
QihSE83S/6NCjEjm8hHTFe+cfg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 13:31:36 2026 by rpki-client