
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json)
Hash identifier: wGo0iYlB4T0MZ5yS78Ck1BSLuU6Sa+LWMrUL2i85lqI=
Subject key identifier: 05:F7:E0:0E:38:40:D6:1F:34:7C:7A:BC:31:BA:D4:1E:C9:77:83:A5
Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21
Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
Certificate serial: 01B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
Manifest number: 01A4
Signing time: Mon 05 Oct 2026 04:32:05 +0000
Manifest this update: Mon 05 Oct 2026 04:32:05 +0000
Manifest next update: Mon 12 Oct 2026 04:32:05 +0000
Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: qvsf0KvygU4mAqZuxueZMV+QuhqvIu5EPZ8YzUgAUPY=)
2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: NxzkE3G6k7uKaBQgTyXi96jp5VcOIi/OIHejJcnWXxw=)
3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: Q2XsaXqT+eyCPXvxi8zIHiMKLLmA95KKZabuPQOI/bQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl
rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:32:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421
Validity
Not Before: Oct 5 04:32:05 2026 GMT
Not After : Oct 12 04:32:05 2026 GMT
Subject: CN=6ac32845-5951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:e3:0a:d0:a9:ff:36:6f:36:2d:d5:f0:ea:
82:32:46:01:c2:cc:f3:11:0e:5c:0d:d5:2c:ae:11:
5a:e2:fc:75:5b:a6:83:9c:8a:60:0d:f9:30:1d:af:
dd:2b:ff:92:36:ba:dc:68:77:be:5b:0a:85:65:4e:
c9:09:cd:fc:7a:25:5d:a9:e8:0f:57:d6:41:d1:5e:
4c:ad:54:f5:01:9b:1b:79:d1:ed:4d:32:2d:92:58:
51:4d:74:f9:a6:f5:5c:bd:af:12:f2:16:ec:fb:3c:
0f:53:61:f1:36:39:23:b9:55:ae:f8:65:80:8e:fb:
2a:f9:61:08:d5:3b:ce:08:eb:ec:be:1f:c1:af:67:
42:94:f4:c7:c9:b7:22:ff:d2:b1:e4:92:b8:92:12:
60:5f:81:87:f9:6c:da:38:2a:71:1c:11:7e:f5:15:
9b:2d:3e:b9:8c:ea:df:f1:df:30:b4:13:68:18:00:
a5:a2:03:63:62:20:73:a1:45:28:1d:38:d3:d8:39:
54:c4:2d:cc:a3:96:16:b2:6a:72:66:10:43:5e:f6:
6f:e4:0a:b3:95:12:a4:fc:1c:34:57:d6:b9:55:14:
0a:37:54:fc:74:e8:e9:61:d7:09:c5:d7:53:fd:0a:
c7:f2:eb:b0:8f:16:d7:67:45:3b:d1:23:ed:51:eb:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F7:E0:0E:38:40:D6:1F:34:7C:7A:BC:31:BA:D4:1E:C9:77:83:A5
X509v3 Authority Key Identifier:
keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b7:9b:72:24:a0:5a:cd:a1:9e:1a:05:6a:6a:63:f0:ee:a0:
03:4a:f3:4d:0c:24:68:76:61:c3:e3:12:62:54:ac:64:2b:57:
4c:54:b0:14:85:06:7f:ae:6c:d2:a4:e4:d2:82:c2:ed:f5:24:
96:59:72:4b:d3:82:f5:2d:1f:f0:12:12:99:19:a1:0f:c9:67:
80:e9:24:da:3a:a2:bf:2e:25:25:45:a0:08:b5:44:22:c0:c3:
2a:a2:d8:7a:2a:de:26:c3:b9:4e:9a:03:32:dd:9e:c2:6b:2c:
48:4a:aa:70:02:ea:43:40:51:9e:a9:b4:90:64:56:ef:30:93:
44:03:67:56:b1:63:cf:91:6a:d5:11:9e:b1:a4:38:1a:cd:c6:
73:bb:4b:9e:c8:dd:fa:a0:d2:11:c2:b8:55:b5:13:6b:a3:1b:
38:6d:99:01:d5:96:27:be:a9:28:ed:6b:5d:7e:24:f2:56:71:
73:70:e5:b2:9f:dd:24:73:48:66:75:c7:5c:50:eb:23:d8:a4:
c7:3b:f1:b2:39:56:af:64:ce:cd:11:03:28:18:5b:34:e5:5d:
2a:bc:00:da:08:f6:7b:7c:70:3c:54:18:1a:9b:cf:41:5e:6f:
1b:05:c5:e4:22:f4:25:64:9e:1c:98:24:96:dc:d0:b6:83:4d:
ac:fd:67:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF
QkY2QzY0MjEwHhcNMjYxMDA1MDQzMjA1WhcNMjYxMDEyMDQzMjA1WjAYMRYwFAYD
VQQDEw02YWMzMjg0NS01OTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqKzjCtCp/zZvNi3V8OqCMkYBwszzEQ5cDdUsrhFa4vx1W6aDnIpgDfkwHa/d
K/+SNrrcaHe+WwqFZU7JCc38eiVdqegPV9ZB0V5MrVT1AZsbedHtTTItklhRTXT5
pvVcva8S8hbs+zwPU2HxNjkjuVWu+GWAjvsq+WEI1TvOCOvsvh/Br2dClPTHybci
/9Kx5JK4khJgX4GH+WzaOCpxHBF+9RWbLT65jOrf8d8wtBNoGAClogNjYiBzoUUo
HTjT2DlUxC3Mo5YWsmpyZhBDXvZv5AqzlRKk/Bw0V9a5VRQKN1T8dOjpYdcJxddT
/QrH8uuwjxbXZ0U70SPtUes0RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAX34A44
QNYfNHx6vDG61B7Jd4OlMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw
NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa
Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4
RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApbebciSgWs2hnhoFampj8O6gA0rzTQwkaHZhw+MSYlSsZCtXTFSwFIUGf65s
0qTk0oLC7fUklllyS9OC9S0f8BISmRmhD8lngOkk2jqivy4lJUWgCLVEIsDDKqLY
eireJsO5TpoDMt2ewmssSEqqcALqQ0BRnqm0kGRW7zCTRANnVrFjz5Fq1RGesaQ4
Gs3Gc7tLnsjd+qDSEcK4VbUTa6MbOG2ZAdWWJ76pKO1rXX4k8lZxc3Dlsp/dJHNI
ZnXHXFDrI9ikxzvxsjlWr2TOzREDKBhbNOVdKrwA2gj2e3xwPFQYGpvPQV5vGwXF
5CL0JWSeHJgkltzQtoNNrP1n7Q==
-----END CERTIFICATE-----
Generated at Tue Oct 6 00:59:05 2026 by rpki-client