
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
File: MhTiYKePfRZ36DATfBBlcwAxz2Y.mft (raw, json)
Hash identifier: gohKQ5+Sc7iG8goirDUUuwQ+yiagFdYZhfCgRPAhzys=
Subject key identifier: 06:5B:9D:1A:FD:84:0F:99:7A:F8:46:42:44:62:0B:09:AC:8D:61:C2
Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
Certificate issuer: /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
Manifest number: 0187
Signing time: Wed 07 Oct 2026 05:01:33 +0000
Manifest this update: Wed 07 Oct 2026 05:01:32 +0000
Manifest next update: Wed 14 Oct 2026 05:01:32 +0000
Files and hashes: 1: MhTiYKePfRZ36DATfBBlcwAxz2Y.crl (hash: mBvonFeZD6ocpKcJwY4B+XtoDawgCKK4GFKLljCRvh4=)
2: D80D96066C7F11EF92105459C4F9AE02.roa (hash: GqOCo+Gys/z1j8c3oBwzkW0wbpmPF36OaClD0qOv/Zs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8981, serialNumber=3214E260A78F7D1677E830137C1065730031CF66
Validity
Not Before: Oct 7 05:01:32 2026 GMT
Not After : Oct 14 05:01:32 2026 GMT
Subject: CN=6ac5d22d-96c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:fc:97:3e:73:d3:b5:1b:cf:7a:63:a8:8d:
15:1d:8c:28:70:92:69:c2:ed:f1:bf:b4:4c:f1:b0:
06:27:60:08:76:b9:9c:4f:b0:0d:99:10:f0:a7:a4:
99:44:44:fb:2b:70:6c:d4:a1:27:20:f2:52:af:3f:
94:24:27:4e:ea:bc:9b:31:93:0c:26:2f:e3:73:60:
2f:6a:9e:4d:4b:2e:df:ec:9c:45:0c:f6:9d:d7:2c:
9d:67:0f:5b:5b:64:f4:56:65:07:1c:c5:9d:4a:d3:
25:2c:92:a9:cb:7f:25:6e:3a:fa:3a:c0:f5:a1:63:
59:46:ed:92:18:e7:f4:b1:90:d8:cc:e8:25:d0:6c:
c0:f1:af:7c:12:64:5e:83:3f:59:7a:8a:c8:41:36:
8d:72:77:b5:7d:62:b9:55:cb:f7:c6:16:09:9f:39:
6d:89:ec:c6:ca:2e:e3:fa:16:8b:a2:9b:f0:4c:42:
a4:95:4e:dc:55:9f:a3:53:10:f4:90:0c:ed:db:b2:
86:99:cb:01:9f:32:f1:9d:c1:c5:af:80:fb:b1:b5:
09:c7:04:7b:c7:ba:0e:dc:54:4e:f7:e7:88:c5:97:
1e:d6:e8:b0:67:5d:cd:a2:6f:06:96:2b:24:dc:fb:
c5:23:e6:40:81:3e:eb:d6:f0:38:28:c5:cd:e1:88:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:9D:1A:FD:84:0F:99:7A:F8:46:42:44:62:0B:09:AC:8D:61:C2
X509v3 Authority Key Identifier:
keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c2:9f:d3:07:72:2c:6c:32:f0:6e:98:58:2c:1a:f3:69:a4:
c7:36:40:68:a9:cf:0e:e4:2e:d8:36:99:d1:cf:58:22:ab:3c:
75:47:f8:28:0a:93:5a:20:59:a1:b3:9a:ec:9b:67:6b:39:fd:
d8:89:5e:fa:38:3c:95:f4:ed:0c:ed:60:72:61:7e:7e:2d:0f:
aa:f4:9f:8f:a5:83:d7:1c:bc:0b:ef:4e:e8:82:5d:15:37:1f:
e9:a7:c7:1b:23:67:91:bc:52:1c:50:0d:46:48:18:1d:f9:05:
5c:79:9a:53:6b:31:06:26:03:77:e0:2b:2b:d4:11:e7:a4:83:
09:f5:83:df:e4:38:70:07:24:c1:38:80:19:70:05:c5:4a:e8:
bb:f6:d8:f5:f7:f6:7e:0d:64:2d:22:a4:ff:d6:d4:6d:1b:01:
7f:72:93:7f:c3:d1:85:a2:90:9d:f3:6f:98:f9:11:b0:86:94:
24:35:ed:f4:73:84:60:f0:a1:73:b4:90:3e:94:8b:29:bf:81:
16:ea:65:f1:14:6e:d1:89:94:72:90:8b:b2:f1:a2:98:29:56:
f2:c3:49:47:d3:98:f7:2f:2d:17:42:81:53:9e:a0:4a:bc:68:
0f:c6:ee:61:47:8f:9f:cf:53:ad:73:d5:68:53:a4:38:4c:ac:
f7:4d:3c:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5ODExMTAvBgNVBAUTKDMyMTRFMjYwQTc4RjdEMTY3N0U4MzAxMzdDMTA2NTcz
MDAzMUNGNjYwHhcNMjYxMDA3MDUwMTMyWhcNMjYxMDE0MDUwMTMyWjAYMRYwFAYD
VQQDEw02YWM1ZDIyZC05NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvAj8lz5z07Ubz3pjqI0VHYwocJJpwu3xv7RM8bAGJ2AIdrmcT7ANmRDwp6SZ
RET7K3Bs1KEnIPJSrz+UJCdO6rybMZMMJi/jc2Avap5NSy7f7JxFDPad1yydZw9b
W2T0VmUHHMWdStMlLJKpy38lbjr6OsD1oWNZRu2SGOf0sZDYzOgl0GzA8a98EmRe
gz9ZeorIQTaNcne1fWK5Vcv3xhYJnzltiezGyi7j+haLopvwTEKklU7cVZ+jUxD0
kAzt27KGmcsBnzLxncHFr4D7sbUJxwR7x7oO3FRO9+eIxZce1uiwZ13Nom8Glisk
3PvFI+ZAgT7r1vA4KMXN4Yi4ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZbnRr9
hA+ZevhGQkRiCwmsjWHCMB8GA1UdIwQYMBaAFDIU4mCnj30Wd+gwE3wQZXMAMc9m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk4MS8yNzJCNEM3MDZD
N0YxMUVGOTE0RDdENTdDNEY5QUUwMi9NaFRpWUtlUGZSWjM2REFUZkJCbGN3QXh6
MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01oVGlZS2VQZlJaMzZEQVRmQkJsY3dBeHoyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk4MS8yNzJCNEM3MDZDN0YxMUVGOTE0RDdENTdDNEY5QUUwMi9NaFRpWUtlUGZS
WjM2REFUZkJCbGN3QXh6MlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADsKf0wdyLGwy8G6YWCwa82mkxzZAaKnPDuQu2DaZ0c9YIqs8dUf4KAqTWiBZ
obOa7Jtnazn92Ile+jg8lfTtDO1gcmF+fi0PqvSfj6WD1xy8C+9O6IJdFTcf6afH
GyNnkbxSHFANRkgYHfkFXHmaU2sxBiYDd+ArK9QR56SDCfWD3+Q4cAckwTiAGXAF
xUrou/bY9ff2fg1kLSKk/9bUbRsBf3KTf8PRhaKQnfNvmPkRsIaUJDXt9HOEYPCh
c7SQPpSLKb+BFupl8RRu0YmUcpCLsvGimClW8sNJR9OY9y8tF0KBU56gSrxoD8bu
YUePn89TrXPVaFOkOEys9008Sw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:47:38 2026 by rpki-client