
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json)
Hash identifier: kObQmOoC9v3Rqcf/Ozbd25p3tkO5/6yBN5Y4zDKwETE=
Subject key identifier: FF:55:38:FB:9C:2E:7C:46:F1:12:2C:FD:4F:73:DA:95:F5:D8:93:8E
Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79
Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
Certificate serial: 02AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
Manifest number: 02A6
Signing time: Wed 07 Oct 2026 02:01:31 +0000
Manifest this update: Wed 07 Oct 2026 02:01:30 +0000
Manifest next update: Wed 14 Oct 2026 02:01:30 +0000
Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: 9wV/Evs5M7y9HD2g1sBdG8BigZk8CcayCM7JDwvbX9w=)
2: 8186A634879311F196D38C895411F970.roa (hash: J1kY9xoNQfqvhMZxfn/qW5nnqxY8gupzwRhsyrrKayE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl
rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
Validity
Not Before: Oct 7 02:01:30 2026 GMT
Not After : Oct 14 02:01:30 2026 GMT
Subject: CN=6ac5a7fa-0f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:31:85:03:02:b3:f5:03:33:a0:ea:90:14:
f8:a1:44:74:a9:b5:c6:15:59:32:19:9c:17:0a:c6:
a6:f9:dc:c2:7b:ff:7d:08:92:8d:17:e5:45:31:cb:
5c:f5:1a:ac:c6:f4:73:fa:06:e1:a1:58:ed:ea:6d:
46:cc:0d:55:99:5a:6e:1b:70:a1:7b:66:bf:47:ad:
1c:2e:a6:9b:c1:5d:f9:0e:5c:f0:98:10:70:17:17:
97:98:c9:24:c7:4b:68:2f:3c:1b:fb:67:10:84:6f:
92:8f:00:9a:94:b7:9d:bb:e1:c3:ce:b7:5b:e1:e9:
45:d2:44:71:4c:fa:20:4f:75:8d:48:a2:10:29:8e:
8d:f3:50:d6:2d:c4:32:aa:ee:c6:89:0a:e8:9f:5f:
30:05:0f:7c:e5:77:60:bd:9e:7a:2b:88:24:41:2a:
3a:cd:34:d1:f9:fa:80:78:7b:87:ed:cd:a0:1b:96:
d0:0e:ba:10:fa:23:b2:5b:dc:5c:6d:32:db:04:c1:
53:fb:56:86:e2:24:4b:a9:88:85:b9:b6:29:d6:1c:
8c:6c:c0:4a:27:63:25:da:7d:ca:5b:70:d4:57:7c:
16:75:a5:8c:8e:91:5c:a6:1f:8d:08:dc:ec:44:98:
95:a4:54:91:70:94:d4:e6:b9:09:42:6e:54:75:b9:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:55:38:FB:9C:2E:7C:46:F1:12:2C:FD:4F:73:DA:95:F5:D8:93:8E
X509v3 Authority Key Identifier:
keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:61:e0:80:3c:2a:57:1f:ad:86:40:93:01:f4:1f:06:3f:db:
77:8d:da:75:60:87:7f:78:8d:e6:b3:73:9d:71:ce:27:13:da:
43:de:bc:14:03:20:dc:a8:1c:81:86:05:d1:60:5b:d3:09:93:
45:a4:d3:8d:cc:d6:53:88:03:a2:c5:40:a8:fa:cf:60:f0:ae:
29:84:81:42:66:ae:27:a3:bf:c6:94:66:2d:98:59:5d:9c:86:
47:d2:5d:dd:e0:8f:0a:1d:a4:6f:95:b9:8a:96:7f:b5:2c:34:
ec:07:a6:8d:fa:24:80:af:50:73:95:a6:6d:e7:24:d6:13:91:
e6:e4:75:67:f2:3c:11:bd:11:05:2e:95:65:98:e5:0b:5e:72:
b0:a6:2f:10:4b:ce:21:bb:4e:b8:c4:1d:06:ec:fd:7a:ea:40:
70:61:61:64:b6:76:ec:a0:bf:bb:8c:96:f4:7b:aa:c7:81:7a:
85:fa:f2:13:5a:80:fb:63:18:e7:43:e5:c2:34:fc:9e:32:c0:
6b:02:58:79:d0:65:02:2b:4d:e0:6a:ed:7c:a2:e1:aa:c0:50:
91:ef:b3:27:d7:1a:29:bd:52:be:29:5f:0b:1a:e0:b7:45:4c:
b4:c7:ca:9a:8d:79:d6:4b:be:38:0c:b3:1d:33:3b:51:14:b0:
38:fa:3c:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz
NEJCQkI2NzkwHhcNMjYxMDA3MDIwMTMwWhcNMjYxMDE0MDIwMTMwWjAYMRYwFAYD
VQQDEw02YWM1YTdmYS0wZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqkxhQMCs/UDM6DqkBT4oUR0qbXGFVkyGZwXCsam+dzCe/99CJKNF+VFMctc
9RqsxvRz+gbhoVjt6m1GzA1VmVpuG3Che2a/R60cLqabwV35DlzwmBBwFxeXmMkk
x0toLzwb+2cQhG+SjwCalLedu+HDzrdb4elF0kRxTPogT3WNSKIQKY6N81DWLcQy
qu7GiQron18wBQ985XdgvZ56K4gkQSo6zTTR+fqAeHuH7c2gG5bQDroQ+iOyW9xc
bTLbBMFT+1aG4iRLqYiFubYp1hyMbMBKJ2Ml2n3KW3DUV3wWdaWMjpFcph+NCNzs
RJiVpFSRcJTU5rkJQm5UdbmYXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9VOPuc
LnxG8RIs/U9z2pX12JOOMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF
ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx
b1dYQlVMeGZZamswdTd0bmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlWHggDwqVx+thkCTAfQfBj/bd43adWCHf3iN5rNznXHOJxPaQ968FAMg3Kgc
gYYF0WBb0wmTRaTTjczWU4gDosVAqPrPYPCuKYSBQmauJ6O/xpRmLZhZXZyGR9Jd
3eCPCh2kb5W5ipZ/tSw07AemjfokgK9Qc5Wmbeck1hOR5uR1Z/I8Eb0RBS6VZZjl
C15ysKYvEEvOIbtOuMQdBuz9eupAcGFhZLZ27KC/u4yW9Huqx4F6hfryE1qA+2MY
50PlwjT8njLAawJYedBlAitN4GrtfKLhqsBQke+zJ9caKb1SvilfCxrgt0VMtMfK
mo151ku+OAyzHTM7URSwOPo8BQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:42:40 2026 by rpki-client