
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json)
Hash identifier: QNV0QaML6SEnVEy0QDg03G56zTt356WMutypK2zHKwI=
Subject key identifier: EC:B8:CF:0E:32:C5:F5:05:96:36:D4:A7:13:F8:31:86:D5:9B:5C:45
Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04
Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
Certificate serial: 0283
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
Manifest number: 027A
Signing time: Sun 27 Sep 2026 02:18:24 +0000
Manifest this update: Sun 27 Sep 2026 02:18:24 +0000
Manifest next update: Sun 04 Oct 2026 02:18:24 +0000
Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: F2vXJp3vV9S3m0ccyRs0eIqeT1mV7+MPuFVKxDWx4Hk=)
2: IwkE3NTSBHnPoaw63aEM-6Fq6i4.asa (hash: 75CijGq4zaaPwrDHBmtzCsFWWay67ixyFGQa2rV7WsU=)
3: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: rRaSqmTvgkTHNdrrqj2C+m5F7vcgfVw9LJ/c2+Gw2UA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl
rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
Validity
Not Before: Sep 27 02:18:24 2026 GMT
Not After : Oct 4 02:18:24 2026 GMT
Subject: CN=6ab87cf0-9a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:a1:0e:b6:1c:6e:1a:b4:0c:26:cf:38:41:
ca:e3:80:6a:0d:a2:16:3a:ea:23:80:4f:92:35:bd:
d6:f1:b1:0c:ae:bd:0d:cb:d7:02:89:32:62:96:d2:
6c:57:9e:42:3d:7a:40:d1:a0:d9:aa:3f:e8:bb:f0:
2a:a7:b7:0a:7e:22:44:c8:eb:b4:85:74:06:97:6b:
c5:fa:dc:6c:07:b8:96:5c:0a:fc:3b:1f:12:b8:2b:
63:e0:e9:7e:46:4d:d3:d9:e7:88:71:a0:d5:3b:0d:
76:43:dd:d7:dd:a1:92:aa:ef:79:6b:46:40:8a:3c:
0b:d6:13:30:8d:f8:ef:29:df:56:63:0f:1b:8c:c1:
ca:b0:6c:5f:36:4a:a6:4b:0b:f0:7f:bb:eb:2c:dc:
6e:8a:aa:fc:ed:91:69:98:aa:24:53:d7:18:19:9c:
e8:32:e7:17:b0:a6:6d:e3:87:52:44:3b:58:59:68:
0d:7f:c3:85:c3:16:f0:1a:31:da:f0:69:e1:22:d3:
8f:7a:90:15:eb:46:53:77:d1:aa:29:00:19:23:f7:
c4:48:62:3e:f3:e1:84:dc:2d:03:4a:3a:a8:5e:69:
5b:a2:8b:05:7f:8f:e8:1d:6c:4b:66:0e:9c:b8:e6:
27:f1:3a:d9:5c:e4:db:ff:f5:2b:5e:4d:95:9b:4e:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B8:CF:0E:32:C5:F5:05:96:36:D4:A7:13:F8:31:86:D5:9B:5C:45
X509v3 Authority Key Identifier:
keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:98:fc:aa:a1:2c:b6:67:20:84:64:18:c4:d1:1a:ec:42:a7:
f9:47:d3:b5:ae:aa:18:cd:ef:25:5c:88:74:09:2b:95:29:6d:
41:e5:46:60:d2:83:bf:46:f6:b8:94:d8:a2:0c:4e:00:ff:ff:
e6:0c:2a:a6:ba:ea:1e:8e:47:ad:35:d3:31:c8:b8:e1:16:9c:
e5:68:ac:1a:99:17:ab:db:1c:2f:c1:93:64:cc:41:b9:51:50:
1f:e3:e5:da:9d:10:db:7d:df:9b:a5:66:42:7d:a6:42:8e:9a:
81:ad:ef:f6:4c:47:44:94:02:4f:33:1a:33:cd:11:10:24:76:
54:d6:60:93:c8:89:d8:85:77:de:f5:77:11:16:0c:4a:72:9d:
d6:69:85:2d:eb:09:9a:7c:21:85:f5:1b:d8:17:08:61:3e:49:
8f:e0:fe:20:4d:fc:23:91:ce:7b:d9:25:e0:dd:8e:63:14:ef:
79:83:5f:96:d6:ed:dd:fd:d9:36:ff:bc:3e:36:0c:18:83:be:
40:63:05:96:c4:45:13:93:73:ec:a8:8c:61:98:6c:2f:1c:5f:
80:a3:b0:53:6b:e8:36:f8:52:92:8f:fb:40:f2:70:66:64:91:
a7:04:0d:7d:32:ec:8a:22:e3:48:ad:3c:65:fd:3c:35:0a:11:
21:b7:4e:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC
OUUxRkYxMDQwHhcNMjYwOTI3MDIxODI0WhcNMjYxMDA0MDIxODI0WjAYMRYwFAYD
VQQDEw02YWI4N2NmMC05YTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwT2hDrYcbhq0DCbPOEHK44BqDaIWOuojgE+SNb3W8bEMrr0Ny9cCiTJiltJs
V55CPXpA0aDZqj/ou/Aqp7cKfiJEyOu0hXQGl2vF+txsB7iWXAr8Ox8SuCtj4Ol+
Rk3T2eeIcaDVOw12Q93X3aGSqu95a0ZAijwL1hMwjfjvKd9WYw8bjMHKsGxfNkqm
Swvwf7vrLNxuiqr87ZFpmKokU9cYGZzoMucXsKZt44dSRDtYWWgNf8OFwxbwGjHa
8GnhItOPepAV60ZTd9GqKQAZI/fESGI+8+GE3C0DSjqoXmlboosFf4/oHWxLZg6c
uOYn8TrZXOTb//UrXk2Vm05djwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOy4zw4y
xfUFljbUpxP4MYbVm1xFMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2
M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2
cEdnc3JjTnBObUM1NGY4UVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYpj8qqEstmcghGQYxNEa7EKn+UfTta6qGM3vJVyIdAkrlSltQeVGYNKDv0b2
uJTYogxOAP//5gwqprrqHo5HrTXTMci44Rac5WisGpkXq9scL8GTZMxBuVFQH+Pl
2p0Q233fm6VmQn2mQo6aga3v9kxHRJQCTzMaM80RECR2VNZgk8iJ2IV33vV3ERYM
SnKd1mmFLesJmnwhhfUb2BcIYT5Jj+D+IE38I5HOe9kl4N2OYxTveYNfltbt3f3Z
Nv+8PjYMGIO+QGMFlsRFE5Nz7KiMYZhsLxxfgKOwU2voNvhSko/7QPJwZmSRpwQN
fTLsiiLjSK08Zf08NQoRIbdOpg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:30:26 2026 by rpki-client