
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier: Dqs3uoR0rqRguDv8K/kH+EoX6XNOAg9MEnPIMIgA06M=
Subject key identifier: 6A:4A:C0:58:73:CE:2A:F0:91:4F:F0:C2:74:50:A4:85:6D:1C:23:11
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number: 0254
Signing time: Sat 03 Oct 2026 02:55:49 +0000
Manifest this update: Sat 03 Oct 2026 02:55:49 +0000
Manifest next update: Sat 10 Oct 2026 02:55:49 +0000
Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: T09ug4+I3Pm6+qIT3jLr9HGH/ZmZmkVRGMVWri7uRf0=)
2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: 9qjTDIESmxEjzI0WcDUL/9pvn6/XAMgDdbhrxTlivHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Validity
Not Before: Oct 3 02:55:49 2026 GMT
Not After : Oct 10 02:55:49 2026 GMT
Subject: CN=6ac06eb5-67e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:43:2a:32:1b:e5:ac:47:f2:31:05:5e:82:
8e:84:6f:f6:4b:bf:34:ac:b1:3e:5a:42:86:52:32:
1d:53:67:17:01:08:43:d8:5d:1e:a6:6f:f5:11:d8:
4d:60:a5:fb:44:01:4d:80:1a:91:40:36:07:47:37:
0c:c0:40:be:99:84:eb:ee:0e:de:f4:fa:45:65:a4:
09:ed:fd:ea:5a:f3:4b:c2:91:ea:85:10:08:dd:27:
2e:02:b7:38:11:8d:ed:40:55:17:20:9e:ec:44:e8:
ef:d1:08:bf:67:77:d3:a0:78:e4:b2:c0:a6:d8:9e:
63:5c:c3:60:a6:03:00:f9:23:73:af:62:11:af:81:
e6:f3:0d:d4:65:16:07:da:a7:26:ae:12:22:51:1c:
39:82:35:ec:04:cd:2a:86:07:2a:83:a5:de:49:d7:
b7:50:7b:11:18:7b:c7:75:3f:0c:fa:1c:ee:a1:c1:
1d:5b:af:04:98:47:c2:6f:09:f7:90:01:3d:19:48:
35:61:32:7e:a3:43:c2:f0:f4:8f:5c:db:f0:1a:17:
25:3f:ae:54:2a:e1:90:f7:da:30:85:43:d9:26:3e:
12:ce:c8:01:bd:77:19:39:83:17:60:92:2e:c3:21:
6a:c7:fb:3a:9f:26:d5:33:a3:e8:de:9e:2a:38:20:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:C0:58:73:CE:2A:F0:91:4F:F0:C2:74:50:A4:85:6D:1C:23:11
X509v3 Authority Key Identifier:
keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:d5:6d:44:36:cf:4b:2d:53:7c:c1:da:4f:bc:b4:7f:e6:4e:
61:74:f4:e5:29:ce:6f:20:1d:f0:6c:da:07:82:ca:c9:42:c2:
39:88:64:3d:0d:90:41:ec:7d:2d:43:3a:5c:ab:8b:85:e6:f0:
db:f7:40:fd:7a:dc:18:dc:f1:17:0c:29:af:46:ef:3d:e2:d4:
15:5b:17:39:1e:5a:fc:91:85:24:cc:e7:7f:ce:e7:33:85:b9:
4d:c1:80:42:eb:2c:4d:c4:70:47:69:3f:73:6c:88:1d:73:45:
54:36:83:be:01:bd:8e:3d:0e:32:87:df:21:e2:a8:d8:a4:b8:
ad:63:eb:07:3b:49:2e:f1:0f:32:30:f7:6f:a1:b7:6d:bf:df:
9e:46:89:ad:7b:4f:7a:76:22:21:c4:6b:b6:d4:07:8e:f5:26:
ed:c7:dd:9b:8a:37:b8:ea:c5:c0:9f:df:4b:77:45:fa:f1:c2:
fc:e6:0c:cc:d3:7b:51:9d:c4:92:2a:50:9c:58:7f:28:33:34:
ea:75:c6:4a:5f:2f:70:3a:bb:2e:7c:03:11:7b:06:6d:d7:11:
11:07:89:f7:e7:91:4d:00:a6:76:e3:15:ca:d9:4f:a2:44:e8:
42:ab:ca:a6:6f:12:87:f2:cc:43:b0:78:7a:b7:d0:ce:f3:eb:
79:3b:3b:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4
MURBNEIzMUMwHhcNMjYxMDAzMDI1NTQ5WhcNMjYxMDEwMDI1NTQ5WjAYMRYwFAYD
VQQDEw02YWMwNmViNS02N2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn0dDKjIb5axH8jEFXoKOhG/2S780rLE+WkKGUjIdU2cXAQhD2F0epm/1EdhN
YKX7RAFNgBqRQDYHRzcMwEC+mYTr7g7e9PpFZaQJ7f3qWvNLwpHqhRAI3ScuArc4
EY3tQFUXIJ7sROjv0Qi/Z3fToHjkssCm2J5jXMNgpgMA+SNzr2IRr4Hm8w3UZRYH
2qcmrhIiURw5gjXsBM0qhgcqg6XeSde3UHsRGHvHdT8M+hzuocEdW68EmEfCbwn3
kAE9GUg1YTJ+o0PC8PSPXNvwGhclP65UKuGQ99owhUPZJj4SzsgBvXcZOYMXYJIu
wyFqx/s6nybVM6Po3p4qOCA1DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGpKwFhz
zirwkU/wwnRQpIVtHCMRMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx
RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq
M2E1amRsWlBqVmFCMmtzeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASNVtRDbPSy1TfMHaT7y0f+ZOYXT05SnObyAd8GzaB4LKyULCOYhkPQ2QQex9
LUM6XKuLhebw2/dA/XrcGNzxFwwpr0bvPeLUFVsXOR5a/JGFJMznf87nM4W5TcGA
QussTcRwR2k/c2yIHXNFVDaDvgG9jj0OMoffIeKo2KS4rWPrBztJLvEPMjD3b6G3
bb/fnkaJrXtPenYiIcRrttQHjvUm7cfdm4o3uOrFwJ/fS3dF+vHC/OYMzNN7UZ3E
kipQnFh/KDM06nXGSl8vcDq7LnwDEXsGbdcREQeJ9+eRTQCmduMVytlPokToQqvK
pm8Sh/LMQ7B4erfQzvPreTs7Cg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:04:44 2026 by rpki-client