
$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
File: Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json)
Hash identifier: /AjFseKHrW5PMwtbEGV8JnmKPEf5ssiIzMQfO04F5J4=
Subject key identifier: 8A:F5:02:B7:FC:3E:84:65:19:BF:CB:1E:95:E1:38:8F:45:44:41:93
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Certificate issuer: /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
Manifest number: 016B
Signing time: Wed 13 May 2026 04:56:02 +0000
Manifest this update: Wed 13 May 2026 04:56:02 +0000
Manifest next update: Wed 20 May 2026 04:56:02 +0000
Files and hashes: 1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: 8EjqUp1JQA4DTt2Jsi+pVqY1hr0OY6/vhWlKtDiKMLY=)
2: 4F179FFA45C711F09D90C528C4F9AE02.roa (hash: 5/g54aGziHBjXp+Y0wY4b/lxEnBialwBHuFwdj1OTWA=)
3: E02064A0C9E911EFABA90568C4F9AE02.roa (hash: S1aFdcC/LrHbZUoN74Vum9zuMT2KNx5IAF9Hxxp+yWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Validity
Not Before: May 13 04:56:02 2026 GMT
Not After : May 20 04:56:02 2026 GMT
Subject: CN=6a040462-0c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:ac:36:74:94:b9:68:b9:61:a1:eb:cf:0c:
41:05:03:0a:21:a3:e9:c7:89:f9:28:ae:e4:e7:5f:
03:95:78:ed:1c:63:5a:4d:2e:e5:08:1e:a5:50:a7:
2d:5b:d8:87:27:b6:1a:f7:0a:a0:9f:a3:ae:a8:26:
3f:8d:92:c5:43:16:4d:98:c9:75:96:1a:7a:df:44:
c1:7c:57:17:c6:66:8d:5e:bc:0a:60:6a:6b:74:f3:
64:ac:0d:2f:0d:9d:51:f3:80:8f:fb:1a:67:c2:12:
15:0a:c8:c8:6d:98:7d:1f:10:08:96:23:59:46:d8:
b3:7e:24:b2:ab:30:c6:7c:1d:88:d7:d0:68:65:d4:
c9:c4:fd:e5:0d:6c:05:91:d8:58:d5:8c:28:43:3f:
af:b2:30:2f:19:75:a1:cf:fa:72:03:92:53:52:55:
1a:fb:b7:a8:35:ef:25:70:5b:e8:4b:c4:98:3c:69:
15:42:ec:67:1b:4b:9b:99:89:67:e8:12:22:00:71:
b4:69:95:ab:1e:d8:6a:4d:65:e5:ff:85:18:75:a5:
1a:f2:42:32:3c:03:5e:59:0d:c7:b3:f5:95:d0:28:
ee:6f:be:a1:5f:19:b2:43:6b:57:82:a9:00:28:bc:
c3:5e:70:d0:4f:4e:bf:7e:6e:28:ff:76:7c:a2:94:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F5:02:B7:FC:3E:84:65:19:BF:CB:1E:95:E1:38:8F:45:44:41:93
X509v3 Authority Key Identifier:
keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:1f:f5:56:4d:f6:84:8a:5c:03:32:60:c5:1e:76:ad:48:5d:
ba:be:c7:23:e3:22:95:82:a2:32:70:18:4e:59:64:e8:72:d9:
cc:03:15:06:fb:40:21:da:a8:8a:f5:16:99:ac:bd:0a:96:d6:
d9:25:03:28:01:87:0c:91:5a:aa:5b:13:6d:97:af:3a:a9:da:
2e:3e:38:63:0d:87:24:c5:e7:83:a0:0a:cb:a2:43:9f:71:41:
6e:f6:db:b5:8f:f6:ca:8e:32:17:f0:6b:b0:34:22:d8:a6:ee:
d7:43:67:22:33:5d:75:18:b0:20:1c:b9:4d:f8:4e:e5:79:a3:
21:7e:a7:7c:82:04:84:03:48:a5:00:d5:df:9c:89:5b:18:37:
1f:f4:90:13:76:dd:5d:2f:10:85:2c:2b:16:c4:d1:7f:60:24:
9d:b6:de:41:49:91:fb:87:09:a1:47:a4:f9:c1:32:55:13:d4:
89:51:1e:4c:c5:8c:c8:7a:b2:fc:70:bb:f1:c6:eb:43:e2:e3:
71:6c:b8:fe:d2:7e:6f:ba:d1:8c:42:2f:90:12:e7:ef:0b:cb:
ed:dc:3a:03:ed:fa:61:a1:fa:88:7c:0e:b1:eb:c8:d3:d5:00:
e1:1f:7d:a4:4c:6c:a0:9d:4c:ad:d7:b9:09:65:73:23:fb:e9:
cb:d7:8d:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA2QzcxMTAvBgNVBAUTKDIyOUVFNkNGQjc5NTg0QkEyMzEwQUNDRTQ1MjgzOEY3
QTQ4QTUwMUUwHhcNMjYwNTEzMDQ1NjAyWhcNMjYwNTIwMDQ1NjAyWjAYMRYwFAYD
VQQDEw02YTA0MDQ2Mi0wYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmdysNnSUuWi5YaHrzwxBBQMKIaPpx4n5KK7k518DlXjtHGNaTS7lCB6lUKct
W9iHJ7Ya9wqgn6OuqCY/jZLFQxZNmMl1lhp630TBfFcXxmaNXrwKYGprdPNkrA0v
DZ1R84CP+xpnwhIVCsjIbZh9HxAIliNZRtizfiSyqzDGfB2I19BoZdTJxP3lDWwF
kdhY1YwoQz+vsjAvGXWhz/pyA5JTUlUa+7eoNe8lcFvoS8SYPGkVQuxnG0ubmYln
6BIiAHG0aZWrHthqTWXl/4UYdaUa8kIyPANeWQ3Hs/WV0Cjub76hXxmyQ2tXgqkA
KLzDXnDQT06/fm4o/3Z8opRZGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIr1Arf8
PoRlGb/LHpXhOI9FREGTMB8GA1UdIwQYMBaAFCKe5s+3lYS6IxCszkUoOPekilAe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDZDNy82RjAzRDYzMDMy
MEUxMUVGQjZFMERBNzZDNEY5QUUwMi9JcDdtejdlVmhMb2pFS3pPUlNnNDk2U0tV
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lwN216N2VWaExvakVLek9SU2c0OTZTS1VCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDZDNy82RjAzRDYzMDMyMEUxMUVGQjZFMERBNzZDNEY5QUUwMi9JcDdtejdlVmhM
b2pFS3pPUlNnNDk2U0tVQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaB/1Vk32hIpcAzJgxR52rUhdur7HI+MilYKiMnAYTllk6HLZzAMVBvtAIdqo
ivUWmay9CpbW2SUDKAGHDJFaqlsTbZevOqnaLj44Yw2HJMXng6AKy6JDn3FBbvbb
tY/2yo4yF/BrsDQi2Kbu10NnIjNddRiwIBy5TfhO5XmjIX6nfIIEhANIpQDV35yJ
Wxg3H/SQE3bdXS8QhSwrFsTRf2AknbbeQUmR+4cJoUek+cEyVRPUiVEeTMWMyHqy
/HC78cbrQ+LjcWy4/tJ+b7rRjEIvkBLn7wvL7dw6A+36YaH6iHwOsevI09UA4R99
pExsoJ1Mrde5CWVzI/vpy9eN2Q==
-----END CERTIFICATE-----
Generated at Wed May 13 11:47:55 2026 by rpki-client