
$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier: kFDPjXruvOQLdSwfyrZvIaq/LCXootOlpl5TKYDultI=
Subject key identifier: D4:A4:79:13:05:66:CE:AA:1A:F9:1B:EF:E3:B3:8E:29:5B:DB:F0:E2
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial: 0A18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number: 0A05
Signing time: Tue 12 May 2026 19:52:32 +0000
Manifest this update: Tue 12 May 2026 19:52:32 +0000
Manifest next update: Tue 19 May 2026 19:52:32 +0000
Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: fFtdE0zUdqUY5WL+Tc0Ik8D2YqZ2jRAVuxGOORs0crs=)
2: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: Sblu535PzvGVdxFBEruufBhd0MyzgVdZtuh1fI35ITw=)
3: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: MKSHGi4h67nwUpcuBwoNEL48SK6GQQ+1zuIScKP5bro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2584 (0xa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Validity
Not Before: May 12 19:52:32 2026 GMT
Not After : May 19 19:52:32 2026 GMT
Subject: CN=6a038500-0d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:8e:36:b1:5b:f6:9e:d9:1c:e3:89:82:df:
90:bb:b5:c7:05:e8:ab:2e:aa:3b:dc:d3:ea:54:a3:
9e:46:9c:86:5d:8d:0e:8c:ea:5b:7f:86:21:99:f9:
53:dd:5d:3c:84:e2:f9:11:41:84:8e:bd:73:17:e6:
e1:d2:50:96:1d:66:a4:a5:59:b5:b4:f2:5c:c3:95:
39:79:b3:36:cf:3c:57:29:92:b0:51:5f:8c:41:ad:
a8:11:cc:7a:d1:16:26:8b:36:ba:73:28:dd:7b:49:
df:81:da:33:57:c4:22:87:6f:3e:a6:94:00:28:06:
a5:ea:10:18:f4:31:8d:d2:57:b3:3d:93:b5:71:11:
dc:07:0e:74:89:d3:51:f2:ed:ad:0a:e4:4e:04:92:
19:54:e4:d6:cd:c3:4d:c9:ce:33:c4:04:77:c9:4f:
f3:55:d9:b0:da:fc:9f:05:3c:66:94:ef:a6:9e:ae:
79:66:07:1b:f9:b4:0e:99:af:be:e3:4f:03:76:c6:
08:55:46:0b:3e:f3:5d:5c:ae:c9:22:b5:3b:c8:99:
27:c0:06:0a:4a:f7:59:27:61:9f:d6:f9:27:0b:c4:
f9:c0:24:48:4f:89:4e:26:16:a7:aa:a8:59:d7:cf:
c5:3a:7a:02:e2:aa:0f:97:1b:fd:c8:f3:2d:c4:16:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:79:13:05:66:CE:AA:1A:F9:1B:EF:E3:B3:8E:29:5B:DB:F0:E2
X509v3 Authority Key Identifier:
keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c4:8d:1b:b2:f9:1c:42:78:3e:7d:b9:e6:8b:4f:d4:0a:5f:
c6:87:dc:82:79:62:00:52:ac:c5:92:29:78:88:5b:da:32:86:
da:fc:19:9d:7f:4e:5b:d2:2e:de:3e:e5:72:6e:1e:4b:18:e8:
16:89:6a:7f:b8:ad:2c:e4:35:5f:49:ab:b1:6a:b5:1d:5a:d9:
85:bc:89:9b:84:a8:ee:9e:f2:77:f0:e4:e3:9c:b3:67:9c:76:
a8:4b:8d:0f:7b:ee:2a:17:35:7d:0b:d8:b8:72:f0:22:7e:92:
fd:20:e8:21:05:63:ce:18:fb:59:d0:8d:16:bd:c2:2a:c8:ea:
c5:d3:39:d6:0c:20:87:e9:a0:5c:8a:39:fa:92:b4:26:86:83:
1a:ed:5c:2c:ae:69:d8:75:24:77:7d:cf:a8:c6:e3:ae:e5:a5:
cc:66:7a:51:43:ad:5f:27:aa:ad:bf:d4:9e:5a:e5:af:a1:85:
83:8f:12:f2:9c:8e:81:45:63:6f:fc:f5:a3:50:c5:8c:5f:6f:
4c:30:3b:9e:15:13:52:ab:29:76:a1:a0:74:62:df:3a:34:d8:
b6:3c:03:e0:12:95:c5:e8:31:f6:9f:01:eb:b7:bd:9b:56:8b:
a5:10:c9:9f:e5:04:ef:41:61:f2:af:49:8e:9c:cf:76:f8:18:
82:35:a2:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3
NTYzOTAwMTYwHhcNMjYwNTEyMTk1MjMyWhcNMjYwNTE5MTk1MjMyWjAYMRYwFAYD
VQQDEw02YTAzODUwMC0wZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEOONrFb9p7ZHOOJgt+Qu7XHBeirLqo73NPqVKOeRpyGXY0OjOpbf4YhmflT
3V08hOL5EUGEjr1zF+bh0lCWHWakpVm1tPJcw5U5ebM2zzxXKZKwUV+MQa2oEcx6
0RYmiza6cyjde0nfgdozV8Qih28+ppQAKAal6hAY9DGN0lezPZO1cRHcBw50idNR
8u2tCuROBJIZVOTWzcNNyc4zxAR3yU/zVdmw2vyfBTxmlO+mnq55Zgcb+bQOma++
408DdsYIVUYLPvNdXK7JIrU7yJknwAYKSvdZJ2Gf1vknC8T5wCRIT4lOJhanqqhZ
18/FOnoC4qoPlxv9yPMtxBbGrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSkeRMF
Zs6qGvkb7+Ozjilb2/DiMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5
MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB
QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI
SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApMSNG7L5HEJ4Pn255otP1ApfxofcgnliAFKsxZIpeIhb2jKG2vwZnX9OW9Iu
3j7lcm4eSxjoFolqf7itLOQ1X0mrsWq1HVrZhbyJm4So7p7yd/Dk45yzZ5x2qEuN
D3vuKhc1fQvYuHLwIn6S/SDoIQVjzhj7WdCNFr3CKsjqxdM51gwgh+mgXIo5+pK0
JoaDGu1cLK5p2HUkd33PqMbjruWlzGZ6UUOtXyeqrb/Unlrlr6GFg48S8pyOgUVj
b/z1o1DFjF9vTDA7nhUTUqspdqGgdGLfOjTYtjwD4BKVxegx9p8B67e9m1aLpRDJ
n+UE70Fh8q9JjpzPdvgYgjWi/A==
-----END CERTIFICATE-----
Generated at Wed May 13 15:38:13 2026 by rpki-client