
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
File: rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json)
Hash identifier: Zf52HAnLLIBia5PldPcO7YEgZwCAldSJ+tXuMFeik3E=
Subject key identifier: 50:19:01:64:62:E4:D8:2F:1E:8E:2B:38:01:06:C5:56:5C:25:04:3F
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Certificate issuer: /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
Manifest number: 3E
Signing time: Mon 11 May 2026 08:41:16 +0000
Manifest this update: Mon 11 May 2026 08:41:16 +0000
Manifest next update: Mon 18 May 2026 08:41:16 +0000
Files and hashes: 1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: DUIRn8R+uXaA0zBqP0NKE6VpkOEKQOLbzIUdoJ8lrno=)
2: A6977620FC6911F0B9F21353506F56BC.roa (hash: 2+c+kkZNH5WFLaEH+Mtz0KAlZ3T9lg2Gax329RYsTqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Validity
Not Before: May 11 08:41:16 2026 GMT
Not After : May 18 08:41:16 2026 GMT
Subject: CN=6a01962c-05f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:64:19:d7:50:9b:3e:d8:e6:b9:e6:bb:73:
24:21:86:e4:76:d4:e6:69:f7:c8:db:75:66:94:f9:
79:a7:c7:89:c6:46:19:5f:2e:96:4e:95:64:33:a9:
37:a6:21:fe:40:e4:9c:a9:83:56:d5:f0:29:48:ba:
78:cf:dd:77:99:63:e2:a0:1a:15:63:6d:66:64:aa:
5c:a4:f6:70:b1:d8:b3:65:8e:b1:3f:79:d0:7c:2d:
53:3c:46:96:96:b5:d9:1a:cd:6a:e4:a6:28:ff:41:
f6:6f:96:f7:09:66:67:12:3e:33:49:75:78:6f:dc:
8e:d4:5d:cd:25:d4:c2:43:4e:60:36:06:a8:52:2e:
95:2f:01:fc:30:15:d9:1e:c4:af:e5:aa:4a:9d:89:
e1:4e:fb:42:09:37:a6:68:a5:96:bf:e0:b7:5a:99:
9a:bb:c4:a3:ab:03:1c:fc:c1:dc:30:87:f2:e2:c5:
05:73:a6:dc:c6:3e:1a:94:51:cb:96:9a:d3:5d:fc:
a5:37:2f:72:d5:11:29:f5:7c:c2:d5:d4:18:11:13:
ed:1e:30:37:21:9a:79:13:d5:8c:f0:8b:f3:4f:5c:
a9:52:f4:f8:ef:b4:f6:cd:ec:14:70:52:23:10:d7:
0e:a0:a3:a8:bd:b2:e4:f5:1e:7b:b0:21:06:56:44:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:19:01:64:62:E4:D8:2F:1E:8E:2B:38:01:06:C5:56:5C:25:04:3F
X509v3 Authority Key Identifier:
keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:03:d1:b4:0d:5c:d0:85:dd:5e:23:8d:8d:17:92:3a:07:45:
08:1c:19:ab:80:41:dd:6c:0c:b7:0e:0a:dd:6e:4d:4c:e5:9f:
b9:c9:c3:a7:09:f6:a0:53:7e:f5:eb:b3:64:86:8c:a0:ab:4a:
2e:78:33:6d:81:94:00:ef:01:c8:ce:05:ed:33:cf:7b:0f:df:
6c:36:ed:2f:04:e4:2d:43:c3:5f:43:5a:00:15:2e:6c:84:51:
4d:ce:76:2b:3c:1e:1e:74:66:b5:a3:20:e0:7d:81:06:0b:68:
53:83:5d:7c:7f:9a:e7:85:cd:95:51:e9:77:f6:87:1b:e7:93:
a1:14:ec:d5:07:b2:5d:18:4e:ad:c0:0d:76:4c:d1:dd:fb:25:
1d:23:b3:d7:b2:37:ac:a8:f8:7d:db:88:51:4f:4d:09:75:8e:
3a:93:91:a0:78:10:3a:51:78:9d:df:e2:d1:c4:54:fd:95:82:
7b:3a:c1:c9:77:5c:0b:5b:b4:e5:94:e2:87:c6:f0:ef:66:38:
8b:39:63:cc:95:70:7f:cf:70:22:92:28:13:94:ef:ab:4d:f5:
0d:a8:c0:28:e5:ed:13:42:ac:8e:d4:29:d1:b9:39:d5:c6:04:
26:0d:38:b5:3e:80:c4:7e:70:98:52:4f:d9:a1:fb:2d:f6:f2:
68:92:fc:a1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NzRERDExMC8GA1UEBRMoQUYwMkVCNDEzQzVDMDUzMTc1QzZGQ0JDMTlDNjkzNjA2
M0U3NjgxMTAeFw0yNjA1MTEwODQxMTZaFw0yNjA1MTgwODQxMTZaMBgxFjAUBgNV
BAMTDTZhMDE5NjJjLTA1ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmY2QZ11CbPtjmuea7cyQhhuR21OZp98jbdWaU+Xmnx4nGRhlfLpZOlWQzqTem
If5A5Jypg1bV8ClIunjP3XeZY+KgGhVjbWZkqlyk9nCx2LNljrE/edB8LVM8RpaW
tdkazWrkpij/QfZvlvcJZmcSPjNJdXhv3I7UXc0l1MJDTmA2BqhSLpUvAfwwFdke
xK/lqkqdieFO+0IJN6ZopZa/4LdamZq7xKOrAxz8wdwwh/LixQVzptzGPhqUUcuW
mtNd/KU3L3LVESn1fMLV1BgRE+0eMDchmnkT1Yzwi/NPXKlS9PjvtPbN7BRwUiMQ
1w6go6i9suT1HnuwIQZWRF8DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUBkBZGLk
2C8ejis4AQbFVlwlBD8wHwYDVR0jBBgwFoAUrwLrQTxcBTF1xvy8GcaTYGPnaBEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEREL0UyRTk5RkJDRjVE
MDExRjBBMDY1MTdEMjQ3NkY1NkJDL3J3THJRVHhjQlRGMXh2eThHY2FUWUdQbmFC
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcndMclFUeGNCVEYxeHZ5OEdjYVRZR1BuYUJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3
NEREL0UyRTk5RkJDRjVEMDExRjBBMDY1MTdEMjQ3NkY1NkJDL3J3THJRVHhjQlRG
MXh2eThHY2FUWUdQbmFCRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA0A9G0DVzQhd1eI42NF5I6B0UIHBmrgEHdbAy3Dgrdbk1M5Z+5ycOnCfagU371
67Nkhoygq0oueDNtgZQA7wHIzgXtM897D99sNu0vBOQtQ8NfQ1oAFS5shFFNznYr
PB4edGa1oyDgfYEGC2hTg118f5rnhc2VUel39ocb55OhFOzVB7JdGE6twA12TNHd
+yUdI7PXsjesqPh924hRT00JdY46k5GgeBA6UXid3+LRxFT9lYJ7OsHJd1wLW7Tl
lOKHxvDvZjiLOWPMlXB/z3AikigTlO+rTfUNqMAo5e0TQqyO1CnRuTnVxgQmDTi1
PoDEfnCYUk/Zofst9vJokvyh
-----END CERTIFICATE-----
Generated at Wed May 13 07:28:07 2026 by rpki-client