
$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier: Ah/BubAjAaqnQGPg6T6vKgOzjhJliWkAMtywJE5IjdI=
Subject key identifier: 79:51:F7:CB:CF:93:36:0D:20:CA:4F:05:54:DF:5D:B2:63:05:C0:AA
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 0474
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number: 0461
Signing time: Wed 13 May 2026 00:17:26 +0000
Manifest this update: Wed 13 May 2026 00:17:25 +0000
Manifest next update: Wed 20 May 2026 00:17:25 +0000
Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: npp8ymRLbEJ8V0TQrSz+zQSQCX+f5f94wXbVf10fU9E=)
2: 32F4B5BA3F0411F1BF0D1E0CC9833773.roa (hash: 7D5axyTJpCXlvT4hwQ1+3Thr7ZRX7mL6gQ5Gjrbulvc=)
3: 412371002A5911F08EA23244C4F9AE02.roa (hash: D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=)
4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=)
5: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=)
6: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=)
7: 812D990C282C11F194294EA0C6833773.roa (hash: wg5kaxnt1h8sr9PZA8paXY5KbEBORSUI0crLfAxJcUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140 (0x474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: May 13 00:17:25 2026 GMT
Not After : May 20 00:17:25 2026 GMT
Subject: CN=6a03c316-0277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:d2:4e:e8:f7:64:50:72:1f:56:48:a6:cd:
d0:96:86:8a:84:ea:88:7c:d2:64:da:84:f8:e0:90:
2a:4b:10:6f:be:98:09:1c:c0:1e:e6:97:81:84:e3:
5b:2c:6f:dd:97:a2:7f:a6:d7:07:b2:79:77:04:42:
21:46:b9:21:ba:f4:cb:f9:a3:a3:76:f2:a3:f5:9f:
bb:ac:af:6d:64:1b:24:44:0d:74:d2:ba:fc:fe:10:
3a:c9:49:e3:e5:6f:f6:37:e6:89:f8:34:d0:d9:7f:
14:58:9d:1d:fa:86:b3:db:d5:0d:ab:d7:3d:8c:c2:
ee:f8:66:fa:fd:ec:4e:ad:53:ed:6c:ec:57:60:54:
2e:1b:9e:bb:0f:1c:dc:ba:e6:85:b2:a1:95:d8:ca:
0f:8c:f6:a6:01:6f:52:56:ed:6f:10:1b:76:1b:04:
97:79:db:9b:5e:99:1b:69:27:48:c7:69:f9:2b:cf:
1a:e4:e0:23:76:f7:f0:4b:1f:83:23:ff:21:8d:5b:
fd:44:65:23:95:20:02:af:1c:2f:07:f3:8d:84:74:
31:d3:a9:c0:58:3a:e5:a7:a8:31:92:5e:c4:ac:de:
34:c3:bd:d6:a2:51:57:ea:c9:95:cb:db:04:64:37:
52:b0:8e:12:1f:71:7d:3a:65:dd:a8:a4:4e:86:a2:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:51:F7:CB:CF:93:36:0D:20:CA:4F:05:54:DF:5D:B2:63:05:C0:AA
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d0:ae:cd:a7:88:eb:3d:c8:ce:34:36:ea:ed:bb:d0:d5:1e:
52:d3:cc:3d:4f:01:de:eb:99:83:ca:fd:80:f6:ba:17:8b:57:
09:b1:1c:7c:e2:0d:e8:24:d0:d7:b0:67:ee:ee:fb:e6:96:a7:
30:50:2c:f6:01:92:db:9a:74:06:07:16:ac:08:f0:42:f3:5a:
cb:34:7f:63:9b:10:36:98:b3:d9:43:a7:9a:cc:1b:2b:ed:f8:
0e:c6:86:6b:72:a7:dd:2f:e2:8f:df:ae:af:ab:9e:14:e8:1d:
95:87:e1:48:ac:df:57:cb:ad:19:9a:94:bc:ed:b0:1e:ea:38:
cd:0e:16:fd:2b:0b:af:d6:00:ae:fe:e2:04:8c:35:ed:d5:e2:
28:09:d2:bb:31:f3:1a:cb:d0:0d:35:9a:bd:80:e4:87:55:6d:
81:4d:35:f1:9a:7a:fb:06:a0:53:16:e7:1a:59:30:ad:90:44:
49:d5:d5:c1:aa:22:e1:b6:79:5d:9a:9f:4f:75:2e:92:6a:c1:
15:f7:74:75:e5:21:40:97:bc:2a:b2:37:80:af:92:fc:e3:df:
6d:8b:7e:de:56:6c:54:00:da:e3:cc:f9:2a:50:1d:91:06:83:
fb:c8:67:aa:e0:d9:14:10:02:94:28:b1:0f:50:f9:1a:66:3d:
5e:5b:ec:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3
ODAzMTFBNUQwHhcNMjYwNTEzMDAxNzI1WhcNMjYwNTIwMDAxNzI1WjAYMRYwFAYD
VQQDEw02YTAzYzMxNi0wMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAntjSTuj3ZFByH1ZIps3QloaKhOqIfNJk2oT44JAqSxBvvpgJHMAe5peBhONb
LG/dl6J/ptcHsnl3BEIhRrkhuvTL+aOjdvKj9Z+7rK9tZBskRA100rr8/hA6yUnj
5W/2N+aJ+DTQ2X8UWJ0d+oaz29UNq9c9jMLu+Gb6/exOrVPtbOxXYFQuG567Dxzc
uuaFsqGV2MoPjPamAW9SVu1vEBt2GwSXedubXpkbaSdIx2n5K88a5OAjdvfwSx+D
I/8hjVv9RGUjlSACrxwvB/ONhHQx06nAWDrlp6gxkl7ErN40w73WolFX6smVy9sE
ZDdSsI4SH3F9OmXdqKROhqLaEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlR98vP
kzYNIMpPBVTfXbJjBcCqMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5
MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv
VUVuU3I1c3lyTWg0QXhHbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb9CuzaeI6z3IzjQ26u270NUeUtPMPU8B3uuZg8r9gPa6F4tXCbEcfOIN6CTQ
17Bn7u775panMFAs9gGS25p0BgcWrAjwQvNayzR/Y5sQNpiz2UOnmswbK+34DsaG
a3Kn3S/ij9+ur6ueFOgdlYfhSKzfV8utGZqUvO2wHuo4zQ4W/SsLr9YArv7iBIw1
7dXiKAnSuzHzGsvQDTWavYDkh1VtgU018Zp6+wagUxbnGlkwrZBESdXVwaoi4bZ5
XZqfT3UukmrBFfd0deUhQJe8KrI3gK+S/OPfbYt+3lZsVADa48z5KlAdkQaD+8hn
quDZFBAClCixD1D5GmY9XlvsOg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:14:16 2026 by rpki-client