
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json)
Hash identifier: YmvIlaTk88nD+uzug1QMP/7nW7xgeIHGjFYKYd3T5CI=
Subject key identifier: 24:98:5D:B5:58:E4:AB:31:6F:B9:C1:FC:B1:D4:27:18:98:96:90:25
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
Manifest number: D1
Signing time: Mon 11 May 2026 06:58:28 +0000
Manifest this update: Mon 11 May 2026 06:58:27 +0000
Manifest next update: Mon 18 May 2026 06:58:27 +0000
Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: R5aybUY+yqMeQcHGwD6MlXieYHrC9/ppKc0n53cuJJ8=)
2: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: SPeu1aYoWIkZ55wzSsA2uT5JSXB8/d3J/ThweSnmrRw=)
3: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: N7637sJ4ur4GTyF+Kgrvo5G1u42FtOcjBttkvkfEsuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Validity
Not Before: May 11 06:58:27 2026 GMT
Not After : May 18 06:58:27 2026 GMT
Subject: CN=6a017e13-d043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:36:da:cb:a0:44:22:b3:ab:87:14:14:63:
e5:b2:7d:ef:bc:9f:f9:68:28:34:a3:36:b8:c3:ea:
cf:1f:dc:0d:d6:85:c4:c2:5a:89:c6:10:d4:d4:0d:
c2:52:43:f4:a9:af:04:60:b0:ae:b8:40:3c:ae:12:
65:16:d0:9b:f0:a5:7b:e5:a2:15:03:21:03:cf:ae:
64:6c:eb:9d:a6:3b:f8:7c:da:1b:b6:c1:fd:b5:d6:
20:c3:a6:f2:83:d5:78:8f:9a:7c:f4:08:68:c2:a3:
13:30:a2:e4:4b:54:53:e1:27:a3:33:91:a8:2d:3a:
e0:55:35:51:80:2a:88:76:9f:54:ba:07:60:a4:8e:
d4:a9:a9:37:c9:26:12:75:73:f4:5d:37:cc:eb:cd:
74:aa:3b:c4:e8:70:a7:fe:ce:e2:6b:41:1e:0c:44:
ae:4e:46:68:bb:59:cc:ee:ab:20:c1:43:95:67:eb:
df:c8:58:c6:1d:cc:ba:e4:74:57:39:23:3d:06:53:
8a:f3:66:c6:19:72:05:e1:64:65:35:1b:16:0a:45:
b0:a5:cd:8c:e5:b8:20:c2:74:9d:e5:f4:bb:55:fe:
8e:d5:3f:a5:1a:30:0c:5a:b1:c8:c4:ab:92:ef:34:
ec:76:c1:8f:dc:dd:29:fb:6f:16:d6:2f:bc:b4:e4:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:98:5D:B5:58:E4:AB:31:6F:B9:C1:FC:B1:D4:27:18:98:96:90:25
X509v3 Authority Key Identifier:
keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:fe:7c:8a:e5:58:2b:3d:b4:39:1c:f0:da:f7:02:71:74:b4:
c4:8b:ff:10:36:73:7d:fe:68:6c:2d:c9:a1:31:40:3b:36:09:
03:73:bd:00:0e:ed:ec:a6:12:50:39:6a:97:23:8b:7a:0d:20:
b0:6b:3e:78:a4:3b:75:87:51:df:88:42:8b:ef:ff:6a:f3:d8:
91:18:79:dd:0f:e5:53:4f:d0:72:b7:5a:9f:66:01:c0:e1:10:
ee:41:8a:fb:5a:07:02:02:24:3f:ef:4b:ea:5f:98:63:bb:82:
76:7d:97:67:0e:4d:f5:05:be:45:63:a1:84:f6:05:7a:1f:3d:
94:9f:f4:38:6c:23:c7:f6:fe:32:e9:0b:c8:b7:34:6d:69:8a:
29:ae:37:c8:55:15:f2:82:fc:44:6d:91:30:9d:94:71:7c:10:
11:52:6a:0b:74:e2:1f:d7:c9:aa:23:76:b2:e5:a6:01:0d:94:
b3:bb:3e:44:76:4d:b2:a1:f4:0e:7c:12:da:65:64:8e:0a:41:
3e:9e:40:23:d3:dd:0f:4a:ed:56:1d:72:91:7b:09:ab:66:6f:
c2:4b:5d:83:93:32:6b:29:0e:10:36:d8:e2:1b:f4:c2:04:52:
78:bf:06:94:e7:31:a8:a6:9b:58:f7:dc:1b:12:ac:e1:a8:29:
66:2c:f5:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNEMjExMTAvBgNVBAUTKDgxOEJCOTAzMzI3MTdGOTM1NzMwREFGMTQ3MDhGRkMy
RjYwNUYwNUYwHhcNMjYwNTExMDY1ODI3WhcNMjYwNTE4MDY1ODI3WjAYMRYwFAYD
VQQDEw02YTAxN2UxMy1kMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1L822sugRCKzq4cUFGPlsn3vvJ/5aCg0oza4w+rPH9wN1oXEwlqJxhDU1A3C
UkP0qa8EYLCuuEA8rhJlFtCb8KV75aIVAyEDz65kbOudpjv4fNobtsH9tdYgw6by
g9V4j5p89AhowqMTMKLkS1RT4SejM5GoLTrgVTVRgCqIdp9UugdgpI7Uqak3ySYS
dXP0XTfM6810qjvE6HCn/s7ia0EeDESuTkZou1nM7qsgwUOVZ+vfyFjGHcy65HRX
OSM9BlOK82bGGXIF4WRlNRsWCkWwpc2M5bggwnSd5fS7Vf6O1T+lGjAMWrHIxKuS
7zTsdsGP3N0p+28W1i+8tOQGVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSYXbVY
5Ksxb7nB/LHUJxiYlpAlMB8GA1UdIwQYMBaAFIGLuQMycX+TVzDa8UcI/8L2BfBf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0QyMS8zOEMyNjFFNDFD
MzgxMUYwQUE4NTdEMjdDNEY5QUUwMi9nWXU1QXpKeGY1TlhNTnJ4UndqX3d2WUY4
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0QyMS8zOEMyNjFFNDFDMzgxMUYwQUE4NTdEMjdDNEY5QUUwMi9nWXU1QXpKeGY1
TlhNTnJ4UndqX3d2WUY4RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUf58iuVYKz20ORzw2vcCcXS0xIv/EDZzff5obC3JoTFAOzYJA3O9AA7t7KYS
UDlqlyOLeg0gsGs+eKQ7dYdR34hCi+//avPYkRh53Q/lU0/Qcrdan2YBwOEQ7kGK
+1oHAgIkP+9L6l+YY7uCdn2XZw5N9QW+RWOhhPYFeh89lJ/0OGwjx/b+MukLyLc0
bWmKKa43yFUV8oL8RG2RMJ2UcXwQEVJqC3TiH9fJqiN2suWmAQ2Us7s+RHZNsqH0
DnwS2mVkjgpBPp5AI9PdD0rtVh1ykXsJq2Zvwktdg5MyaykOEDbY4hv0wgRSeL8G
lOcxqKabWPfcGxKs4agpZiz1Lg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:48:29 2026 by rpki-client