
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json)
Hash identifier: J2kviZRSbIW4GutWhBjCyLc5GTd517asx5p27rizKnw=
Subject key identifier: 38:84:8F:CC:04:8D:71:A4:4F:A6:4F:86:B9:52:F3:12:6C:E9:CF:DF
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 15E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
Manifest number: 1588
Signing time: Tue 12 May 2026 16:48:49 +0000
Manifest this update: Tue 12 May 2026 16:48:48 +0000
Manifest next update: Tue 19 May 2026 16:48:48 +0000
Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: +hTLLe9kaMh4I4hyilBhp/fWT8UwUKJ8CXORJnZRbOs=)
2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: +rqWHU55mXZywL8CIstlBjQ5J8L3aIdxs349BgpUkec=)
3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: OFEYBm648I0e9Wbf7xTKz4rv2oT1O4Q0cFf6EvpbVvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5600 (0x15e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: May 12 16:48:48 2026 GMT
Not After : May 19 16:48:48 2026 GMT
Subject: CN=6a0359f0-a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:55:38:75:8e:70:b9:b7:5e:24:63:e5:7e:
78:c9:d7:2c:bf:b9:dd:3e:82:a6:6f:4e:64:28:cd:
bb:9e:da:13:46:a6:7b:98:ac:d4:7f:24:c4:db:be:
fe:92:76:2a:1e:49:dd:10:41:8d:a0:df:12:30:f8:
06:51:6b:e3:e9:4e:74:70:74:2d:98:6d:ef:7d:6c:
eb:0f:e0:ed:5c:9d:c7:2a:a0:a7:30:3d:8b:17:51:
01:66:e4:0d:7f:02:12:da:fa:c4:f8:f3:e3:06:88:
03:84:98:a7:2f:f3:db:03:0a:72:6d:cf:0d:94:73:
8d:76:7f:d9:21:21:b5:de:73:13:41:20:7a:55:55:
e7:e0:89:42:93:f4:95:d8:f3:14:4d:a9:a9:e2:0b:
39:14:5c:22:4d:d6:74:da:37:ea:1e:15:d5:12:2f:
3c:22:11:e1:13:e4:f3:e5:32:55:67:20:8a:88:c5:
1a:58:f0:91:46:ad:91:d1:79:55:42:e3:24:cd:5f:
4d:a9:2b:8d:00:58:ce:c0:4b:40:30:33:c3:4a:6a:
72:fa:90:28:8f:67:46:58:3e:c5:d1:c8:8d:1f:2e:
93:18:d1:e3:ba:d5:43:07:8f:48:81:e0:4f:44:66:
f6:be:fb:f7:cb:ab:4b:68:ca:da:c8:af:31:89:e1:
96:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:8F:CC:04:8D:71:A4:4F:A6:4F:86:B9:52:F3:12:6C:E9:CF:DF
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7f:e0:cc:cf:0d:2a:05:e1:2a:3f:b1:07:74:5b:d8:a1:c2:
c2:b3:6e:6b:d3:c5:5c:bc:33:fa:f6:58:f3:62:9a:1a:50:1a:
05:34:df:a2:51:5c:f4:e5:19:7b:09:c3:7b:a9:5f:57:c3:51:
7e:f4:fc:56:89:2e:cf:0d:7f:49:85:b5:ce:41:01:3f:c5:fb:
b7:54:53:c4:aa:3e:2d:5e:0f:74:82:21:e0:48:ba:58:7c:bf:
b4:0b:3e:4c:61:6d:fc:f4:d2:24:40:a2:fd:fc:a6:64:03:f4:
d2:f4:e3:dd:08:2e:19:d0:e5:04:36:1d:34:b3:dc:8e:49:00:
c8:8a:27:98:d1:ab:c4:5a:38:92:00:0a:d1:30:cb:88:45:a5:
fc:88:fe:50:fc:d3:a8:54:4a:9d:c8:2a:04:44:30:c7:f5:c6:
da:35:09:0b:fc:ec:de:b3:a4:7c:52:cc:8b:5b:94:d5:e4:58:
b5:c3:ab:7e:f1:dc:2a:f9:45:3d:78:8d:2b:4c:f8:79:2b:48:
c9:d9:14:c2:b9:02:80:be:87:ee:c0:cf:11:bc:fd:cf:82:5a:
c5:41:06:8e:06:05:97:cd:4e:53:60:6f:d5:74:4c:78:46:11:
c6:0d:8f:31:6b:4f:ce:71:78:66:90:1c:b5:a6:c2:61:eb:67:
6e:d2:e4:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez
MzhGNThCNTkwHhcNMjYwNTEyMTY0ODQ4WhcNMjYwNTE5MTY0ODQ4WjAYMRYwFAYD
VQQDEw02YTAzNTlmMC1hNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWtVOHWOcLm3XiRj5X54ydcsv7ndPoKmb05kKM27ntoTRqZ7mKzUfyTE277+
knYqHkndEEGNoN8SMPgGUWvj6U50cHQtmG3vfWzrD+DtXJ3HKqCnMD2LF1EBZuQN
fwIS2vrE+PPjBogDhJinL/PbAwpybc8NlHONdn/ZISG13nMTQSB6VVXn4IlCk/SV
2PMUTamp4gs5FFwiTdZ02jfqHhXVEi88IhHhE+Tz5TJVZyCKiMUaWPCRRq2R0XlV
QuMkzV9NqSuNAFjOwEtAMDPDSmpy+pAoj2dGWD7F0ciNHy6TGNHjutVDB49IgeBP
RGb2vvv3y6tLaMrayK8xieGW6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDiEj8wE
jXGkT6ZPhrlS8xJs6c/fMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz
RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3
TmptZWNXM0NJY296ajFpMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuX/gzM8NKgXhKj+xB3Rb2KHCwrNua9PFXLwz+vZY82KaGlAaBTTfolFc9OUZ
ewnDe6lfV8NRfvT8Vokuzw1/SYW1zkEBP8X7t1RTxKo+LV4PdIIh4Ei6WHy/tAs+
TGFt/PTSJECi/fymZAP00vTj3QguGdDlBDYdNLPcjkkAyIonmNGrxFo4kgAK0TDL
iEWl/Ij+UPzTqFRKncgqBEQwx/XG2jUJC/zs3rOkfFLMi1uU1eRYtcOrfvHcKvlF
PXiNK0z4eStIydkUwrkCgL6H7sDPEbz9z4JaxUEGjgYFl81OU2Bv1XRMeEYRxg2P
MWtPznF4ZpActabCYetnbtLklg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:18:34 2026 by rpki-client