
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
File: MVUT5UqwyZuLyoQELjg1i2DbGyw.mft (raw, json)
Hash identifier: yXhNRnzE2B1tein+6AnZVL2b7b53OX4aRO+Am/gqxE0=
Subject key identifier: 41:40:F2:01:15:62:E3:4B:89:5C:DB:A6:04:E6:67:13:69:5B:F7:11
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 0890
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
Manifest number: 07B5
Signing time: Tue 24 Mar 2026 21:47:51 +0000
Manifest this update: Tue 24 Mar 2026 21:47:50 +0000
Manifest next update: Tue 31 Mar 2026 21:47:50 +0000
Files and hashes: 1: MVUT5UqwyZuLyoQELjg1i2DbGyw.crl (hash: zQlB5TkBNrBl/mpdkPedjknySsLNuw4DgC09TNUto7g=)
2: EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa (hash: 94RDx70LG5IyD7ln6nyWmw3CJGIuGdny8kRccYnNuHk=)
3: 3C30815CABB611ED8370AB5DC4F9AE02.roa (hash: kFSKCAh6ioguWfPU1TwURBM6G7BAtAwhSPRIqoX3VaA=)
4: B6F12A04A72E11EDA708F167C4F9AE02.roa (hash: av/zIL1P+iLu+u5jBn1T6eq8lbDkz0TtiaZvy0+7VY4=)
5: 4A32E74C26D411EEA00C7C38C4F9AE02.roa (hash: 0tWj75+Ouq6RIgLCUMshdvJPzR8AsPCm9Z0jxTfe3lE=)
6: 8188D300A73111ED97576186C4F9AE02.roa (hash: BCVf5yrdcKZu1AR7g0yk03w2UiroKt/ZqMtyO7z6e4c=)
7: D0DC58F432C611ECA639A749C4F9AE02.roa (hash: oH5y3yS567DWBQ59SHWtXRtomqD32Y3MrDRrRtObbME=)
8: B81F8808A72E11EDA708F167C4F9AE02.roa (hash: +vK9sN/wwEHgTPgsw6vo/nMVxNjCNVxPKRzOcPHnjxI=)
9: CEEBD0EC32C611ECA639A749C4F9AE02.roa (hash: sVwSFmALnyhxgDlohue16n5bgQSwMcWm5mXNF6xU8nc=)
10: E0125116A69711ED9DFF0870C4F9AE02.roa (hash: tSdYLFZCk792fEMZCExwfRV5SYB5CkGoXiLRUQRZEtU=)
11: 350E08F41F1C11ECAD024E53C4F9AE02.roa (hash: f5WNiir/xDutuwQ+vK6ySA/zn3JB8xNKvX/jBhoITbc=)
12: 3558D5DC1F1711EC924DB151C4F9AE02.roa (hash: XapL9s7D1JMjKJu7MjHBtQo0wYwagcUoAvKKZmIDLWE=)
13: 35A803641F1C11ECAD024E53C4F9AE02.roa (hash: XbIp4elLJp1qu0Ppo4cUH0HSgtw5D5sigsmfPksT1oI=)
14: DAAFB93452D811ECB51CE973C4F9AE02.roa (hash: p7G3QRM/2uhtQj3wtDMDeZf0kzeIU6oXaiulKt6wFug=)
15: 20EC686CFB8211EEAAFD740AC4F9AE02.roa (hash: E+BR0+TimYOC5eHCgMJvkbeghM62K4+PNvqm5Xd/1Us=)
16: 8D7F07D6555A11F09950400BC4F9AE02.roa (hash: MdGux5KuG5vHcPm7yZJEdfJJ2QMTyqn8Ch7aLATLVTw=)
17: 8205A466A73111ED97576186C4F9AE02.roa (hash: rtjDnkP1XJTCpkI2J/yJ+McKzjgNtJldb8Vx9S87ecc=)
18: 815EF8B470DD11F08E727853C4F9AE02.roa (hash: 4s2g/ii9eaZCJDpNgvj9gN6fkndE9J1zfe+i0vICvTo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192 (0x890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Mar 24 21:47:50 2026 GMT
Not After : Mar 31 21:47:50 2026 GMT
Subject: CN=69c30687-2458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:4d:fa:a2:b1:9c:69:7a:c2:f3:e9:c7:d9:
ae:65:bf:d3:f2:04:25:ca:48:b4:b5:d0:a7:7b:fe:
09:02:3a:e5:68:38:e1:e0:78:2b:00:26:f7:bb:8a:
af:91:8f:e4:11:69:04:65:04:41:08:7c:b0:b2:1e:
2d:e1:7e:55:f8:69:df:9a:f7:ba:6c:42:19:80:0e:
29:27:ae:2e:dc:83:79:01:de:5f:74:91:44:e2:e4:
f4:4b:82:87:84:12:5e:f0:cb:76:75:cf:84:0a:b9:
2c:fb:1d:44:37:b2:e0:67:e6:50:46:af:fd:d1:60:
91:73:dc:7f:c1:51:7e:f7:51:19:a2:d3:4e:9c:df:
89:29:77:9a:c4:7e:ae:0e:c0:c3:7c:0b:78:06:0d:
ed:15:a9:7f:8e:49:db:c4:dc:8e:96:47:c9:17:b7:
c1:d6:ad:aa:7e:74:68:df:05:44:c6:48:fb:0c:ed:
3c:ec:94:8e:fa:10:c1:83:cd:58:6b:5f:21:6d:a4:
a0:12:1a:54:99:f1:0d:4f:f4:8b:e9:a3:7a:df:75:
5e:25:43:e7:e5:11:6a:e7:ca:53:85:c4:b1:aa:e5:
f6:46:ef:d1:d2:da:ab:01:47:5c:f9:cc:b5:d2:2d:
74:d4:69:60:79:23:c0:b1:50:c2:3c:a3:db:68:07:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:40:F2:01:15:62:E3:4B:89:5C:DB:A6:04:E6:67:13:69:5B:F7:11
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b5:84:85:c8:1b:43:34:2e:79:f5:26:2c:47:73:c5:8a:db:
21:f8:b2:59:08:89:a9:2f:99:78:04:60:c9:da:f5:f6:b4:95:
73:a4:49:14:0a:b0:2b:1e:e2:17:e3:1a:c2:a8:c5:56:78:6c:
e4:9d:37:1d:66:66:a9:3d:de:cf:da:85:71:36:f6:e6:9b:95:
72:56:03:56:6e:3f:d2:42:3e:c1:6e:30:95:f8:3c:4f:13:33:
b2:45:f4:46:21:a4:50:a4:0c:cc:92:94:48:00:fc:1d:ba:b8:
50:a6:93:61:d6:38:ef:bb:fb:43:63:d4:e3:81:40:0b:85:7f:
22:c6:3f:2c:06:e7:bb:b5:40:ee:d4:82:1c:4f:28:f0:c4:6c:
d6:00:bc:a7:82:dc:2b:be:db:2e:05:a0:08:d8:b5:f5:49:db:
37:7e:e3:0b:49:00:a8:36:d7:9f:9d:48:7a:64:34:7d:ab:ff:
fd:4e:56:43:36:d2:65:63:c5:19:c9:24:78:e8:ec:28:70:df:
6f:c3:5a:12:ec:20:34:50:37:1c:94:bc:1c:6a:f7:7f:b0:35:
46:e5:9f:a9:1e:ce:dd:8f:2e:10:e6:a2:c3:06:ad:cb:e0:d4:
99:05:bf:52:25:83:c9:a0:f2:0c:07:00:70:f4:7c:ba:ae:fd:
18:68:3c:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC
NjBEQjFCMkMwHhcNMjYwMzI0MjE0NzUwWhcNMjYwMzMxMjE0NzUwWjAYMRYwFAYD
VQQDEw02OWMzMDY4Ny0yNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmRN+qKxnGl6wvPpx9muZb/T8gQlyki0tdCne/4JAjrlaDjh4HgrACb3u4qv
kY/kEWkEZQRBCHywsh4t4X5V+Gnfmve6bEIZgA4pJ64u3IN5Ad5fdJFE4uT0S4KH
hBJe8Mt2dc+ECrks+x1EN7LgZ+ZQRq/90WCRc9x/wVF+91EZotNOnN+JKXeaxH6u
DsDDfAt4Bg3tFal/jknbxNyOlkfJF7fB1q2qfnRo3wVExkj7DO087JSO+hDBg81Y
a18hbaSgEhpUmfENT/SL6aN633VeJUPn5RFq58pThcSxquX2Ru/R0tqrAUdc+cy1
0i101GlgeSPAsVDCPKPbaAcxFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFA8gEV
YuNLiVzbpgTmZxNpW/cRMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDZBQS84RjVCQjRGODg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3la
dUx5b1FFTGpnMWkyRGJHeXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx7WEhcgbQzQuefUmLEdzxYrbIfiyWQiJqS+ZeARgydr19rSVc6RJFAqwKx7i
F+MawqjFVnhs5J03HWZmqT3ez9qFcTb25puVclYDVm4/0kI+wW4wlfg8TxMzskX0
RiGkUKQMzJKUSAD8Hbq4UKaTYdY477v7Q2PU44FAC4V/IsY/LAbnu7VA7tSCHE8o
8MRs1gC8p4LcK77bLgWgCNi19UnbN37jC0kAqDbXn51IemQ0fav//U5WQzbSZWPF
GckkeOjsKHDfb8NaEuwgNFA3HJS8HGr3f7A1RuWfqR7O3Y8uEOaiwwaty+DUmQW/
UiWDyaDyDAcAcPR8uq79GGg8dA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:28 2026 by rpki-client