
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json)
Hash identifier: EQUeYV6JZuRVkLbBjqnhqDu+rQjW/qg4Tw3eWJyqHuA=
Subject key identifier: EE:88:89:05:35:58:60:31:3F:24:29:F3:EE:3A:87:2E:48:91:2B:91
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial: 1A34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
Manifest number: 1A11
Signing time: Tue 12 May 2026 16:21:17 +0000
Manifest this update: Tue 12 May 2026 16:21:16 +0000
Manifest next update: Tue 19 May 2026 16:21:16 +0000
Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: 7g7jYXM7ptLVScAVtREa9wnp2bbb0AHwP/o9OU+6Jgw=)
2: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=)
3: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=)
4: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6708 (0x1a34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Validity
Not Before: May 12 16:21:16 2026 GMT
Not After : May 19 16:21:16 2026 GMT
Subject: CN=6a03537d-327e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:f6:31:e7:3f:4e:72:c6:bf:61:d2:20:2c:
e3:fc:89:e1:fb:96:71:3f:e9:f8:c4:98:dd:c9:f3:
7f:a3:ae:7a:b6:57:06:34:0b:70:e4:9e:96:d8:ec:
7b:ab:78:26:d4:37:98:49:87:04:01:56:0b:25:5d:
56:55:96:df:a6:43:f8:7f:ad:2a:cc:27:cb:4d:c5:
0a:0f:82:e9:0c:30:f5:15:16:0f:f9:c9:17:27:d6:
de:4b:12:ba:e7:aa:17:06:89:3a:2f:dc:6d:b7:8c:
24:f4:32:89:ae:d1:b0:2d:07:a9:b1:5f:ad:09:71:
f9:35:60:04:0e:bd:cc:de:05:46:35:a2:39:1c:69:
9f:47:4b:48:56:4c:ef:2d:1c:5e:93:f1:f3:4b:4e:
4e:ff:14:92:a7:1a:21:a5:60:de:87:ff:cf:4f:a9:
13:cd:94:c1:ff:29:09:bf:3a:ea:c2:bf:24:39:4d:
3a:b8:c8:58:2c:c9:b3:7f:7c:9d:98:4d:4a:f9:53:
80:e4:d4:ba:40:e6:fa:c8:16:5d:98:57:ec:73:5b:
35:70:fc:cb:6b:98:9f:c7:b7:e2:60:c8:24:75:62:
fc:ee:80:4b:4b:d0:b5:a8:0b:0c:00:44:7a:91:67:
06:0d:39:60:d9:76:8d:18:0b:00:4d:f6:81:6e:47:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:88:89:05:35:58:60:31:3F:24:29:F3:EE:3A:87:2E:48:91:2B:91
X509v3 Authority Key Identifier:
keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:58:3b:23:0e:c2:c4:a6:15:5a:72:f1:64:de:68:bc:fe:33:
5d:08:79:d1:0e:6f:aa:43:4b:a6:69:de:18:bd:72:df:fc:8a:
1f:cc:8e:ec:c0:bf:94:b1:4d:f6:07:70:c6:4e:0e:02:63:9c:
4a:fa:e4:fd:6c:fa:52:4b:c8:85:9f:1a:65:ca:c6:11:37:40:
c2:ea:e4:ab:2a:9e:6d:a2:c2:7a:7e:fd:0d:99:d9:f9:b3:e1:
09:72:31:24:da:f4:7d:35:bd:a7:52:ea:7d:e8:ea:be:95:47:
83:0c:57:2a:c8:66:b1:97:79:5f:8d:25:4f:3f:54:fc:60:c0:
81:be:e2:ec:40:99:5e:0b:92:0c:0c:8f:a0:6e:4a:48:a6:4e:
72:aa:25:0c:96:c4:7f:22:06:26:9e:b9:15:43:36:3f:9a:be:
e2:09:86:8a:50:df:a7:d8:1f:ec:a1:7f:23:63:4e:41:23:07:
8a:4e:c0:3f:f1:1a:51:17:95:41:7c:fa:c3:27:53:8e:dd:f2:
bb:16:07:83:4c:cf:63:34:45:93:bf:3d:c9:f2:f8:1b:31:70:
40:1b:d0:cd:c1:07:40:44:d7:f3:13:a6:90:cc:48:f9:7f:69:
70:52:29:61:f0:ca:1b:90:d9:bb:2d:96:9c:af:8e:bb:ab:a8:
0f:41:88:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew
MzVFMjBERUEwHhcNMjYwNTEyMTYyMTE2WhcNMjYwNTE5MTYyMTE2WjAYMRYwFAYD
VQQDEw02YTAzNTM3ZC0zMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5UH2Mec/TnLGv2HSICzj/Inh+5ZxP+n4xJjdyfN/o656tlcGNAtw5J6W2Ox7
q3gm1DeYSYcEAVYLJV1WVZbfpkP4f60qzCfLTcUKD4LpDDD1FRYP+ckXJ9beSxK6
56oXBok6L9xtt4wk9DKJrtGwLQepsV+tCXH5NWAEDr3M3gVGNaI5HGmfR0tIVkzv
LRxek/HzS05O/xSSpxohpWDeh//PT6kTzZTB/ykJvzrqwr8kOU06uMhYLMmzf3yd
mE1K+VOA5NS6QOb6yBZdmFfsc1s1cPzLa5ifx7fiYMgkdWL87oBLS9C1qAsMAER6
kWcGDTlg2XaNGAsATfaBbkdobQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6IiQU1
WGAxPyQp8+46hy5IkSuRMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz
NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx
Z3RDLUJNYlllam9EWGlEZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv1g7Iw7CxKYVWnLxZN5ovP4zXQh50Q5vqkNLpmneGL1y3/yKH8yO7MC/lLFN
9gdwxk4OAmOcSvrk/Wz6UkvIhZ8aZcrGETdAwurkqyqebaLCen79DZnZ+bPhCXIx
JNr0fTW9p1LqfejqvpVHgwxXKshmsZd5X40lTz9U/GDAgb7i7ECZXguSDAyPoG5K
SKZOcqolDJbEfyIGJp65FUM2P5q+4gmGilDfp9gf7KF/I2NOQSMHik7AP/EaUReV
QXz6wydTjt3yuxYHg0zPYzRFk789yfL4GzFwQBvQzcEHQETX8xOmkMxI+X9pcFIp
YfDKG5DZuy2WnK+Ou6uoD0GILw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:16:02 2026 by rpki-client