
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json)
Hash identifier: c4b4oClfKXXLGHygQQBvzjHU5j1Eq8j5ckyKa3mhc18=
Subject key identifier: 90:A2:72:42:1A:38:E2:12:24:B9:99:F2:15:68:02:0B:2B:84:95:D8
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 35E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
Manifest number: 359D
Signing time: Tue 12 May 2026 14:22:16 +0000
Manifest this update: Tue 12 May 2026 14:22:16 +0000
Manifest next update: Tue 19 May 2026 14:22:16 +0000
Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: UST9Hge8jtq25T9T1jf+9htidUulp1UYjBZIknAHHuc=)
2: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=)
3: 783697D2107A11F1854A0E192E3D8C67.roa (hash: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=)
4: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: vQepzkk73AzAWKaVyYAoNTks+drGAlLOyvGfb2bqOfY=)
5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: qOOSzovo+PYCi2hcGVMepWRZjfhHlcX70ZUUrgBUwaI=)
6: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=)
7: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=)
8: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: ylTDDWhoDCYbcojJAKclLssIhT1ZiJ6CbE3tkJEsYzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13796 (0x35e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: May 12 14:22:16 2026 GMT
Not After : May 19 14:22:16 2026 GMT
Subject: CN=6a033798-73f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:ef:d9:89:81:fc:d0:56:17:4d:b0:09:05:
39:89:3c:f4:c3:66:76:8c:36:d4:29:64:84:c2:bf:
e4:ff:c7:c8:da:56:43:14:2b:bf:16:ca:fd:6d:18:
54:fc:34:bf:65:c8:5e:d3:ee:e7:0f:be:0a:ed:2c:
16:f0:0e:1f:ae:e5:d6:eb:d8:e3:5a:4c:9d:a9:62:
83:c4:01:fb:22:1f:e7:eb:eb:51:e9:00:1b:51:65:
05:a8:20:03:51:61:47:62:ff:86:63:61:c7:3b:41:
ab:4b:e1:98:c6:62:6d:86:cd:80:5c:4e:97:e7:35:
6a:a7:88:23:09:77:dc:4b:fe:1d:0d:00:5b:6c:1f:
4c:41:df:65:eb:c1:af:4b:bd:23:1b:7d:3a:ff:bc:
c4:02:0d:8a:b3:00:fd:13:b6:f8:a4:42:70:14:d8:
0f:26:4c:47:5c:f8:70:f8:4b:9d:c7:f1:e3:3d:e4:
87:02:75:5d:a2:6b:57:15:b0:a7:13:8b:48:fe:cb:
0d:9e:a9:fd:25:ac:01:ff:c5:0e:56:1e:70:eb:d0:
51:26:0d:8d:29:16:97:6f:22:b3:bb:49:b1:3a:79:
fc:d3:c5:08:f1:39:b0:5b:49:38:ae:70:83:f7:30:
1c:3e:37:e1:4c:2a:c2:04:bb:7d:cf:53:f0:1d:2b:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:72:42:1A:38:E2:12:24:B9:99:F2:15:68:02:0B:2B:84:95:D8
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:aa:70:6b:17:83:a8:d8:a8:9f:2c:f3:2c:f8:76:0e:68:7c:
c3:2c:67:49:89:85:78:40:11:ea:5b:19:07:da:d1:3f:eb:57:
53:a6:05:ec:4e:ca:0f:a9:f3:c8:80:5d:c5:df:2d:c3:f8:64:
dc:79:ca:11:74:92:37:7e:a7:04:48:d7:67:08:27:ab:bd:a3:
29:7a:52:8c:c0:0d:b4:a0:e8:31:cd:6d:6f:48:f3:73:76:d6:
19:8c:61:fd:28:93:d5:d6:04:8b:16:0d:30:40:46:f4:0a:94:
c2:65:9b:fb:b7:fc:43:3a:59:ba:39:41:2e:e4:68:67:4f:0e:
21:88:3a:f9:2b:03:53:8a:01:6f:ec:aa:07:14:0e:37:ed:12:
a6:9c:53:8d:c0:d2:17:f9:77:62:48:ab:fa:0a:59:26:99:32:
de:29:95:c4:7d:fe:82:b6:40:1d:e4:09:88:bd:a0:8a:74:96:
ce:80:d2:c1:a6:42:fd:68:03:7b:50:ee:24:9d:fc:14:ac:df:
15:43:f5:49:cf:82:dc:39:ca:1e:52:eb:35:7a:ee:fb:6d:be:
4f:46:7f:e0:d8:79:a2:64:d2:c8:0c:df:e3:3a:92:c4:80:fc:
07:a1:fb:4b:75:a6:3b:0a:bd:7a:1e:70:28:71:de:38:9c:f8:
89:60:82:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4
N0FBNTc1OUYwHhcNMjYwNTEyMTQyMjE2WhcNMjYwNTE5MTQyMjE2WjAYMRYwFAYD
VQQDEw02YTAzMzc5OC03M2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzHv2YmB/NBWF02wCQU5iTz0w2Z2jDbUKWSEwr/k/8fI2lZDFCu/Fsr9bRhU
/DS/Zche0+7nD74K7SwW8A4fruXW69jjWkydqWKDxAH7Ih/n6+tR6QAbUWUFqCAD
UWFHYv+GY2HHO0GrS+GYxmJths2AXE6X5zVqp4gjCXfcS/4dDQBbbB9MQd9l68Gv
S70jG306/7zEAg2KswD9E7b4pEJwFNgPJkxHXPhw+Eudx/HjPeSHAnVdomtXFbCn
E4tI/ssNnqn9JawB/8UOVh5w69BRJg2NKRaXbyKzu0mxOnn808UI8TmwW0k4rnCD
9zAcPjfhTCrCBLt9z1PwHStAqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCickIa
OOISJLmZ8hVoAgsrhJXYMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk
Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHKpwaxeDqNionyzzLPh2Dmh8wyxnSYmFeEAR6lsZB9rRP+tXU6YF7E7KD6nz
yIBdxd8tw/hk3HnKEXSSN36nBEjXZwgnq72jKXpSjMANtKDoMc1tb0jzc3bWGYxh
/SiT1dYEixYNMEBG9AqUwmWb+7f8QzpZujlBLuRoZ08OIYg6+SsDU4oBb+yqBxQO
N+0SppxTjcDSF/l3Ykir+gpZJpky3imVxH3+grZAHeQJiL2ginSWzoDSwaZC/WgD
e1DuJJ38FKzfFUP1Sc+C3DnKHlLrNXru+22+T0Z/4Nh5omTSyAzf4zqSxID8B6H7
S3WmOwq9eh5wKHHeOJz4iWCC+A==
-----END CERTIFICATE-----
Generated at Wed May 13 03:25:44 2026 by rpki-client