
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json)
Hash identifier: qYKO12GSmNB5to0wZ9k8yUNpWIGGrbICdXV6Tgxun2o=
Subject key identifier: 18:97:AC:7D:49:B7:50:B6:32:7B:C0:A1:73:46:6C:98:59:BA:0F:15
Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Certificate serial: 0D9E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
Manifest number: 0D90
Signing time: Tue 12 May 2026 15:33:45 +0000
Manifest this update: Tue 12 May 2026 15:33:44 +0000
Manifest next update: Tue 19 May 2026 15:33:44 +0000
Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: SuPC/SyETEF6gfaxSOLDLIi15x8su/XqbfVMkbuRXfA=)
2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: KN/qO3b9F5dp3gvVSi/2Av1F8gy5I+kWuZVNLBkzY6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3486 (0xd9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE
Validity
Not Before: May 12 15:33:44 2026 GMT
Not After : May 19 15:33:44 2026 GMT
Subject: CN=6a034859-44ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:a3:0b:ba:de:08:59:b4:8b:ca:6c:50:5f:
ea:99:46:5f:9a:68:62:b1:60:41:bb:7a:13:12:d7:
4e:f7:df:9e:99:86:27:05:ad:59:47:2c:ad:6a:3f:
f7:df:6f:f3:f2:f5:f7:60:85:d2:bc:c6:90:1a:a9:
73:2d:8f:97:2c:45:d2:f3:a9:a0:26:11:c9:4e:02:
a8:15:3c:56:c9:b1:2a:96:00:02:4a:78:4f:b0:07:
96:b2:1e:7a:22:84:11:e1:c3:de:09:27:64:fc:b9:
38:9f:c4:00:15:2d:55:09:31:3b:4c:78:bc:3f:a0:
a6:7f:92:b5:a6:2a:27:ac:86:97:0a:f0:67:ec:45:
76:a7:9f:80:38:34:b9:1d:63:c6:42:a1:02:28:79:
25:b5:42:cd:1a:ea:52:bb:f1:1b:21:b1:12:d9:e7:
b6:e5:6f:21:51:2f:fd:35:43:e5:8f:51:8c:51:80:
14:aa:a6:4d:f6:ec:00:19:ff:de:3a:0f:c5:c1:43:
c0:4f:05:eb:6d:ea:08:14:16:85:47:76:79:ae:cf:
8e:a2:1c:0f:ce:47:59:78:75:f7:d5:95:c8:0d:89:
ad:c9:f5:99:fb:20:24:1e:06:08:53:cc:f8:42:60:
c6:b6:0a:1d:ef:33:81:5b:10:e2:c0:b6:5c:7a:f2:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:97:AC:7D:49:B7:50:B6:32:7B:C0:A1:73:46:6C:98:59:BA:0F:15
X509v3 Authority Key Identifier:
keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:68:22:d3:94:b8:84:eb:c7:ec:93:1c:30:6b:01:b9:8b:63:
1c:b9:16:59:6e:84:80:ef:c0:d2:a0:c3:81:1a:7a:0b:f9:57:
bf:f9:8d:9e:8e:41:5c:f8:9a:cc:9e:23:97:dc:73:33:34:80:
09:04:db:d1:cd:12:d1:e7:1e:fe:74:74:12:93:60:21:12:e0:
3e:79:50:04:ec:a2:5c:a2:a5:17:35:26:11:37:b9:6e:75:7b:
ab:88:1f:80:57:c7:a4:20:f0:ac:ac:ea:78:1d:43:78:50:14:
38:41:d1:d3:f4:ea:d4:d1:3a:b7:6d:c1:60:0d:01:80:30:4f:
55:6b:17:94:30:9d:32:85:f7:66:65:68:01:54:92:95:03:ae:
ce:a9:6d:94:7a:1f:a2:1f:8e:6f:81:67:96:8c:dd:5a:3a:b8:
cb:74:63:a3:fa:d5:5c:93:cb:68:5e:22:df:66:b9:ac:dc:8c:
fb:6e:40:89:32:31:a7:6d:e4:25:de:e2:ab:29:77:9e:53:a1:
30:0a:8a:ca:41:a4:73:9a:1a:7b:9c:11:7e:2d:27:a0:14:20:
b3:8a:21:1c:52:5f:02:78:20:01:e0:78:d0:2e:d8:a7:03:76:
79:57:b7:6b:f9:d8:d6:c8:85:66:99:27:5d:b4:45:5a:a9:30:
01:42:7c:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5
QzQ3RDJFRUUwHhcNMjYwNTEyMTUzMzQ0WhcNMjYwNTE5MTUzMzQ0WjAYMRYwFAYD
VQQDEw02YTAzNDg1OS00NGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnFGjC7reCFm0i8psUF/qmUZfmmhisWBBu3oTEtdO99+emYYnBa1ZRyytaj/3
32/z8vX3YIXSvMaQGqlzLY+XLEXS86mgJhHJTgKoFTxWybEqlgACSnhPsAeWsh56
IoQR4cPeCSdk/Lk4n8QAFS1VCTE7THi8P6Cmf5K1pionrIaXCvBn7EV2p5+AODS5
HWPGQqECKHkltULNGupSu/EbIbES2ee25W8hUS/9NUPlj1GMUYAUqqZN9uwAGf/e
Og/FwUPATwXrbeoIFBaFR3Z5rs+OohwPzkdZeHX31ZXIDYmtyfWZ+yAkHgYIU8z4
QmDGtgod7zOBWxDiwLZcevLc3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBiXrH1J
t1C2MnvAoXNGbJhZug8VMB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5
N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzMzQS84RjQ3QTlGQUU5N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZN
bXZ6ZGhlLTM3LVNjUjlMdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOmgi05S4hOvH7JMcMGsBuYtjHLkWWW6EgO/A0qDDgRp6C/lXv/mNno5BXPia
zJ4jl9xzMzSACQTb0c0S0ece/nR0EpNgIRLgPnlQBOyiXKKlFzUmETe5bnV7q4gf
gFfHpCDwrKzqeB1DeFAUOEHR0/Tq1NE6t23BYA0BgDBPVWsXlDCdMoX3ZmVoAVSS
lQOuzqltlHofoh+Ob4FnlozdWjq4y3Rjo/rVXJPLaF4i32a5rNyM+25AiTIxp23k
Jd7iqyl3nlOhMAqKykGkc5oae5wRfi0noBQgs4ohHFJfAnggAeB40C7YpwN2eVe3
a/nY1siFZpknXbRFWqkwAUJ8Zg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:13 2026 by rpki-client