
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File: Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier: in2LjQVVjyLv9Vr/CZf15v7uIemtsUnKd31vx88QSNA=
Subject key identifier: B5:0D:CC:E7:56:A1:4C:5B:AD:07:5E:53:5F:30:3D:CA:08:0B:85:95
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer: /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial: 05D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number: 05C8
Signing time: Tue 12 May 2026 23:55:33 +0000
Manifest this update: Tue 12 May 2026 23:55:32 +0000
Manifest next update: Tue 19 May 2026 23:55:32 +0000
Files and hashes: 1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: MLSxsB3mVCckYBmpdzwUvxYmTILzeNiPqSFQwJU9a9Q=)
2: C847114C07D411ECBF875117C4F9AE02.roa (hash: RTJD+7WiiJ9osfnBTe3ZJqaDqHxNHYqplthmyXrSeGU=)
3: 0DA7E9A84E5E11F18A6201F7A4833773.roa (hash: 26SsFsizgxWr5/3af4N9JjMHshM9V4wsilE+SXI7ugA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Validity
Not Before: May 12 23:55:32 2026 GMT
Not After : May 19 23:55:32 2026 GMT
Subject: CN=6a03bdf5-4337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:54:f5:0d:c0:a2:6b:13:af:eb:82:d5:f1:
e6:5c:fa:46:4d:a7:7b:1d:ce:6f:60:0b:b2:cf:97:
19:ce:b6:09:dc:d9:22:83:28:e8:7c:6c:56:9c:39:
9d:ee:a5:96:8b:dd:75:11:cb:d9:94:27:1d:48:e4:
8f:c2:e8:4f:bd:d4:f4:fb:9a:6d:05:1b:25:c4:65:
cf:3a:2b:a5:a3:af:a0:ce:e5:5a:34:e9:38:4d:2d:
3f:b7:6c:3c:60:44:86:f3:cb:40:b5:cb:2f:58:c5:
07:38:7c:26:b4:ed:5d:7e:72:d2:3e:dd:49:b1:b1:
0e:00:ff:90:c8:36:8c:2f:99:47:b7:59:ec:b3:3e:
60:88:17:53:98:64:88:51:b6:7d:46:00:db:6c:07:
41:c2:55:37:63:05:e5:70:82:cd:c6:cc:97:c2:47:
c7:f5:6f:29:e2:ff:4d:6d:31:46:15:3d:a4:35:91:
f2:af:86:fd:ef:d7:62:46:10:a0:91:65:7d:20:b0:
4d:68:4e:1e:b5:4a:f4:c3:9a:ec:e0:e6:5b:76:d4:
d8:d4:d9:75:3f:80:d4:da:a2:15:f1:8a:91:0f:79:
6a:ed:3c:a9:37:d5:91:95:73:f4:ee:96:f5:02:bd:
5c:6a:2a:22:84:48:9a:c7:f7:19:45:79:89:ed:5e:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0D:CC:E7:56:A1:4C:5B:AD:07:5E:53:5F:30:3D:CA:08:0B:85:95
X509v3 Authority Key Identifier:
keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:51:29:df:8a:30:65:99:36:9d:cb:c8:c8:08:0f:6d:39:d7:
d8:c3:c8:ab:c1:80:8c:f2:a8:20:02:ed:65:84:c2:65:32:cd:
66:93:e3:de:1b:47:ce:fa:08:c4:68:ff:6e:0b:9e:02:5d:4c:
10:ef:61:ef:f3:a5:6f:dd:8d:71:4c:14:ca:d9:d2:11:63:a5:
ae:67:36:48:82:94:eb:fc:88:b4:e1:bd:7a:4b:c0:d0:31:05:
8c:a3:45:fc:74:a6:6f:f4:b6:38:b0:a4:9f:d9:de:d3:6d:b3:
44:c2:ea:72:12:03:cb:71:b8:99:00:07:eb:e0:3c:12:10:ca:
cb:71:fd:8d:9d:00:a5:45:65:88:dc:9f:27:fe:f8:03:44:34:
6e:cd:dd:00:e1:1e:09:ec:87:a5:db:a7:82:0c:a9:80:7e:f3:
d6:da:1d:9a:9d:e6:03:af:46:dd:71:69:b7:56:0c:88:fd:78:
aa:46:85:22:ca:ab:ab:ee:88:d7:47:e3:fb:e5:dc:1f:0e:a2:
28:66:89:b0:70:15:a6:86:a5:0e:3e:81:56:42:19:ce:d5:29:
e8:a5:dc:1d:54:22:d1:ea:5c:7d:9c:21:a5:68:44:e3:33:7f:
81:62:b2:1a:ff:e7:cf:e7:f3:5b:28:54:2c:00:d1:06:53:9a:
9e:5c:4f:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU1QUUxMTAvBgNVBAUTKDAxREY2MTU3MjQ3N0EyMzBFNzlGOEYyOENGREQ2RDI4
Mzc3RjIyMkIwHhcNMjYwNTEyMjM1NTMyWhcNMjYwNTE5MjM1NTMyWjAYMRYwFAYD
VQQDEw02YTAzYmRmNS00MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUlU9Q3AomsTr+uC1fHmXPpGTad7Hc5vYAuyz5cZzrYJ3NkigyjofGxWnDmd
7qWWi911EcvZlCcdSOSPwuhPvdT0+5ptBRslxGXPOiulo6+gzuVaNOk4TS0/t2w8
YESG88tAtcsvWMUHOHwmtO1dfnLSPt1JsbEOAP+QyDaML5lHt1nssz5giBdTmGSI
UbZ9RgDbbAdBwlU3YwXlcILNxsyXwkfH9W8p4v9NbTFGFT2kNZHyr4b979diRhCg
kWV9ILBNaE4etUr0w5rs4OZbdtTY1Nl1P4DU2qIV8YqRD3lq7TypN9WRlXP07pb1
Ar1caioihEiax/cZRXmJ7V5MOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUNzOdW
oUxbrQdeU18wPcoIC4WVMB8GA1UdIwQYMBaAFAHfYVckd6Iw55+PKM/dbSg3fyIr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVBRS80NkQ0MjJGMDA3
RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29qRG5uNDhvejkxdEtEZF9J
aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FkOWhWeVIzb2pEbm40OG96OTF0S0RkX0lpcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTVBRS80NkQ0MjJGMDA3RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29q
RG5uNDhvejkxdEtEZF9JaXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyVEp34owZZk2ncvIyAgPbTnX2MPIq8GAjPKoIALtZYTCZTLNZpPj3htHzvoI
xGj/bgueAl1MEO9h7/Olb92NcUwUytnSEWOlrmc2SIKU6/yItOG9ekvA0DEFjKNF
/HSmb/S2OLCkn9ne022zRMLqchIDy3G4mQAH6+A8EhDKy3H9jZ0ApUVliNyfJ/74
A0Q0bs3dAOEeCeyHpdunggypgH7z1todmp3mA69G3XFpt1YMiP14qkaFIsqrq+6I
10fj++XcHw6iKGaJsHAVpoalDj6BVkIZztUp6KXcHVQi0epcfZwhpWhE4zN/gWKy
Gv/nz+fzWyhULADRBlOanlxP6w==
-----END CERTIFICATE-----
Generated at Wed May 13 03:18:46 2026 by rpki-client