
$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
File: 1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json)
Hash identifier: 2ACo9F1UjIhaXfA+cxVHdGpsDTJ5BWkg9TRYV3Vzjf8=
Subject key identifier: 27:F6:0B:27:2C:46:42:DA:94:DB:E6:0E:86:28:D6:F4:59:65:AC:77
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Certificate issuer: /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
Manifest number: 5F
Signing time: Mon 11 May 2026 08:19:34 +0000
Manifest this update: Mon 11 May 2026 08:19:33 +0000
Manifest next update: Mon 18 May 2026 08:19:33 +0000
Files and hashes: 1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: OSOAeZq8jCZ/Lm0XD/KdcPt4Er3pJnyOO6QsIW/WXsw=)
2: 2B7DA728397E11F19603F3529B833773.roa (hash: 6jcLP2Ff5kNHQzJq73ID1QGceVd0PGeFk+UxM9roUcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Validity
Not Before: May 11 08:19:33 2026 GMT
Not After : May 18 08:19:33 2026 GMT
Subject: CN=6a019115-3b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:34:77:9e:1a:25:08:cc:b4:6b:c9:bf:90:
88:13:d8:09:ff:24:5d:7b:17:22:9f:c7:b0:94:2f:
5a:3a:1d:0c:b7:b4:06:ff:c8:4b:94:09:8a:58:5c:
ee:31:e9:a9:61:95:a1:a2:d6:77:cc:08:12:0d:56:
ed:d1:72:fe:94:42:16:7e:6f:3d:e3:52:3b:08:c9:
80:5a:70:b6:7b:0b:d1:3b:d0:43:39:54:82:28:cd:
ac:32:40:d6:c8:a8:d2:a6:8e:cd:17:57:00:39:00:
0f:a1:ed:94:0e:dc:74:56:e4:f0:45:1f:bc:aa:40:
2c:c0:72:64:59:eb:85:b1:80:97:bb:ca:f2:35:15:
a3:a6:24:7f:76:39:0c:d1:4f:fc:77:15:23:e7:44:
c3:d8:dd:09:85:87:f3:86:9b:c4:bc:48:b8:ec:4b:
73:e6:90:34:77:92:7a:5c:3d:4c:91:11:d9:db:05:
3d:0c:51:14:25:e6:75:3c:9d:80:8b:c2:2a:ad:27:
7b:2d:af:47:78:78:ba:c7:a5:eb:2d:1e:84:ab:0e:
af:85:f7:c7:02:f5:b4:87:f0:f7:c8:0e:9f:22:04:
8b:78:a1:01:af:be:8e:15:03:6d:28:14:75:76:85:
41:85:54:2d:d0:6a:2f:b6:87:f1:cc:58:a2:24:fb:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:0B:27:2C:46:42:DA:94:DB:E6:0E:86:28:D6:F4:59:65:AC:77
X509v3 Authority Key Identifier:
keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:36:e5:73:92:59:2f:a7:99:f2:43:f1:f4:46:d3:64:5b:
6b:b1:0b:1f:d4:af:d5:5d:13:ab:52:d7:2f:3c:4b:65:a1:5d:
3d:10:80:33:a6:11:c6:11:03:fb:89:cc:17:3e:df:53:35:ff:
8e:f4:6e:4f:1a:30:88:5a:3b:d0:7c:6a:94:a5:8b:80:bd:07:
33:12:79:a2:bc:9c:c6:e9:17:17:d1:df:24:36:be:a2:fe:63:
19:d3:11:cd:a4:d1:9a:34:ec:be:fb:e8:08:01:cf:13:12:76:
a3:07:3b:fd:a4:93:ad:2e:ed:33:0c:46:14:d3:1e:b3:27:e4:
2f:6a:31:6d:a6:73:1d:0c:73:35:e7:cc:82:20:66:64:c4:8b:
22:e9:5a:29:5a:e5:50:6b:58:5b:0f:da:5b:48:67:a9:e8:d9:
98:f6:50:eb:fe:8c:65:2e:0d:d4:e8:26:65:ec:e4:23:fa:a3:
76:e1:e5:8c:72:a0:eb:25:bf:cd:06:a5:8d:80:02:87:91:c7:
8f:0b:47:3d:f0:0e:a4:e9:58:91:00:1e:6b:30:9a:6a:9d:a0:
f8:aa:36:84:c0:01:7c:54:2b:07:c3:04:e9:63:b3:71:32:09:
7d:c6:ef:1c:b3:b8:65:ba:4e:00:8d:94:19:ce:dc:91:9f:71:
da:f8:2e:06
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NDdFRDExMC8GA1UEBRMoRDVEMEQ4RTFGMDNENTEwMDg4OUY0MTgwQTY1RjU1MEEw
RDU4MEI4NTAeFw0yNjA1MTEwODE5MzNaFw0yNjA1MTgwODE5MzNaMBgxFjAUBgNV
BAMTDTZhMDE5MTE1LTNiM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcZDR3nholCMy0a8m/kIgT2An/JF17FyKfx7CUL1o6HQy3tAb/yEuUCYpYXO4x
6alhlaGi1nfMCBINVu3Rcv6UQhZ+bz3jUjsIyYBacLZ7C9E70EM5VIIozawyQNbI
qNKmjs0XVwA5AA+h7ZQO3HRW5PBFH7yqQCzAcmRZ64WxgJe7yvI1FaOmJH92OQzR
T/x3FSPnRMPY3QmFh/OGm8S8SLjsS3PmkDR3knpcPUyREdnbBT0MURQl5nU8nYCL
wiqtJ3str0d4eLrHpestHoSrDq+F98cC9bSH8PfIDp8iBIt4oQGvvo4VA20oFHV2
hUGFVC3Qai+2h/HMWKIk+83lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJ/YLJyxG
QtqU2+YOhijW9FllrHcwHwYDVR0jBBgwFoAU1dDY4fA9UQCIn0GApl9VCg1YC4Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0VEL0M5QzYyREE0Q0I4
MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5VVFDSW4wR0FwbDlWQ2cxWUM0
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMWREWTRmQTlVUUNJbjBHQXBsOVZDZzFZQzRVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0
N0VEL0M5QzYyREE0Q0I4MDExRjBBNjhFNTQxQ0M0RjlBRTAyLzFkRFk0ZkE5VVFD
SW4wR0FwbDlWQ2cxWUM0VS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBhdDblc5JZL6eZ8kPx9EbTZFtrsQsf1K/VXROrUtcvPEtloV09EIAzphHGEQP7
icwXPt9TNf+O9G5PGjCIWjvQfGqUpYuAvQczEnmivJzG6RcX0d8kNr6i/mMZ0xHN
pNGaNOy+++gIAc8TEnajBzv9pJOtLu0zDEYU0x6zJ+QvajFtpnMdDHM158yCIGZk
xIsi6VopWuVQa1hbD9pbSGep6NmY9lDr/oxlLg3U6CZl7OQj+qN24eWMcqDrJb/N
BqWNgAKHkcePC0c98A6k6ViRAB5rMJpqnaD4qjaEwAF8VCsHwwTpY7NxMgl9xu8c
s7hluk4AjZQZztyRn3Ha+C4G
-----END CERTIFICATE-----
Generated at Wed May 13 03:40:44 2026 by rpki-client