
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json)
Hash identifier: kMbPcrG2G8ovBbqgUkm/iHyW6/kuffClYYX/BYTrGvs=
Subject key identifier: 66:84:26:E6:AB:3C:7A:4E:AE:A4:98:02:73:B2:DA:B3:6C:C0:EB:83
Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C
Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
Certificate serial: 0A34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
Manifest number: 0A34
Signing time: Tue 12 May 2026 16:39:13 +0000
Manifest this update: Tue 12 May 2026 16:39:13 +0000
Manifest next update: Tue 19 May 2026 16:39:13 +0000
Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: hPlRa28jC4mywJDDrr+2n+akPY1U1nOytMMH+tJ5lDo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl
rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
Validity
Not Before: May 12 16:39:13 2026 GMT
Not After : May 19 16:39:13 2026 GMT
Subject: CN=6a0357b1-d87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5c:ea:59:0e:49:64:b4:ff:bf:f1:61:2b:5a:
0e:bc:01:94:f7:5e:df:57:4c:9e:7f:03:57:13:93:
a5:51:c1:49:74:8c:da:68:be:d2:b8:67:cc:9e:c1:
60:f2:e8:22:e7:3d:e6:f0:60:01:8a:fb:f6:ca:06:
46:2e:52:93:08:af:49:57:d9:d1:cc:9e:1c:7f:ea:
f5:6d:39:26:30:13:34:b4:bb:a9:06:a3:d0:5a:62:
3d:4a:5d:f7:82:4d:6b:2a:39:a9:4d:53:28:90:ca:
3c:c9:e5:77:ce:a8:8c:23:7b:d1:b4:1a:85:3a:e6:
e0:d7:08:9e:95:a0:a1:df:34:2c:6d:09:1c:9c:61:
89:b7:c4:6a:7f:bc:2b:78:55:06:42:5b:4d:89:24:
47:66:18:1a:9c:df:bd:8a:ce:6e:00:80:b9:90:a1:
e1:e3:34:7f:cb:ae:98:db:e4:fd:c2:b3:0e:ab:29:
ea:1e:94:54:c3:ca:52:3d:2c:ac:ce:7c:3c:6b:fe:
6b:7d:45:13:b4:e2:0d:6e:90:92:05:2a:a6:ac:64:
8e:93:9f:41:ee:20:57:5d:76:bd:fc:82:5f:2f:74:
6b:9b:3d:0d:70:ad:e9:65:bf:25:a7:71:54:98:c7:
e9:3b:16:a9:4f:ee:f3:e6:0c:3a:40:f3:4a:52:ac:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:84:26:E6:AB:3C:7A:4E:AE:A4:98:02:73:B2:DA:B3:6C:C0:EB:83
X509v3 Authority Key Identifier:
keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:41:b7:64:70:8c:21:16:b6:8d:9b:2d:19:76:01:ae:2f:d8:
fa:49:12:97:9e:0d:c1:2a:6f:e3:62:e2:00:b8:82:55:3d:9b:
b3:37:10:54:61:ae:84:b1:df:2e:e6:36:9b:6e:c5:2c:05:cf:
33:77:8c:6b:70:70:c4:ad:02:45:70:d7:e7:7e:08:dc:2a:8e:
77:40:3b:1d:46:0b:37:50:54:cc:7f:3c:ba:9a:27:95:5a:f5:
43:a5:df:c6:ff:02:9b:f6:90:07:b0:bd:37:ed:0a:c7:ff:d5:
89:f1:b5:e1:54:cf:94:25:b9:4d:1e:f2:99:89:1e:94:68:bf:
f1:13:41:94:4b:73:46:3b:5f:5a:75:b0:27:e2:cd:e3:5e:96:
84:eb:90:e1:46:e9:ce:26:30:e7:f3:0e:b1:30:e3:ee:f4:bc:
9c:cd:96:48:8f:17:56:89:cf:f6:52:f3:b1:5c:71:64:fa:5a:
01:d4:41:d5:f3:1b:a8:3e:04:fb:91:a7:0a:42:d9:2e:cf:f4:
d7:38:8e:db:d1:ac:4e:49:95:77:16:dd:d7:7f:3f:f4:93:40:
24:92:54:01:50:1c:95:59:41:4d:fe:59:f1:f9:b1:ea:0e:7a:
ec:a5:42:7a:18:d0:af:d5:a1:0e:07:3e:e4:de:9c:2a:0c:87:
05:1f:f7:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2
OEU3MTRGNUMwHhcNMjYwNTEyMTYzOTEzWhcNMjYwNTE5MTYzOTEzWjAYMRYwFAYD
VQQDEw02YTAzNTdiMS1kODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6VzqWQ5JZLT/v/FhK1oOvAGU917fV0yefwNXE5OlUcFJdIzaaL7SuGfMnsFg
8ugi5z3m8GABivv2ygZGLlKTCK9JV9nRzJ4cf+r1bTkmMBM0tLupBqPQWmI9Sl33
gk1rKjmpTVMokMo8yeV3zqiMI3vRtBqFOubg1wielaCh3zQsbQkcnGGJt8Rqf7wr
eFUGQltNiSRHZhganN+9is5uAIC5kKHh4zR/y66Y2+T9wrMOqynqHpRUw8pSPSys
znw8a/5rfUUTtOINbpCSBSqmrGSOk59B7iBXXXa9/IJfL3Rrmz0NcK3pZb8lp3FU
mMfpOxapT+7z5gw6QPNKUqxNBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaEJuar
PHpOrqSYAnOy2rNswOuDMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG
OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4
OUNZOGFZUlcyQzlvNXhUMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkkG3ZHCMIRa2jZstGXYBri/Y+kkSl54NwSpv42LiALiCVT2bszcQVGGuhLHf
LuY2m27FLAXPM3eMa3BwxK0CRXDX534I3CqOd0A7HUYLN1BUzH88uponlVr1Q6Xf
xv8Cm/aQB7C9N+0Kx//VifG14VTPlCW5TR7ymYkelGi/8RNBlEtzRjtfWnWwJ+LN
416WhOuQ4UbpziYw5/MOsTDj7vS8nM2WSI8XVonP9lLzsVxxZPpaAdRB1fMbqD4E
+5GnCkLZLs/01ziO29GsTkmVdxbd138/9JNAJJJUAVAclVlBTf5Z8fmx6g567KVC
ehjQr9WhDgc+5N6cKgyHBR/3wQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:52:51 2026 by rpki-client