
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier: BkBoANxE42DydnXxjojNXu/wXs6YWa5BW206uqKohKA=
Subject key identifier: 41:81:2F:7E:CF:2E:0F:D2:4B:45:A2:42:C7:33:8D:8E:EB:71:76:31
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number: 0146
Signing time: Mon 11 May 2026 05:20:46 +0000
Manifest this update: Mon 11 May 2026 05:20:46 +0000
Manifest next update: Mon 18 May 2026 05:20:46 +0000
Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: yI7pDjrvCC6ymXJRcIkVc3B5NcOenCFPcJ0HQW7AHdg=)
2: CDF591B2457411F1A79BF008B4833773.roa (hash: wwvP6N0iZcxJteZa0vMxZP6scYPHrDTfF4JThPFyUsY=)
3: CE879A58457411F1A79BF008B4833773.roa (hash: FAofXEWNWRLbLUEmI8l44ekM0qZ+AweWVtuPzYnEfd8=)
4: CF137DC0457411F1A79BF008B4833773.roa (hash: 4fmOTfm1xvbXGmcGvEf79mu94zqU9KuHGIqfto8HIsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Validity
Not Before: May 11 05:20:46 2026 GMT
Not After : May 18 05:20:46 2026 GMT
Subject: CN=6a01672e-dd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:e5:6c:3f:12:5b:8c:07:80:e9:76:ba:d8:
dc:10:fb:b4:c7:88:38:c8:fe:2b:16:3a:85:4b:f8:
bd:18:45:63:ef:39:79:7c:c4:13:30:d2:10:ad:92:
f8:06:de:00:96:14:10:77:ef:f9:c8:8a:2d:e3:56:
ba:3b:ea:bc:94:1f:22:22:5b:62:53:41:5c:96:9f:
0e:c9:b9:6f:4f:08:a5:e0:1e:08:bb:77:b5:61:8a:
66:a1:4b:c4:61:68:96:ff:f0:51:eb:d9:f1:a6:9b:
c2:85:3c:0a:59:1c:41:22:18:9a:25:c9:99:81:38:
f9:6d:82:b1:2a:4c:64:29:f1:c3:7e:a9:0e:30:17:
cb:16:79:75:1f:9b:db:e9:16:92:33:95:f5:3d:d3:
98:04:ff:17:6d:6f:a2:28:50:62:46:2c:de:41:7a:
69:fb:c8:38:36:8f:5a:6a:2e:30:4f:79:42:3f:07:
7d:62:be:d0:ca:3e:a3:76:81:d1:61:53:2c:f8:ac:
f4:35:46:ec:de:1c:eb:77:cb:3c:b2:be:97:f4:3f:
4f:3f:92:0a:02:11:fe:06:13:68:ed:c1:79:7a:0d:
3e:76:1a:23:50:89:aa:2a:99:d9:8e:f3:37:2e:4c:
6d:fd:9e:93:6d:02:60:77:58:be:1c:0c:f6:33:42:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:81:2F:7E:CF:2E:0F:D2:4B:45:A2:42:C7:33:8D:8E:EB:71:76:31
X509v3 Authority Key Identifier:
keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c3:54:55:16:1b:07:2e:bc:c6:98:ab:57:67:12:8d:49:f1:
2f:79:31:b8:85:50:1a:3c:da:9b:37:c9:46:52:09:cf:d5:4a:
85:e8:2b:0a:4a:3e:e0:de:c2:de:b3:a1:73:fd:89:11:db:55:
25:5c:db:50:44:e1:e9:f1:e0:d9:35:f0:1e:84:51:12:e6:0d:
bf:b8:3c:13:46:6d:e1:3a:a7:73:0a:0c:9d:87:20:18:4d:37:
d4:d5:fd:18:14:3c:18:80:0c:69:6e:d1:3c:91:af:c5:35:9b:
15:31:c0:05:57:a7:24:af:a9:ff:83:a2:12:96:b0:6e:57:30:
0e:38:a5:33:8a:ff:fe:ec:18:e3:d9:c0:fc:2c:cd:b6:e5:2b:
d5:3e:77:7b:a6:2b:dc:ad:0d:33:ca:0d:62:8a:fb:41:37:a3:
0b:1f:0d:85:0e:a5:6d:f5:e6:a3:86:69:18:4e:f8:c6:6e:12:
ee:63:88:0c:2c:b7:5c:05:cd:87:1d:01:3d:3b:f0:3c:83:46:
f7:d5:24:cc:2a:62:f0:4c:6c:25:7a:17:2a:7e:50:67:72:7d:
a2:03:e3:d3:d2:a4:67:65:b6:8e:f9:11:06:45:4d:99:0f:25:
82:59:23:82:11:83:45:a7:a1:74:f9:e9:f5:62:2d:d4:49:3e:
cc:52:d8:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2
MUYwODA0MUUwHhcNMjYwNTExMDUyMDQ2WhcNMjYwNTE4MDUyMDQ2WjAYMRYwFAYD
VQQDEw02YTAxNjcyZS1kZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv73lbD8SW4wHgOl2utjcEPu0x4g4yP4rFjqFS/i9GEVj7zl5fMQTMNIQrZL4
Bt4AlhQQd+/5yIot41a6O+q8lB8iIltiU0Fclp8OyblvTwil4B4Iu3e1YYpmoUvE
YWiW//BR69nxppvChTwKWRxBIhiaJcmZgTj5bYKxKkxkKfHDfqkOMBfLFnl1H5vb
6RaSM5X1PdOYBP8XbW+iKFBiRizeQXpp+8g4No9aai4wT3lCPwd9Yr7Qyj6jdoHR
YVMs+Kz0NUbs3hzrd8s8sr6X9D9PP5IKAhH+BhNo7cF5eg0+dhojUImqKpnZjvM3
Lkxt/Z6TbQJgd1i+HAz2M0JUTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGBL37P
Lg/SS0WiQsczjY7rcXYxMB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF
MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4
S2N3QnkyZVpQaXhoOElCQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdsNUVRYbBy68xpirV2cSjUnxL3kxuIVQGjzamzfJRlIJz9VKhegrCko+4N7C
3rOhc/2JEdtVJVzbUETh6fHg2TXwHoRREuYNv7g8E0Zt4TqncwoMnYcgGE031NX9
GBQ8GIAMaW7RPJGvxTWbFTHABVenJK+p/4OiEpawblcwDjilM4r//uwY49nA/CzN
tuUr1T53e6Yr3K0NM8oNYor7QTejCx8NhQ6lbfXmo4ZpGE74xm4S7mOIDCy3XAXN
hx0BPTvwPING99UkzCpi8ExsJXoXKn5QZ3J9ogPj09KkZ2W2jvkRBkVNmQ8lglkj
ghGDRaehdPnp9WIt1Ek+zFLYSw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:37:19 2026 by rpki-client