
$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier: 3hV5F2x+o+hwnyoPnDQ05Pht3LBazosaGRAtFMMqEK0=
Subject key identifier: 2F:89:22:A0:B2:28:3D:0A:B1:C0:38:87:D0:51:94:1C:38:01:B3:6C
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number: 0119
Signing time: Wed 13 May 2026 06:03:05 +0000
Manifest this update: Wed 13 May 2026 06:03:04 +0000
Manifest next update: Wed 20 May 2026 06:03:04 +0000
Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: eJBq8OHV+UA1g96AmeQX2Uh9b7QuKEbHEfyR1SLWp/c=)
2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: 7tTDB/tssfPu0ukhnLfqeZyRc0Pbk+Bf/jBD9Oepn9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Validity
Not Before: May 13 06:03:04 2026 GMT
Not After : May 20 06:03:04 2026 GMT
Subject: CN=6a041419-7f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:c2:05:29:e4:1b:0a:df:d8:f1:03:51:99:
db:bd:10:24:a7:50:e4:0d:28:3c:c1:f9:de:7a:5a:
fc:30:d6:bc:54:91:b3:09:a9:9c:6e:d5:7c:2c:d9:
eb:f9:c4:7f:2e:30:75:bd:06:d5:14:03:30:ea:d4:
43:86:af:48:09:07:60:a7:9f:66:d7:ab:45:f2:17:
72:12:06:f6:f0:57:ee:e8:2f:7c:a3:29:5f:d4:74:
f2:31:ac:a5:31:43:40:43:6c:87:7c:d0:8c:bb:55:
4b:0c:45:d0:7a:2d:fd:53:d5:e2:c4:96:2a:7e:3c:
86:c9:19:15:18:d7:3d:2c:41:1d:50:e5:11:57:16:
2f:ba:8e:29:b5:cd:5c:86:eb:42:bb:eb:1d:86:3e:
67:de:90:48:5e:c2:c7:ce:dd:6f:79:e6:b9:71:9f:
17:df:e9:dd:6a:7d:04:05:ee:e3:09:70:7f:85:61:
a6:96:dc:37:55:c3:21:19:d0:6b:10:29:79:36:56:
4e:ef:9e:0f:73:92:69:c8:f4:91:09:a2:3b:8d:cd:
7d:f7:6c:de:88:0f:8c:50:10:8c:12:a5:99:3e:14:
ff:8d:81:d0:c9:4b:cd:bf:cf:74:1e:88:e7:61:e0:
c8:b3:22:9e:cc:b9:57:19:94:79:44:d2:4f:fa:36:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:89:22:A0:B2:28:3D:0A:B1:C0:38:87:D0:51:94:1C:38:01:B3:6C
X509v3 Authority Key Identifier:
keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e4:f1:a2:42:71:37:cd:7d:66:a6:7f:3d:6b:66:7c:81:db:
ec:bd:1a:aa:79:1a:64:ec:73:c8:f6:a4:c8:eb:0d:00:a7:b0:
25:ff:21:0a:2d:98:2f:74:2b:83:f8:46:be:9e:ed:84:2f:45:
59:85:9f:1a:be:98:0b:52:58:60:69:ed:65:12:19:8b:39:90:
eb:8f:2d:c9:67:9e:5b:52:1b:e1:d1:3d:9c:00:5b:c3:33:3e:
70:d0:20:43:d5:17:78:59:87:47:47:64:a6:e1:b8:75:f9:96:
41:73:b4:d2:6d:49:87:fb:35:c4:aa:7e:ce:c8:0a:a2:9c:0c:
83:0e:28:d7:de:51:5f:cd:a1:72:bc:e2:2e:25:62:9d:9f:4a:
c1:7d:4c:a9:63:ac:54:d9:9a:e8:10:5e:f9:25:8e:0a:5b:d3:
4c:ea:b0:e8:96:ee:dc:01:fa:4e:68:f3:f1:30:b5:28:90:7e:
e4:a2:f5:81:b5:64:d8:9a:3d:73:06:33:10:12:1d:cf:14:cd:
eb:bc:46:27:e0:ef:ce:de:4e:4e:0b:81:19:0e:a2:db:21:b9:
f8:69:0f:3e:c0:a4:dd:81:7a:64:a4:22:14:e6:e2:08:7c:ed:
18:8f:62:a5:9e:53:e8:fb:8a:ae:9a:bc:e0:de:5f:58:48:3e:
ed:f8:67:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTIxQUUxMTAvBgNVBAUTKEY2RDM3OTMwMjc3NTFDNjJGOEFCQjkwODg2RUE5M0Y0
OUIzM0Y2NEMwHhcNMjYwNTEzMDYwMzA0WhcNMjYwNTIwMDYwMzA0WjAYMRYwFAYD
VQQDEw02YTA0MTQxOS03ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi1DCBSnkGwrf2PEDUZnbvRAkp1DkDSg8wfneelr8MNa8VJGzCamcbtV8LNnr
+cR/LjB1vQbVFAMw6tRDhq9ICQdgp59m16tF8hdyEgb28Ffu6C98oylf1HTyMayl
MUNAQ2yHfNCMu1VLDEXQei39U9XixJYqfjyGyRkVGNc9LEEdUOURVxYvuo4ptc1c
hutCu+sdhj5n3pBIXsLHzt1veea5cZ8X3+ndan0EBe7jCXB/hWGmltw3VcMhGdBr
ECl5NlZO754Pc5JpyPSRCaI7jc1992zeiA+MUBCMEqWZPhT/jYHQyUvNv890Hojn
YeDIsyKezLlXGZR5RNJP+jbpgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+JIqCy
KD0KscA4h9BRlBw4AbNsMB8GA1UdIwQYMBaAFPbTeTAndRxi+Ku5CIbqk/SbM/ZM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS82QzcwNDhBNkFD
NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhHTDRxN2tJaHVxVDlKc3o5
a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzl0TjVNQ2QxSEdMNHE3a0lodXFUOUpzejlrdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjFBRS82QzcwNDhBNkFDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi85dE41TUNkMUhH
TDRxN2tJaHVxVDlKc3o5a3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaOTxokJxN819ZqZ/PWtmfIHb7L0aqnkaZOxzyPakyOsNAKewJf8hCi2YL3Qr
g/hGvp7thC9FWYWfGr6YC1JYYGntZRIZizmQ648tyWeeW1Ib4dE9nABbwzM+cNAg
Q9UXeFmHR0dkpuG4dfmWQXO00m1Jh/s1xKp+zsgKopwMgw4o195RX82hcrziLiVi
nZ9KwX1MqWOsVNma6BBe+SWOClvTTOqw6Jbu3AH6Tmjz8TC1KJB+5KL1gbVk2Jo9
cwYzEBIdzxTN67xGJ+Dvzt5OTguBGQ6i2yG5+GkPPsCk3YF6ZKQiFObiCHztGI9i
pZ5T6PuKrpq84N5fWEg+7fhn1A==
-----END CERTIFICATE-----
Generated at Wed May 13 15:19:37 2026 by rpki-client