
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json)
Hash identifier: UgL8Wekw4DzL0kwj7aE68fAa7B5rZw1PPjiUp/R9sKk=
Subject key identifier: AB:FA:DB:3C:80:DF:3A:CD:BC:5C:AA:78:0A:83:85:3F:E3:40:28:59
Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1
Certificate issuer: /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
Certificate serial: 0BC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
Manifest number: 0BBD
Signing time: Tue 12 May 2026 19:02:56 +0000
Manifest this update: Tue 12 May 2026 19:02:56 +0000
Manifest next update: Tue 19 May 2026 19:02:56 +0000
Files and hashes: 1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: ei8NzPPfzTZvnlUdSA386O3iHMbH+Et7XFLcv3yh1MQ=)
2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: tgDOCbKwmjyp6bvMW7YcW8XxCX4tWOYG/agYINdY5ok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl
rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1
Validity
Not Before: May 12 19:02:56 2026 GMT
Not After : May 19 19:02:56 2026 GMT
Subject: CN=6a037960-de03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:36:53:d2:6f:2b:47:fb:45:08:f8:da:af:
b5:f4:9a:46:89:ee:65:65:ca:b4:0c:bd:dc:01:28:
5c:f5:bc:ad:e0:f3:3a:30:7a:8c:0c:96:37:c2:c8:
eb:de:6a:e4:19:78:ce:b1:2d:a6:96:2b:30:46:27:
08:a3:24:16:e7:84:d7:96:d9:fd:c7:2b:d5:e2:54:
80:ce:5f:fc:cf:5f:40:a6:e1:3c:a6:00:e3:4f:10:
15:56:03:d2:49:93:75:06:b4:c1:c8:ea:95:a8:a2:
d3:6c:91:ea:1a:24:51:cd:07:36:08:d8:d1:3e:b9:
d8:45:e3:32:5d:98:bc:cf:52:50:8b:45:81:95:65:
94:e2:e0:b5:52:2e:f2:f8:c8:d3:f3:d0:c4:ee:f4:
2b:ed:cb:95:b8:ad:12:e6:b0:e3:9f:5a:c5:05:a0:
76:49:dc:ac:a2:7d:a8:a0:f2:a6:a7:9c:1c:a2:91:
7e:01:92:25:c5:9b:72:0b:74:3b:8d:18:bb:39:9c:
e2:59:d6:3e:92:b6:a5:8c:08:42:1e:56:5c:53:4e:
48:52:a1:95:08:0e:9f:ff:88:08:bc:2b:0f:61:35:
1e:f8:95:e6:75:d4:1f:27:14:f2:a5:90:98:25:36:
fa:44:8c:b6:ac:79:1f:4b:4b:a7:be:16:71:76:8c:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FA:DB:3C:80:DF:3A:CD:BC:5C:AA:78:0A:83:85:3F:E3:40:28:59
X509v3 Authority Key Identifier:
keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:90:9c:cf:28:87:14:b7:a5:63:6b:83:97:aa:b4:a4:0d:58:
91:89:5c:26:34:73:f2:62:66:e4:2f:0a:f0:a9:11:db:df:c9:
ab:ec:e0:33:6a:3c:12:e1:1f:ab:43:80:6c:77:9a:e8:d3:86:
fe:7a:4c:25:5e:26:33:df:e5:c7:c3:63:d9:da:97:06:64:97:
50:ad:8c:59:fd:c1:74:1e:66:9e:ac:35:51:fc:98:fc:4e:8d:
33:2f:02:f9:82:94:df:85:b3:67:40:af:24:b3:bd:08:09:cc:
65:49:c5:46:13:11:d9:38:9c:a2:93:8a:df:57:8e:4a:7f:64:
c6:3d:6f:ac:42:f9:e4:46:a7:04:be:a8:be:7f:3c:c6:40:a7:
e5:d3:18:50:1c:fd:8f:8b:04:b1:e1:1d:3b:53:e6:1c:22:67:
e9:8c:9f:eb:87:9a:e4:67:5d:d0:94:5c:ee:0a:d8:96:e1:f3:
3c:58:a9:6b:6b:f0:67:50:8f:16:bb:cd:81:1d:89:09:6a:7e:
c2:07:3b:51:7b:79:05:f7:09:3d:81:aa:17:35:fe:e9:f2:85:
42:01:1c:19:9b:92:dd:26:17:18:61:b2:45:49:68:41:ec:31:
6b:55:d2:6e:2e:ca:02:32:76:18:dc:4c:28:e2:db:a6:7d:af:
ac:ea:9f:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURGNkYxMTAvBgNVBAUTKEZEQzYxMzU1MTVENUQwMTVDOTQ0M0JCNEM1OUJDQkZC
NkQwNjkzRDEwHhcNMjYwNTEyMTkwMjU2WhcNMjYwNTE5MTkwMjU2WjAYMRYwFAYD
VQQDEw02YTAzNzk2MC1kZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApy42U9JvK0f7RQj42q+19JpGie5lZcq0DL3cAShc9byt4PM6MHqMDJY3wsjr
3mrkGXjOsS2mliswRicIoyQW54TXltn9xyvV4lSAzl/8z19ApuE8pgDjTxAVVgPS
SZN1BrTByOqVqKLTbJHqGiRRzQc2CNjRPrnYReMyXZi8z1JQi0WBlWWU4uC1Ui7y
+MjT89DE7vQr7cuVuK0S5rDjn1rFBaB2Sdyson2ooPKmp5wcopF+AZIlxZtyC3Q7
jRi7OZziWdY+kraljAhCHlZcU05IUqGVCA6f/4gIvCsPYTUe+JXmddQfJxTypZCY
JTb6RIy2rHkfS0unvhZxdoxk7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKv62zyA
3zrNvFyqeAqDhT/jQChZMB8GA1UdIwQYMBaAFP3GE1UV1dAVyUQ7tMWby/ttBpPR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REY2Ri9EQTQwQThFODQy
OTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBCWEpSRHUweFp2TC0yMEdr
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19jWVRWUlhWMEJYSlJEdTB4WnZMLTIwR2s5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REY2Ri9EQTQwQThFODQyOTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBC
WEpSRHUweFp2TC0yMEdrOUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXJCczyiHFLelY2uDl6q0pA1YkYlcJjRz8mJm5C8K8KkR29/Jq+zgM2o8EuEf
q0OAbHea6NOG/npMJV4mM9/lx8Nj2dqXBmSXUK2MWf3BdB5mnqw1UfyY/E6NMy8C
+YKU34WzZ0CvJLO9CAnMZUnFRhMR2TicopOK31eOSn9kxj1vrEL55EanBL6ovn88
xkCn5dMYUBz9j4sEseEdO1PmHCJn6Yyf64ea5Gdd0JRc7grYluHzPFipa2vwZ1CP
FrvNgR2JCWp+wgc7UXt5BfcJPYGqFzX+6fKFQgEcGZuS3SYXGGGyRUloQewxa1XS
bi7KAjJ2GNxMKOLbpn2vrOqfzg==
-----END CERTIFICATE-----
Generated at Wed May 13 19:10:11 2026 by rpki-client