
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft (raw, json)
Hash identifier: uWUrhUs1bqbfQE+SUvdLLwdy0Ci0a7lZ+EE5zHmBgMg=
Subject key identifier: 42:72:05:9F:58:45:76:EA:7E:69:97:39:60:97:87:F6:E8:65:6B:E5
Authority key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F
Certificate issuer: /CN=A91A423D/serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
Manifest number: 6B
Signing time: Mon 11 May 2026 08:04:05 +0000
Manifest this update: Mon 11 May 2026 08:04:04 +0000
Manifest next update: Mon 18 May 2026 08:04:04 +0000
Files and hashes: 1: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl (hash: YBB2LXpK3cP3PajYaIWyeBvdz4A6KgRQymGF443kWTE=)
2: 2ECF71C4B0A111F0B537573FC4F9AE02.roa (hash: mJVmTz7IkuwUjhzH9s0qmpcZ7tmBDKPTqnHWHcZldiM=)
3: DEE9FAB2B0A011F0B752B713C4F9AE02.roa (hash: tIyfiOIVf8LJoJNKrA+GLInMrFSEZkAOa9GYbRAVo1s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl
rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F
Validity
Not Before: May 11 08:04:04 2026 GMT
Not After : May 18 08:04:04 2026 GMT
Subject: CN=6a018d75-06ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:23:87:df:4e:84:31:6a:2b:6b:9b:c8:d8:
8f:7a:c6:50:ad:58:03:ff:94:36:c5:de:94:94:40:
f8:43:26:2b:03:a4:7a:b4:73:78:d1:64:6f:e9:b4:
9f:43:b1:df:7b:b5:86:67:0f:9b:2a:12:eb:b8:f4:
51:57:d4:1d:c6:09:ae:9f:b7:fe:df:81:7b:5a:3f:
13:68:b1:70:5e:d7:7a:44:01:1d:4c:bc:f0:a6:81:
b7:2d:09:bd:9f:3d:df:2f:92:fa:d1:5c:6d:dd:2d:
0d:93:ac:f3:b0:99:f3:03:3a:f8:da:62:a9:d9:4a:
6f:75:80:d5:4b:91:33:76:c2:e0:2a:03:c7:50:12:
d5:a1:42:55:bc:d2:a0:7e:52:5f:10:57:53:f1:8c:
0c:5c:18:64:f9:79:f1:6b:8d:9a:f1:80:62:d0:f8:
5f:37:35:53:41:ad:d0:55:05:9e:f9:cc:43:a5:8c:
cf:b3:44:76:93:58:3c:1d:6f:52:f3:f9:5e:5c:c6:
3b:5f:0b:28:3b:4b:27:ad:c1:da:11:24:02:50:77:
8b:92:68:bf:87:17:48:00:94:aa:14:6f:2b:b5:72:
d1:ba:a3:d9:72:09:58:12:00:70:6e:9b:5f:11:8c:
04:9d:12:b9:41:62:34:91:71:c6:8d:5b:e7:33:f6:
52:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:72:05:9F:58:45:76:EA:7E:69:97:39:60:97:87:F6:E8:65:6B:E5
X509v3 Authority Key Identifier:
keyid:3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:8e:e0:11:2e:bb:aa:9e:76:7a:4f:6e:14:cc:18:65:3b:d0:
38:64:a2:59:60:49:e6:cb:8a:1b:ea:38:b1:97:c6:5a:28:67:
92:e8:7d:1e:2f:5d:94:da:57:19:5c:d7:1a:eb:6e:27:f7:9a:
f7:d7:11:00:54:97:6d:3d:91:a2:8b:18:4f:e5:79:96:70:d2:
d1:1a:44:dc:4d:be:02:c5:c3:3c:6d:f3:ab:00:6e:eb:cd:09:
57:d5:b9:7a:d2:cd:64:04:36:cc:ee:c9:23:bc:fa:aa:27:4a:
0c:3f:72:75:f5:01:35:26:ab:7f:00:5d:10:6a:be:ae:be:d9:
e5:c3:53:03:16:69:ca:75:c9:20:3a:a8:a2:24:53:c0:4f:10:
02:5c:ba:95:aa:76:6f:19:aa:21:79:f8:10:33:47:12:32:57:
92:de:3b:7e:ce:7c:e0:67:a8:52:7b:71:ae:2c:0a:1b:29:c6:
be:de:2e:b7:3c:b9:86:1d:4c:ad:a7:75:a5:b9:b0:75:3c:ee:
84:6f:20:20:14:7b:bf:42:ad:37:82:62:67:09:20:e5:15:3c:
b0:ab:b3:04:1b:4f:6e:fd:e2:6a:e0:e0:1a:60:39:9d:cb:55:
b8:16:f0:3a:57:63:64:ec:30:cb:f1:2c:37:79:ea:64:6e:c0:
76:90:33:04
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NDIzRDExMC8GA1UEBRMoM0NDRUVCOUQyMDU5Q0ZFOUY2MDg1Njc3RDRCN0ZBMjY0
RjUzM0EwRjAeFw0yNjA1MTEwODA0MDRaFw0yNjA1MTgwODA0MDRaMBgxFjAUBgNV
BAMTDTZhMDE4ZDc1LTA2YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRRiOH306EMWora5vI2I96xlCtWAP/lDbF3pSUQPhDJisDpHq0c3jRZG/ptJ9D
sd97tYZnD5sqEuu49FFX1B3GCa6ft/7fgXtaPxNosXBe13pEAR1MvPCmgbctCb2f
Pd8vkvrRXG3dLQ2TrPOwmfMDOvjaYqnZSm91gNVLkTN2wuAqA8dQEtWhQlW80qB+
Ul8QV1PxjAxcGGT5efFrjZrxgGLQ+F83NVNBrdBVBZ75zEOljM+zRHaTWDwdb1Lz
+V5cxjtfCyg7SyetwdoRJAJQd4uSaL+HF0gAlKoUbyu1ctG6o9lyCVgSAHBum18R
jASdErlBYjSRccaNW+cz9lKlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQnIFn1hF
dup+aZc5YJeH9uhla+UwHwYDVR0jBBgwFoAUPM7rnSBZz+n2CFZ31Lf6Jk9TOg8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0MjNEL0I5NzY5QkQ4QjA5
NTExRjA4QzE1Mjc3OEM0RjlBRTAyL1BNN3JuU0Jaei1uMkNGWjMxTGY2Sms5VE9n
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUE03cm5TQlp6LW4yQ0ZaMzFMZjZKazlUT2c4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0
MjNEL0I5NzY5QkQ4QjA5NTExRjA4QzE1Mjc3OEM0RjlBRTAyL1BNN3JuU0Jaei1u
MkNGWjMxTGY2Sms5VE9nOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBpjuARLruqnnZ6T24UzBhlO9A4ZKJZYEnmy4ob6jixl8ZaKGeS6H0eL12U2lcZ
XNca624n95r31xEAVJdtPZGiixhP5XmWcNLRGkTcTb4CxcM8bfOrAG7rzQlX1bl6
0s1kBDbM7skjvPqqJ0oMP3J19QE1Jqt/AF0Qar6uvtnlw1MDFmnKdckgOqiiJFPA
TxACXLqVqnZvGaohefgQM0cSMleS3jt+znzgZ6hSe3GuLAobKca+3i63PLmGHUyt
p3WlubB1PO6EbyAgFHu/Qq03gmJnCSDlFTywq7MEG09u/eJq4OAaYDmdy1W4FvA6
V2Nk7DDL8Sw3eepkbsB2kDME
-----END CERTIFICATE-----
Generated at Wed May 13 09:32:18 2026 by rpki-client