
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier: EubkZAZBFyp040EvUt63tI48V1L5LT+3YouY706c1b0=
Subject key identifier: 05:6B:E1:FD:64:6D:5D:9A:43:AE:49:04:85:A2:9E:E9:47:48:0D:08
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial: 0482
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number: 0475
Signing time: Wed 13 May 2026 00:12:40 +0000
Manifest this update: Wed 13 May 2026 00:12:40 +0000
Manifest next update: Wed 20 May 2026 00:12:40 +0000
Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: xTbIGmJkgsmPTUulPF2WZDrGzZXOS3A2y4PU84xOjd8=)
2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=)
3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Validity
Not Before: May 13 00:12:40 2026 GMT
Not After : May 20 00:12:40 2026 GMT
Subject: CN=6a03c1f8-93d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b4:77:45:a9:3e:4a:9a:0f:f2:d6:2d:50:0b:
76:53:4d:f5:84:08:72:2d:39:b7:46:a3:ca:05:1d:
b8:4c:9c:d6:d1:fb:05:36:6d:bd:f3:da:7d:1f:72:
19:a5:d9:fa:f3:5a:eb:20:c8:f4:40:1e:ae:04:b0:
80:2e:ca:42:87:69:1f:a6:00:7d:32:0b:08:56:44:
c6:6c:b3:b1:bb:c1:37:bf:ce:a1:60:4d:ff:3c:d7:
2b:7f:6f:fa:b5:ef:a4:22:df:41:c5:54:30:69:60:
79:21:80:2c:17:b7:8f:38:e8:46:03:ad:0b:5d:5f:
a2:71:ea:1b:45:de:92:96:43:c8:fb:e4:4a:33:98:
ca:43:a0:89:3c:98:b3:0f:a7:6c:57:33:0c:1c:aa:
cb:7b:d7:db:ec:dc:dc:fc:21:0a:f9:73:3b:c3:57:
9a:69:f3:c7:ab:4e:47:3e:c5:db:b9:df:3d:e1:d6:
3c:99:bb:8f:89:7a:c3:f8:0d:9a:df:b4:c4:e3:9b:
f2:73:43:a2:3c:d9:89:c6:d6:ec:02:43:d9:18:bc:
76:3b:3e:25:ec:22:27:65:f6:83:b0:5a:17:da:87:
33:8b:1b:7d:4e:b2:5a:dc:4b:80:ca:2e:3e:12:34:
60:e6:9d:57:44:ad:c9:a5:21:85:e1:4f:b1:d7:e4:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6B:E1:FD:64:6D:5D:9A:43:AE:49:04:85:A2:9E:E9:47:48:0D:08
X509v3 Authority Key Identifier:
keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f2:20:98:f0:f2:03:b7:2b:47:28:66:c1:b4:a8:58:37:0c:
ea:6d:6e:5f:30:45:a2:97:ad:8b:8e:53:ff:e7:b0:65:16:8e:
ba:85:bd:a2:de:0c:05:fc:9e:cd:74:cc:e6:8f:1c:29:bb:d9:
af:7a:92:05:e2:81:1b:af:ff:97:5d:76:20:2e:04:38:4f:1f:
8e:70:2f:d9:78:d7:04:88:0b:02:20:c1:2b:d3:9f:22:65:fd:
ac:f4:f7:76:3c:90:36:9f:03:6a:4d:2b:08:c5:de:05:d0:00:
34:8c:49:1a:8d:b7:aa:62:c3:a5:03:9f:a1:22:9d:17:10:b6:
2a:3f:11:6e:60:e6:92:cf:54:24:35:be:65:f5:67:ad:5e:13:
3a:48:69:f4:0a:44:56:02:b7:c7:bb:8b:5f:9b:1e:5e:da:5e:
75:fb:8f:53:72:45:4d:67:77:b0:a4:19:e8:41:5f:7a:0c:5c:
3f:6d:1c:ed:00:7a:55:c7:27:39:62:3c:da:97:ab:23:d0:b3:
44:0e:08:93:67:e9:47:16:6c:56:3c:27:3f:b1:bc:e7:3e:f7:
9b:d0:bb:32:3e:43:da:a5:8f:d3:7a:fd:2a:20:18:76:a4:0d:
93:75:13:95:2c:50:93:ec:98:9f:b1:b1:6f:36:38:da:f1:91:
3a:9a:f0:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD
NTM2RkRGOUIwHhcNMjYwNTEzMDAxMjQwWhcNMjYwNTIwMDAxMjQwWjAYMRYwFAYD
VQQDEw02YTAzYzFmOC05M2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh7R3Rak+SpoP8tYtUAt2U031hAhyLTm3RqPKBR24TJzW0fsFNm2989p9H3IZ
pdn681rrIMj0QB6uBLCALspCh2kfpgB9MgsIVkTGbLOxu8E3v86hYE3/PNcrf2/6
te+kIt9BxVQwaWB5IYAsF7ePOOhGA60LXV+iceobRd6SlkPI++RKM5jKQ6CJPJiz
D6dsVzMMHKrLe9fb7Nzc/CEK+XM7w1eaafPHq05HPsXbud894dY8mbuPiXrD+A2a
37TE45vyc0OiPNmJxtbsAkPZGLx2Oz4l7CInZfaDsFoX2oczixt9TrJa3EuAyi4+
EjRg5p1XRK3JpSGF4U+x1+TmdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVr4f1k
bV2aQ65JBIWinulHSA0IMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF
NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV
b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGvIgmPDyA7crRyhmwbSoWDcM6m1uXzBFopeti45T/+ewZRaOuoW9ot4MBfye
zXTM5o8cKbvZr3qSBeKBG6//l112IC4EOE8fjnAv2XjXBIgLAiDBK9OfImX9rPT3
djyQNp8Dak0rCMXeBdAANIxJGo23qmLDpQOfoSKdFxC2Kj8RbmDmks9UJDW+ZfVn
rV4TOkhp9ApEVgK3x7uLX5seXtpedfuPU3JFTWd3sKQZ6EFfegxcP20c7QB6Vccn
OWI82perI9CzRA4Ik2fpRxZsVjwnP7G85z73m9C7Mj5D2qWP03r9KiAYdqQNk3UT
lSxQk+yYn7GxbzY42vGROprwGA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:54:48 2026 by rpki-client