
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json)
Hash identifier: eosEqMBmKzMC+yGk0TjOcTpcnWoZDXLBO8DGfcy/rqE=
Subject key identifier: 39:41:DD:27:FF:9A:A5:07:09:76:F8:8F:7E:DB:CD:17:6D:A1:94:F4
Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
Manifest number: 012E
Signing time: Mon 11 May 2026 05:36:58 +0000
Manifest this update: Mon 11 May 2026 05:36:57 +0000
Manifest next update: Mon 18 May 2026 05:36:57 +0000
Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: vHOADhH4NjUz+7ysigyARK/d2UhAlDElkGxQwAbxK4k=)
2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: 777ytcJtKRK+U1mjB59992g0IydheNppCEpFNuVRoDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Validity
Not Before: May 11 05:36:57 2026 GMT
Not After : May 18 05:36:57 2026 GMT
Subject: CN=6a016afa-179f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:9c:45:8c:fb:7d:59:00:3e:d8:e5:14:94:
30:e7:5e:bd:a7:45:3c:ed:b6:08:cb:b6:95:27:b4:
b5:d2:4d:6d:e7:ca:46:19:b6:d8:9a:e9:60:7b:ff:
55:da:81:d2:e1:80:d3:cf:ce:13:42:63:ba:48:f2:
e5:77:b1:87:98:d1:76:97:83:61:63:7e:0a:88:8f:
5c:85:7c:70:bc:66:38:f8:1d:37:3b:8a:c9:cc:77:
90:6b:ef:1e:52:b7:3b:75:da:a0:90:52:e2:10:11:
54:72:83:45:61:c5:fb:82:cc:e7:14:cb:7a:66:61:
13:ad:c4:c5:c7:36:46:e8:aa:2e:89:e7:c0:08:e1:
f5:9f:94:d1:4f:70:4d:dd:b7:fd:ed:11:91:c2:f1:
e2:d1:3a:0c:a7:ae:57:8a:0c:ea:f0:ac:97:42:54:
88:0d:72:73:65:7f:cd:60:4d:93:e0:f5:c8:73:ab:
17:21:f8:14:d8:6d:0e:4e:10:08:22:cc:23:f8:dc:
30:88:83:47:8b:1a:93:95:10:64:d2:e5:9a:48:ce:
6b:aa:51:58:19:a4:17:27:29:82:ca:ec:ae:47:e7:
c5:d6:51:ff:34:c8:f7:e0:cd:c8:dc:7c:ab:65:39:
ee:2d:d2:b0:2c:7b:06:7b:5d:3c:0b:88:f4:43:7c:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:DD:27:FF:9A:A5:07:09:76:F8:8F:7E:DB:CD:17:6D:A1:94:F4
X509v3 Authority Key Identifier:
keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:39:83:26:1a:b7:8a:21:6c:59:a0:22:07:ed:d6:fb:ea:aa:
35:1e:b0:6c:6d:aa:21:2e:69:8a:3f:03:cd:67:53:e5:0e:46:
63:df:17:22:9c:c5:3e:68:e7:ff:2b:bd:39:f6:d6:f5:a7:6a:
f4:6b:29:9b:93:39:1f:fa:85:91:2f:a0:05:73:ec:23:03:9f:
2c:75:f7:b4:3f:c0:4b:04:5e:1f:f2:a2:d8:01:96:3e:5b:27:
a1:5f:c0:ca:63:e5:ef:8c:3e:95:0b:0e:f4:55:29:37:0d:f9:
c8:5c:95:7b:2e:81:01:b5:83:b7:cd:b8:0b:22:e6:ad:aa:bb:
a0:f9:48:c1:67:e3:e4:43:94:c4:82:9c:33:85:3f:98:fd:84:
f4:d6:f8:12:32:36:a6:a4:a8:29:cb:81:ca:6a:3d:0a:79:9a:
2e:4b:4e:4c:dd:af:83:9b:a5:2c:2b:85:14:e3:74:31:3c:b6:
97:1c:78:56:72:11:87:57:11:2b:5e:63:50:6c:8e:b9:46:13:
88:be:09:18:1e:e8:c1:76:aa:99:11:c5:78:4b:5d:b4:49:2b:
96:93:08:51:7e:0b:c9:7c:fc:cc:d7:24:90:3d:da:34:8a:ae:
cf:8c:42:ce:ff:60:e9:a5:52:46:b3:7e:ec:19:3b:40:5f:2c:
97:36:a6:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDRDUxMTAvBgNVBAUTKEQyNDFGNTcxQ0Q2Mzk3OTYzMERDMUYxNkFENDg5OUQ1
QkVENTY2RTUwHhcNMjYwNTExMDUzNjU3WhcNMjYwNTE4MDUzNjU3WjAYMRYwFAYD
VQQDEw02YTAxNmFmYS0xNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJqcRYz7fVkAPtjlFJQw5169p0U87bYIy7aVJ7S10k1t58pGGbbYmulge/9V
2oHS4YDTz84TQmO6SPLld7GHmNF2l4NhY34KiI9chXxwvGY4+B03O4rJzHeQa+8e
Urc7ddqgkFLiEBFUcoNFYcX7gsznFMt6ZmETrcTFxzZG6KouiefACOH1n5TRT3BN
3bf97RGRwvHi0ToMp65Xigzq8KyXQlSIDXJzZX/NYE2T4PXIc6sXIfgU2G0OThAI
Iswj+NwwiINHixqTlRBk0uWaSM5rqlFYGaQXJymCyuyuR+fF1lH/NMj34M3I3Hyr
ZTnuLdKwLHsGe108C4j0Q3ylWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlB3Sf/
mqUHCXb4j37bzRdtoZT0MB8GA1UdIwQYMBaAFNJB9XHNY5eWMNwfFq1ImdW+1Wbl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83MTk5NUY0RTdG
RUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1WXczQjhXclVpWjFiN1Za
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUNENS83MTk5NUY0RTdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1
WXczQjhXclVpWjFiN1ZadVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAzmDJhq3iiFsWaAiB+3W++qqNR6wbG2qIS5pij8DzWdT5Q5GY98XIpzFPmjn
/yu9OfbW9adq9Gspm5M5H/qFkS+gBXPsIwOfLHX3tD/ASwReH/Ki2AGWPlsnoV/A
ymPl74w+lQsO9FUpNw35yFyVey6BAbWDt824CyLmraq7oPlIwWfj5EOUxIKcM4U/
mP2E9Nb4EjI2pqSoKcuBymo9CnmaLktOTN2vg5ulLCuFFON0MTy2lxx4VnIRh1cR
K15jUGyOuUYTiL4JGB7owXaqmRHFeEtdtEkrlpMIUX4LyXz8zNckkD3aNIquz4xC
zv9g6aVSRrN+7Bk7QF8slzamwQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:59:08 2026 by rpki-client