
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier: XTLH6+mXoyiSXXz6EJtE0tiUSIWqc7chMdw0PXWrkcM=
Subject key identifier: C0:09:19:D1:EB:FD:CE:FD:C1:20:6B:1B:D1:1D:20:A1:0B:9D:5E:66
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number: 0149
Signing time: Wed 13 May 2026 05:27:01 +0000
Manifest this update: Wed 13 May 2026 05:27:00 +0000
Manifest next update: Wed 20 May 2026 05:27:00 +0000
Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: QmT5rCARhKDypPt4YNJODiG4fl01V6RaPzGDJ7E1Ofg=)
2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: tMsqu6nSNXbRdgdOGNgxf6SRIE8d03QJp/vSSHoCY4U=)
3: 2AF8794E3D6C11F19105CB6FB0833773.roa (hash: OB3qLBEa2BUII86QczWvPAVNyrYJB13iZcC7pu2bBbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Validity
Not Before: May 13 05:27:00 2026 GMT
Not After : May 20 05:27:00 2026 GMT
Subject: CN=6a040ba5-795f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:fa:7c:f5:6e:ea:bf:ad:0f:c2:04:77:e1:
5b:a3:91:36:40:b5:32:4b:03:49:50:83:13:0d:9b:
fb:e5:6f:53:7b:85:a4:bf:9c:00:93:50:0f:bf:7e:
b6:8a:e3:cd:4a:cf:58:59:da:be:3a:b3:48:0d:5d:
6f:65:5e:14:56:cc:0d:ee:4a:be:dd:dd:3f:73:40:
09:9b:65:75:dd:57:d2:21:5a:e3:e0:13:76:f1:09:
b3:25:e8:64:50:b9:77:bc:ee:05:e4:40:73:cd:f3:
03:d3:0e:60:25:ea:d3:83:32:0c:7e:af:db:fd:bc:
51:81:6a:45:0c:5a:a4:a7:a1:8e:67:61:fc:7a:74:
f3:83:d5:91:25:a8:52:3a:9a:ab:e8:56:94:65:73:
27:bd:f7:8a:d5:52:20:8d:74:04:ec:2d:b7:3c:a5:
c1:3c:07:0b:28:c8:a2:06:76:99:68:12:c7:f0:03:
3e:8f:d0:85:13:db:27:da:91:01:fc:af:be:e0:7f:
87:9e:24:e6:40:48:2b:e5:9c:2f:66:1c:7d:1d:1c:
ea:44:1f:f8:07:cc:16:88:ed:25:29:4d:45:9a:d2:
8e:26:56:2b:ce:74:dc:9c:03:9d:39:b4:4e:61:0e:
c9:23:03:d1:d0:95:a7:39:b5:b1:47:2d:e4:9a:ba:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:09:19:D1:EB:FD:CE:FD:C1:20:6B:1B:D1:1D:20:A1:0B:9D:5E:66
X509v3 Authority Key Identifier:
keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b9:64:77:04:1d:5f:65:9a:42:b8:1b:f6:45:5d:e7:39:51:
70:9e:ce:8e:c5:33:ed:c7:80:0f:58:81:1c:e2:1a:87:61:5a:
30:15:b7:8e:a8:e1:4b:7b:6d:42:9f:59:d3:49:3e:9a:1c:28:
94:a4:61:fe:f8:3a:06:41:7e:44:f0:57:91:5e:ed:5e:7f:61:
fc:49:9d:1d:60:63:bd:88:ea:a2:e6:48:29:5a:10:ad:91:fa:
c3:40:7e:a4:af:69:ca:a1:b5:c2:c9:d8:6d:e9:81:93:b5:f2:
14:ae:89:d9:21:43:93:ef:e5:3b:8c:41:6f:3b:fa:a3:eb:69:
0c:4c:72:07:fb:7b:24:f7:91:5f:da:00:cc:06:dc:0b:6b:79:
c2:1d:e6:87:28:d0:dd:d2:12:23:90:ec:af:68:fb:6c:19:61:
fa:73:e1:43:1e:cc:3e:6b:2a:df:57:7c:1d:c5:36:60:c7:01:
11:79:c3:15:4b:b0:c5:c7:c7:4d:04:84:99:7d:01:35:98:37:
b2:45:3f:c6:47:d9:97:99:32:8e:29:ed:29:d8:93:27:59:21:
be:94:64:76:3f:44:fd:dd:65:45:eb:9a:cb:65:22:9d:ae:2f:
00:df:ba:da:92:6b:fb:4a:fe:71:07:af:3b:64:1f:ed:8d:09:
70:dd:bd:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5
NDI5NTY0QzAwHhcNMjYwNTEzMDUyNzAwWhcNMjYwNTIwMDUyNzAwWjAYMRYwFAYD
VQQDEw02YTA0MGJhNS03OTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbP6fPVu6r+tD8IEd+Fbo5E2QLUySwNJUIMTDZv75W9Te4Wkv5wAk1APv362
iuPNSs9YWdq+OrNIDV1vZV4UVswN7kq+3d0/c0AJm2V13VfSIVrj4BN28QmzJehk
ULl3vO4F5EBzzfMD0w5gJerTgzIMfq/b/bxRgWpFDFqkp6GOZ2H8enTzg9WRJahS
Opqr6FaUZXMnvfeK1VIgjXQE7C23PKXBPAcLKMiiBnaZaBLH8AM+j9CFE9sn2pEB
/K++4H+HniTmQEgr5ZwvZhx9HRzqRB/4B8wWiO0lKU1FmtKOJlYrznTcnAOdObRO
YQ7JIwPR0JWnObWxRy3kmrq/XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMAJGdHr
/c79wSBrG9EdIKELnV5mMB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB
NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpK
cE5JN0VHTnlBZGVVS1ZaTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArrlkdwQdX2WaQrgb9kVd5zlRcJ7OjsUz7ceAD1iBHOIah2FaMBW3jqjhS3tt
Qp9Z00k+mhwolKRh/vg6BkF+RPBXkV7tXn9h/EmdHWBjvYjqouZIKVoQrZH6w0B+
pK9pyqG1wsnYbemBk7XyFK6J2SFDk+/lO4xBbzv6o+tpDExyB/t7JPeRX9oAzAbc
C2t5wh3mhyjQ3dISI5Dsr2j7bBlh+nPhQx7MPmsq31d8HcU2YMcBEXnDFUuwxcfH
TQSEmX0BNZg3skU/xkfZl5kyjintKdiTJ1khvpRkdj9E/d1lReuay2Uina4vAN+6
2pJr+0r+cQevO2Qf7Y0JcN29uA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:51:02 2026 by rpki-client