
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier: PJ5QtE37HoY3CEpYhTzIox19+lclgo8BKUBSRX32d/E=
Subject key identifier: BE:B4:BE:7C:50:04:59:3A:96:B9:84:CE:EC:74:DC:F1:4C:97:B9:EE
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number: FC
Signing time: Mon 11 May 2026 06:18:36 +0000
Manifest this update: Mon 11 May 2026 06:18:36 +0000
Manifest next update: Mon 18 May 2026 06:18:36 +0000
Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: y92MkIX/0KNxvAgq0VrrtjGoDrYQY0ZJQckDnRZntJQ=)
2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Validity
Not Before: May 11 06:18:36 2026 GMT
Not After : May 18 06:18:36 2026 GMT
Subject: CN=6a0174bc-1e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:8c:cd:e4:bd:fc:0e:1a:0d:00:95:f8:27:
9e:80:7f:cb:06:93:64:1d:f2:6f:24:20:fb:93:0a:
9a:0f:1a:4e:96:cc:59:fb:f9:d4:dc:61:f1:9b:38:
3a:dc:d4:74:09:1a:ec:9f:e6:f2:8a:12:92:b5:5e:
4f:fd:18:70:19:e5:4a:b9:ec:7b:91:cc:d1:b6:07:
66:67:6d:06:6b:20:ee:65:b1:8a:bc:78:12:ef:51:
ad:30:1d:4d:e6:84:8a:17:5a:2b:0e:96:ba:27:11:
6f:1f:05:db:b9:9b:08:3d:c9:b0:e0:df:56:20:ca:
3f:ad:90:98:08:c9:19:3c:9e:b4:db:3e:94:8e:86:
02:4e:b0:3d:42:f1:99:36:8e:67:72:01:17:19:a7:
0e:ee:35:a3:47:33:39:d5:ef:d0:30:3f:53:3a:3d:
82:31:b0:74:58:26:d0:71:ce:75:bc:20:25:51:84:
64:ae:0e:e9:29:19:3f:7a:aa:09:77:20:a7:53:15:
20:c1:76:16:58:d4:e1:b2:2d:7f:77:17:53:b9:32:
37:dd:1c:82:09:86:23:6a:20:e7:73:14:8f:7e:1c:
5f:56:12:9f:f2:a6:4a:77:90:9d:e5:8b:e6:00:f3:
84:13:ca:3c:19:7d:e0:c9:a7:ca:29:81:59:92:a1:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:BE:7C:50:04:59:3A:96:B9:84:CE:EC:74:DC:F1:4C:97:B9:EE
X509v3 Authority Key Identifier:
keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:27:49:fb:3a:84:b8:c0:ad:8b:be:f7:75:ce:c3:aa:9e:ef:
a7:5b:a9:80:f6:20:0a:81:35:b1:15:4f:7d:47:79:b7:aa:aa:
cf:f7:ee:5a:dc:68:b8:15:76:ff:46:19:6d:c0:33:a3:f8:4c:
f5:73:28:59:d2:29:2d:1f:ac:a6:8d:7a:92:a5:bf:ce:21:6d:
6e:6b:18:ed:72:5e:d7:12:1e:14:dd:a5:21:47:6b:2b:4c:08:
55:19:7f:72:36:38:f8:27:1a:b5:dd:4a:1a:1d:43:d0:68:73:
e3:29:db:59:64:65:70:77:49:64:bb:f6:fa:ef:88:11:79:24:
96:3f:97:88:11:ad:28:3d:4c:60:ee:7f:d2:d6:62:8e:d8:33:
5e:cd:1e:14:46:c3:bf:6f:b5:17:8d:df:59:45:76:c1:df:8c:
2c:79:0f:71:ae:f2:57:39:50:b1:71:7a:84:e9:6a:0d:bd:07:
61:3c:67:ef:93:49:ba:a9:89:2f:09:9b:53:56:71:2e:9c:9c:
cc:a6:bc:ad:f0:f3:da:e6:4f:e1:0f:fb:5c:d9:86:fb:74:4a:
e4:0f:a0:bd:f3:3d:7b:fc:46:e9:83:a7:2a:ff:26:e0:85:86:
ca:4e:85:b8:90:7b:c4:60:ac:c7:d8:09:f3:61:02:98:45:22:
b0:f3:70:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE1REMxMTAvBgNVBAUTKEQzNkUxMDQyNjFGODE5RDY4RDBGNzBCQjI5QURGRThF
RjQ2M0IyRUQwHhcNMjYwNTExMDYxODM2WhcNMjYwNTE4MDYxODM2WjAYMRYwFAYD
VQQDEw02YTAxNzRiYy0xZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjnKMzeS9/A4aDQCV+CeegH/LBpNkHfJvJCD7kwqaDxpOlsxZ+/nU3GHxmzg6
3NR0CRrsn+byihKStV5P/RhwGeVKuex7kczRtgdmZ20GayDuZbGKvHgS71GtMB1N
5oSKF1orDpa6JxFvHwXbuZsIPcmw4N9WIMo/rZCYCMkZPJ602z6UjoYCTrA9QvGZ
No5ncgEXGacO7jWjRzM51e/QMD9TOj2CMbB0WCbQcc51vCAlUYRkrg7pKRk/eqoJ
dyCnUxUgwXYWWNThsi1/dxdTuTI33RyCCYYjaiDncxSPfhxfVhKf8qZKd5Cd5Yvm
APOEE8o8GX3gyafKKYFZkqHJVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL60vnxQ
BFk6lrmEzux03PFMl7nuMB8GA1UdIwQYMBaAFNNuEEJh+BnWjQ9wuymt/o70Y7Lt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy80RkVDMUMwNENF
RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi8wMjRRUW1INEdkYU5EM0M3S2EzLWp2Umpz
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTVEQy80RkVDMUMwNENFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi8wMjRRUW1INEdk
YU5EM0M3S2EzLWp2UmpzdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdidJ+zqEuMCti773dc7Dqp7vp1upgPYgCoE1sRVPfUd5t6qqz/fuWtxouBV2
/0YZbcAzo/hM9XMoWdIpLR+spo16kqW/ziFtbmsY7XJe1xIeFN2lIUdrK0wIVRl/
cjY4+Ccatd1KGh1D0Ghz4ynbWWRlcHdJZLv2+u+IEXkklj+XiBGtKD1MYO5/0tZi
jtgzXs0eFEbDv2+1F43fWUV2wd+MLHkPca7yVzlQsXF6hOlqDb0HYTxn75NJuqmJ
LwmbU1ZxLpyczKa8rfDz2uZP4Q/7XNmG+3RK5A+gvfM9e/xG6YOnKv8m4IWGyk6F
uJB7xGCsx9gJ82ECmEUisPNwAA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:57:09 2026 by rpki-client