
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier: amDAQls+gwIEw+FUuIKk467oi120x7sXm0YZuzyXWE8=
Subject key identifier: 74:42:5B:BD:D0:D6:A7:53:03:86:89:EA:D1:C4:00:81:38:E2:5A:FB
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial: 0D42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number: 0D15
Signing time: Tue 12 May 2026 18:16:04 +0000
Manifest this update: Tue 12 May 2026 18:16:04 +0000
Manifest next update: Tue 19 May 2026 18:16:04 +0000
Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: BgcGAt5oDH/84iKu8hE6wrOauKBAphxSpoaAW1PF30s=)
2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: R7rZtnSJJ0QZFo5Ja/uQYwMCd6fNJf9hdwEvNCJu1OA=)
3: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: Dw3nMUxEhyHX5ev98aRNWPLfcsu+JByGF2YmsWZl+nQ=)
4: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: FMrV9a339leH9QraYW+j9/idX+LpdB6y6EvY3B6c48k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Validity
Not Before: May 12 18:16:04 2026 GMT
Not After : May 19 18:16:04 2026 GMT
Subject: CN=6a036e64-05cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:1b:59:f2:88:01:e5:e2:cd:73:b2:e1:87:
98:1c:5a:89:f1:2f:0b:a1:98:01:9a:90:e5:a7:51:
d0:85:cc:d5:32:9c:26:9c:e9:b7:6f:d0:f4:22:9a:
96:b2:32:70:4f:ac:7f:a1:58:a9:7f:a4:b5:59:e4:
e6:3d:4a:45:0b:e2:2c:c8:72:ac:55:ea:0a:d6:27:
e3:4e:a6:dd:cc:a5:52:9a:3a:02:4a:22:d4:31:17:
4c:2e:1e:62:d0:12:eb:be:27:b9:9d:ba:de:9e:01:
cb:d7:81:1a:95:41:60:f7:39:c5:d5:3e:0a:c5:85:
9d:28:49:0a:36:3b:37:de:59:66:81:d2:39:1d:4d:
10:bb:9c:8d:18:90:76:30:83:03:4a:0a:74:0f:a0:
a0:60:13:89:5c:76:bd:9a:43:d1:0c:1e:8a:2e:4c:
02:1e:94:34:2a:26:0c:4c:45:4b:e1:d1:97:8f:3f:
04:1a:db:21:aa:3a:ab:c2:e3:8c:6d:fb:ff:13:e2:
b3:da:3a:91:41:f4:62:8b:3e:ac:d0:00:f5:d4:ee:
73:6a:85:43:c9:bf:63:f8:37:70:c6:0d:5e:af:0a:
02:4d:ac:0c:35:83:c4:b5:42:f6:a6:90:57:39:07:
a7:7d:b2:a6:1f:81:46:47:2a:bf:89:3e:d9:1f:c6:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:42:5B:BD:D0:D6:A7:53:03:86:89:EA:D1:C4:00:81:38:E2:5A:FB
X509v3 Authority Key Identifier:
keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:c5:d6:2f:0c:47:53:ab:0f:02:62:c0:aa:aa:43:a0:ff:
10:9b:ca:d9:76:c1:f5:14:fb:8d:d9:11:b9:49:52:cf:98:c5:
fe:c6:f2:f4:d3:bd:a6:9e:36:de:1c:a6:ca:11:45:26:06:15:
88:2b:5e:ba:b8:87:78:4d:66:ef:34:bb:06:31:3a:d9:69:25:
60:8c:88:77:eb:3d:fb:00:c2:2a:cf:ad:54:2c:f9:5e:f6:d3:
63:ef:71:4a:64:34:d4:60:79:98:08:f8:58:43:f3:19:31:38:
c1:c1:52:26:28:a1:9d:23:45:a7:db:0c:92:25:2b:8f:5d:49:
b7:64:b6:7c:5d:96:36:86:3e:92:5f:0b:76:a0:00:1f:87:74:
c3:9b:6a:8b:a3:22:77:c2:85:fd:4c:15:c5:7e:52:62:be:fd:
25:28:2b:4f:8a:53:ed:a1:96:d5:6b:60:1f:a7:6e:b9:a6:2a:
fd:37:b7:f2:8c:7c:e2:3d:21:7c:48:0a:17:ea:1c:ac:14:f3:
b3:1f:bb:ce:70:4a:41:10:0f:ba:51:3e:cf:22:e1:a4:a7:4f:
32:54:47:76:e1:de:b1:a4:80:20:2a:d7:86:8c:d6:c4:98:bd:
bb:b6:8e:da:51:08:01:55:03:62:db:47:44:dc:89:18:58:03:
aa:0b:54:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw
NTFDNDU2RTMwHhcNMjYwNTEyMTgxNjA0WhcNMjYwNTE5MTgxNjA0WjAYMRYwFAYD
VQQDEw02YTAzNmU2NC0wNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApbYbWfKIAeXizXOy4YeYHFqJ8S8LoZgBmpDlp1HQhczVMpwmnOm3b9D0IpqW
sjJwT6x/oVipf6S1WeTmPUpFC+IsyHKsVeoK1ifjTqbdzKVSmjoCSiLUMRdMLh5i
0BLrvie5nbrengHL14EalUFg9znF1T4KxYWdKEkKNjs33llmgdI5HU0Qu5yNGJB2
MIMDSgp0D6CgYBOJXHa9mkPRDB6KLkwCHpQ0KiYMTEVL4dGXjz8EGtshqjqrwuOM
bfv/E+Kz2jqRQfRiiz6s0AD11O5zaoVDyb9j+Ddwxg1erwoCTawMNYPEtUL2ppBX
OQenfbKmH4FGRyq/iT7ZH8bQMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRCW73Q
1qdTA4aJ6tHEAIE44lr7MB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1
MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5
Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY4PF1i8MR1OrDwJiwKqqQ6D/EJvK2XbB9RT7jdkRuUlSz5jF/sby9NO9pp42
3hymyhFFJgYViCteuriHeE1m7zS7BjE62WklYIyId+s9+wDCKs+tVCz5XvbTY+9x
SmQ01GB5mAj4WEPzGTE4wcFSJiihnSNFp9sMkiUrj11Jt2S2fF2WNoY+kl8LdqAA
H4d0w5tqi6Mid8KF/UwVxX5SYr79JSgrT4pT7aGW1WtgH6duuaYq/Te38ox84j0h
fEgKF+ocrBTzsx+7znBKQRAPulE+zyLhpKdPMlRHduHesaSAICrXhozWxJi9u7aO
2lEIAVUDYttHRNyJGFgDqgtUaA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:32:39 2026 by rpki-client