
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json)
Hash identifier: mZsDHFiQQSsHl7b+wrPt7w+4l0O7CwiAe6504/M5duM=
Subject key identifier: 47:26:C6:1D:64:72:40:A3:BD:13:72:7D:0A:00:91:7A:10:BB:9C:36
Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E
Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E
Certificate serial: 0671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
Manifest number: 066A
Signing time: Tue 12 May 2026 22:41:33 +0000
Manifest this update: Tue 12 May 2026 22:41:33 +0000
Manifest next update: Tue 19 May 2026 22:41:33 +0000
Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: 3Xbo4J1Y5o5HGupp5qYISO6JbyJVUoWjFT/7HKqA540=)
2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: gL7cp7BTVKF8NZn2TWA67vSTXMDPVWx2RqBEPS0dmPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl
rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649 (0x671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E
Validity
Not Before: May 12 22:41:33 2026 GMT
Not After : May 19 22:41:33 2026 GMT
Subject: CN=6a03ac9d-2915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:2e:71:31:60:66:58:5a:5e:8a:13:b7:37:
18:52:e4:de:c1:d4:9a:4b:d0:27:49:5d:1a:8d:6b:
12:4c:fd:81:7a:45:ea:33:3d:41:c5:ee:6f:1f:c3:
40:bd:12:a4:ec:dd:a4:13:ec:06:8d:14:c7:38:c5:
c7:0c:c4:96:f2:73:24:42:ba:df:8e:86:0a:b0:f1:
e3:d9:53:a4:48:35:90:53:df:f8:9b:71:22:e3:4b:
74:e3:26:79:0c:af:40:00:95:d5:00:7f:3d:8f:44:
b2:39:57:a8:3a:c0:99:31:38:43:1d:ec:32:05:71:
01:06:74:64:a5:05:e1:52:49:72:a6:2c:7b:d1:ba:
16:c8:b8:0e:9c:08:d9:fa:9a:07:f6:8a:c7:e7:aa:
f3:08:3e:24:e0:84:7f:af:23:e1:ff:4d:68:84:96:
4b:a0:80:d1:ff:5a:63:99:87:91:9b:7d:f3:71:9c:
40:5b:00:12:f0:6b:e8:65:f7:c7:c7:6e:28:8f:b1:
15:a8:42:0c:4c:77:eb:4e:1d:99:89:e6:be:33:d1:
f2:90:e8:55:d8:b7:3a:f3:e5:ae:f7:9a:f9:d4:b5:
0f:44:5d:c5:ed:79:49:51:58:fa:41:82:7f:58:80:
75:6c:5e:0b:2c:45:9b:89:b9:b4:a2:af:03:91:fb:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:26:C6:1D:64:72:40:A3:BD:13:72:7D:0A:00:91:7A:10:BB:9C:36
X509v3 Authority Key Identifier:
keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:96:e7:e3:c6:1c:c7:62:43:71:0d:bc:f2:50:02:f3:54:74:
6c:e8:a9:34:61:0a:ee:9e:c4:12:a7:5f:48:cf:1c:61:a5:58:
36:f5:8e:3c:34:13:9b:ac:a4:55:d1:c5:c8:49:93:36:a1:28:
81:73:0d:49:47:c0:ce:d8:17:25:b2:42:c7:a3:39:0a:00:39:
93:50:a0:bc:58:cd:27:a0:c4:55:53:da:13:43:24:25:5b:39:
0e:78:4f:c0:03:ae:73:76:00:ba:54:e6:83:25:2d:a4:0c:02:
d4:05:1a:6c:a0:df:8e:61:d4:ee:2a:3c:88:e1:5d:71:54:bb:
f6:f3:af:09:45:2f:4a:7c:7c:69:03:8e:31:5c:90:ae:74:2d:
f7:76:0b:c2:21:96:43:11:38:19:b4:a6:37:e8:1d:a4:a9:f9:
36:31:b8:5c:fd:a3:de:a9:e9:03:a3:b7:43:b9:12:ed:df:9c:
cd:57:97:c3:33:4f:b2:0d:6c:6f:e9:aa:a8:3e:54:09:48:4d:
fd:31:5d:67:50:0c:df:52:aa:f3:da:60:9c:d9:d9:d9:83:89:
0f:60:b4:f4:ca:1e:d6:05:4a:de:d7:fd:23:94:b8:49:bf:d3:
34:25:ce:b8:09:f2:46:25:6e:79:33:8a:20:b1:1f:5d:1d:97:
d7:e5:c7:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw
RjAwNTc3NkUwHhcNMjYwNTEyMjI0MTMzWhcNMjYwNTE5MjI0MTMzWjAYMRYwFAYD
VQQDEw02YTAzYWM5ZC0yOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiL0ucTFgZlhaXooTtzcYUuTewdSaS9AnSV0ajWsSTP2BekXqMz1Bxe5vH8NA
vRKk7N2kE+wGjRTHOMXHDMSW8nMkQrrfjoYKsPHj2VOkSDWQU9/4m3Ei40t04yZ5
DK9AAJXVAH89j0SyOVeoOsCZMThDHewyBXEBBnRkpQXhUklypix70boWyLgOnAjZ
+poH9orH56rzCD4k4IR/ryPh/01ohJZLoIDR/1pjmYeRm33zcZxAWwAS8GvoZffH
x24oj7EVqEIMTHfrTh2Ziea+M9HykOhV2Lc68+Wu95r51LUPRF3F7XlJUVj6QYJ/
WIB1bF4LLEWbibm0oq8Dkfs8MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcmxh1k
ckCjvRNyfQoAkXoQu5w2MB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3
M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk
MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR
bFg0bDJmaDFDRllQQUZkMjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcZbn48Ycx2JDcQ288lAC81R0bOipNGEK7p7EEqdfSM8cYaVYNvWOPDQTm6yk
VdHFyEmTNqEogXMNSUfAztgXJbJCx6M5CgA5k1CgvFjNJ6DEVVPaE0MkJVs5DnhP
wAOuc3YAulTmgyUtpAwC1AUabKDfjmHU7io8iOFdcVS79vOvCUUvSnx8aQOOMVyQ
rnQt93YLwiGWQxE4GbSmN+gdpKn5NjG4XP2j3qnpA6O3Q7kS7d+czVeXwzNPsg1s
b+mqqD5UCUhN/TFdZ1AM31Kq89pgnNnZ2YOJD2C09Moe1gVK3tf9I5S4Sb/TNCXO
uAnyRiVueTOKILEfXR2X1+XHEQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:49:28 2026 by rpki-client