
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
File: V8WBYb3sTcee9I4gXyuNEgKPCuo.mft (raw, json)
Hash identifier: g5/fyGDkEpYhzitrJDDXRwxLQyHvS1A8pCPPFKzYQ6Q=
Subject key identifier: DC:85:66:44:03:78:80:C7:78:F1:87:E7:B0:12:C4:56:68:2B:19:84
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Certificate issuer: /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
Manifest number: FA
Signing time: Mon 11 May 2026 06:39:29 +0000
Manifest this update: Mon 11 May 2026 06:39:29 +0000
Manifest next update: Mon 18 May 2026 06:39:29 +0000
Files and hashes: 1: V8WBYb3sTcee9I4gXyuNEgKPCuo.crl (hash: 9zvN8a47XXOEco0QPQEyhslYd4s6UCmRBR/1Ky7Xpbk=)
2: 12316BAEE42C11EF9066AE3AC4F9AE02.roa (hash: HPGKnyw+NQfTj/X7e3fKlZ3w6KRta5tZp8o8op8pTBo=)
3: F971AC8CE42B11EFACAC6F3AC4F9AE02.roa (hash: U+VsznqTyykAZhCkPwQkaxmGV0/S+1xkGWjwU32/aGA=)
4: FFE0419EB92511F0BA672039C4F9AE02.roa (hash: WTfXccsAbnTbw5tr/UPeCs+SMbsRzBlV5qLSUecs6V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Validity
Not Before: May 11 06:39:29 2026 GMT
Not After : May 18 06:39:29 2026 GMT
Subject: CN=6a0179a1-3410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:f3:ae:2b:7c:e2:7b:b3:1e:90:af:95:23:
df:e3:e2:e3:ef:8b:8d:37:95:f0:72:a3:6e:d6:32:
28:94:a2:ec:5e:5e:d9:68:ab:d6:74:0f:ed:c6:53:
7d:08:63:a5:8f:56:bf:55:5f:62:24:de:68:43:ae:
34:ed:d3:5b:f5:87:77:10:b5:b3:98:95:56:8c:80:
57:92:66:0c:1e:af:07:18:98:c2:e1:b9:92:19:ec:
bf:19:4d:a5:c4:06:1f:5b:57:0b:e0:5f:ed:c3:c1:
94:0f:4a:2e:85:0d:38:82:1d:b3:c9:22:4e:2c:c0:
f1:0f:09:76:f2:35:a5:c5:58:98:2d:3a:57:4f:14:
0e:4a:61:4c:ba:2b:1d:9b:fd:3c:d7:85:32:be:fa:
8d:d8:32:39:fc:60:ef:f4:68:41:6b:dc:6f:49:41:
19:48:d9:18:9c:04:9e:0a:1a:e4:e3:99:30:49:76:
2e:7e:db:af:2f:e0:a2:a2:76:2c:5d:97:79:b0:5c:
43:eb:9b:d6:de:db:fe:c7:8c:dd:c6:32:08:3b:f8:
40:95:49:c1:76:41:ec:e2:80:ee:36:a2:dc:0d:17:
c1:21:bc:5b:89:b3:59:bd:2f:87:da:bf:d7:5a:db:
23:6d:06:6f:58:5f:9e:2d:41:4a:99:a7:6d:36:c3:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:66:44:03:78:80:C7:78:F1:87:E7:B0:12:C4:56:68:2B:19:84
X509v3 Authority Key Identifier:
keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c2:2d:8d:d7:29:5a:c1:3e:3c:99:f5:12:6d:f8:01:ab:07:
d9:06:99:a8:7c:56:8a:50:82:5f:11:64:81:05:e1:67:41:8e:
09:a9:12:0b:03:e7:1e:ac:ff:30:b3:ce:3e:9b:20:af:85:f9:
c4:dd:f4:7c:4b:c5:cf:5d:55:d1:73:ee:10:5e:bf:7c:a3:d4:
d6:bf:92:59:e9:9c:9b:9c:d2:71:81:83:e4:c7:92:be:55:65:
d1:24:37:5a:6d:a8:de:bd:b4:b5:10:cc:bc:5d:de:f0:f3:4f:
be:a9:16:da:9b:81:fc:57:d7:59:9b:d0:6b:d6:e3:96:21:22:
58:6f:f7:c1:25:b9:4e:79:65:72:72:00:56:4b:ae:9f:7d:e1:
16:63:f3:9a:2a:7c:8e:64:25:af:cc:be:3b:cb:e3:59:c4:09:
92:28:d5:da:35:7d:5d:a4:40:b1:9d:3b:16:04:9d:fc:b1:f8:
8f:6d:93:1c:86:ce:a1:f6:92:1b:2a:c5:61:cf:d7:33:ba:dd:
2d:68:d4:20:42:73:ca:ed:0d:ac:df:9c:fb:24:3d:35:fb:5c:
bb:7c:a0:30:bb:ce:e9:ee:00:cd:f1:54:19:fd:f6:47:d6:34:
fe:a2:ee:c4:67:81:ce:7c:34:f9:cf:bc:83:f8:81:83:96:db:
e6:80:fd:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI3REUxMTAvBgNVBAUTKDU3QzU4MTYxQkRFQzREQzc5RUY0OEUyMDVGMkI4RDEy
MDI4RjBBRUEwHhcNMjYwNTExMDYzOTI5WhcNMjYwNTE4MDYzOTI5WjAYMRYwFAYD
VQQDEw02YTAxNzlhMS0zNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0oHzrit84nuzHpCvlSPf4+Lj74uNN5XwcqNu1jIolKLsXl7ZaKvWdA/txlN9
CGOlj1a/VV9iJN5oQ6407dNb9Yd3ELWzmJVWjIBXkmYMHq8HGJjC4bmSGey/GU2l
xAYfW1cL4F/tw8GUD0ouhQ04gh2zySJOLMDxDwl28jWlxViYLTpXTxQOSmFMuisd
m/0814UyvvqN2DI5/GDv9GhBa9xvSUEZSNkYnASeChrk45kwSXYuftuvL+CionYs
XZd5sFxD65vW3tv+x4zdxjIIO/hAlUnBdkHs4oDuNqLcDRfBIbxbibNZvS+H2r/X
WtsjbQZvWF+eLUFKmadtNsMKaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyFZkQD
eIDHePGH57ASxFZoKxmEMB8GA1UdIwQYMBaAFFfFgWG97E3HnvSOIF8rjRICjwrq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjdERS82Q0U2QjQwNEUx
M0YxMUVGQUYxODg0MUZDNEY5QUUwMi9WOFdCWWIzc1RjZWU5STRnWHl1TkVnS1BD
dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Y4V0JZYjNzVGNlZTlJNGdYeXVORWdLUEN1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjdERS82Q0U2QjQwNEUxM0YxMUVGQUYxODg0MUZDNEY5QUUwMi9WOFdCWWIzc1Rj
ZWU5STRnWHl1TkVnS1BDdW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWsItjdcpWsE+PJn1Em34AasH2QaZqHxWilCCXxFkgQXhZ0GOCakSCwPnHqz/
MLPOPpsgr4X5xN30fEvFz11V0XPuEF6/fKPU1r+SWemcm5zScYGD5MeSvlVl0SQ3
Wm2o3r20tRDMvF3e8PNPvqkW2puB/FfXWZvQa9bjliEiWG/3wSW5TnllcnIAVkuu
n33hFmPzmip8jmQlr8y+O8vjWcQJkijV2jV9XaRAsZ07FgSd/LH4j22THIbOofaS
GyrFYc/XM7rdLWjUIEJzyu0NrN+c+yQ9Nftcu3ygMLvO6e4AzfFUGf32R9Y0/qLu
xGeBznw0+c+8g/iBg5bb5oD9eQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:36:16 2026 by rpki-client