
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier: BgYjxmWuPDtVRkTHaDutdNtFeXdVRqdESjagYL+VjF8=
Subject key identifier: 75:46:B6:1E:FC:41:21:83:33:EA:77:B7:97:F5:A7:50:68:0B:DF:4E
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number: 8B
Signing time: Mon 11 May 2026 07:41:26 +0000
Manifest this update: Mon 11 May 2026 07:41:25 +0000
Manifest next update: Mon 18 May 2026 07:41:25 +0000
Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: kzEKq3XKhcwQY+6NXtZug4pNGtFHRVMFYLn7gZGMf3M=)
2: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
3: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Validity
Not Before: May 11 07:41:25 2026 GMT
Not After : May 18 07:41:25 2026 GMT
Subject: CN=6a018826-9500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:60:c9:f0:b8:34:9a:5a:42:27:b2:96:44:
3e:bf:e1:80:9d:62:c3:2a:78:90:c8:59:61:ba:59:
15:76:a8:83:cf:2d:6b:d3:fd:da:c0:0c:03:c9:18:
3c:1e:39:8a:0f:88:89:14:f8:e5:0f:72:26:2b:5b:
73:52:3d:f6:cd:ce:0d:3c:f2:e4:74:a1:eb:0b:14:
d1:a2:10:8f:25:b1:62:28:f4:62:89:32:1f:ee:cb:
4a:0e:29:99:d0:37:0a:c3:8f:12:ed:92:98:d4:cc:
0d:69:5d:52:ba:eb:a8:91:60:e1:0c:07:46:4a:d3:
25:9b:39:30:55:e5:55:fd:fd:a8:8d:8b:de:9a:86:
ec:d8:f5:c4:6b:7d:9a:10:e8:76:57:60:13:2a:79:
02:3e:27:a5:cd:fa:67:20:92:d5:1b:e5:31:a1:2e:
1f:86:2c:01:31:98:0d:84:40:e6:08:bb:15:a3:9b:
2d:4e:b6:3a:49:f1:54:c5:46:ce:9a:21:2f:c0:37:
2a:5d:20:ab:a6:1c:b6:79:14:10:e5:fc:2c:80:35:
2e:87:66:36:c1:50:c9:b0:82:2b:fb:94:23:5b:d8:
01:24:e9:fb:4a:2d:24:26:c2:45:e2:de:0b:3b:6b:
be:ed:ba:91:07:23:31:90:80:47:b7:bf:cb:86:c9:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:46:B6:1E:FC:41:21:83:33:EA:77:B7:97:F5:A7:50:68:0B:DF:4E
X509v3 Authority Key Identifier:
keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:77:31:64:8f:a3:05:74:0c:ce:21:15:81:a0:73:ac:ce:86:
6f:91:ff:3f:ea:bb:21:ef:d1:22:59:ba:96:60:ee:e4:f8:d3:
d0:42:9d:68:1d:bf:c6:6b:af:42:bc:77:a7:a5:c8:49:a7:8f:
cd:a5:35:b4:d9:82:19:c9:d2:0c:fd:7f:f4:44:1e:3a:38:19:
86:a4:d3:31:b3:9c:f1:b8:1f:18:d0:6f:f9:d8:ad:5f:35:12:
58:ed:57:ef:92:3b:0b:20:df:79:c0:85:3c:9e:26:30:a9:34:
3a:55:c2:91:12:84:4b:cc:df:e5:cf:9d:0f:95:29:5d:f5:df:
1e:f5:3d:ea:b1:16:48:bb:72:d2:7d:6b:96:1e:d8:21:72:46:
51:67:8b:9d:2a:65:ec:7b:01:83:f1:0b:80:09:1a:13:b3:06:
09:df:fa:e0:74:67:96:52:9a:4a:cb:fb:8f:9e:e4:8a:f5:15:
61:38:35:46:6c:1a:52:a8:20:50:eb:87:94:14:17:e4:a6:92:
56:de:90:ea:90:bb:9a:8a:93:67:22:b2:d5:5c:6b:51:13:cc:
6b:db:bf:5a:a2:7e:ff:b2:67:e0:52:50:27:ef:08:2f:f5:f2:
18:72:e1:b1:75:ad:5e:95:34:5f:2f:8d:ed:fa:ab:46:fd:da:
07:8d:47:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2NEYxMTAvBgNVBAUTKDc0NTNEODgxM0JDOEVGNzI5MEIxMTAyMzIzNTg4OTRD
NzdDNERCMzcwHhcNMjYwNTExMDc0MTI1WhcNMjYwNTE4MDc0MTI1WjAYMRYwFAYD
VQQDEw02YTAxODgyNi05NTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4iFgyfC4NJpaQieylkQ+v+GAnWLDKniQyFlhulkVdqiDzy1r0/3awAwDyRg8
HjmKD4iJFPjlD3ImK1tzUj32zc4NPPLkdKHrCxTRohCPJbFiKPRiiTIf7stKDimZ
0DcKw48S7ZKY1MwNaV1SuuuokWDhDAdGStMlmzkwVeVV/f2ojYvemobs2PXEa32a
EOh2V2ATKnkCPielzfpnIJLVG+UxoS4fhiwBMZgNhEDmCLsVo5stTrY6SfFUxUbO
miEvwDcqXSCrphy2eRQQ5fwsgDUuh2Y2wVDJsIIr+5QjW9gBJOn7Si0kJsJF4t4L
O2u+7bqRByMxkIBHt7/Lhsm02QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVGth78
QSGDM+p3t5f1p1BoC99OMB8GA1UdIwQYMBaAFHRT2IE7yO9ykLEQIyNYiUx3xNs3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0Ri8zNjBDQTE3QTc5
OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STczS1FzUkFqSTFpSlRIZkUy
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzY0Ri8zNjBDQTE3QTc5OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STcz
S1FzUkFqSTFpSlRIZkUyemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFXcxZI+jBXQMziEVgaBzrM6Gb5H/P+q7Ie/RIlm6lmDu5PjT0EKdaB2/xmuv
Qrx3p6XISaePzaU1tNmCGcnSDP1/9EQeOjgZhqTTMbOc8bgfGNBv+ditXzUSWO1X
75I7CyDfecCFPJ4mMKk0OlXCkRKES8zf5c+dD5UpXfXfHvU96rEWSLty0n1rlh7Y
IXJGUWeLnSpl7HsBg/ELgAkaE7MGCd/64HRnllKaSsv7j57kivUVYTg1RmwaUqgg
UOuHlBQX5KaSVt6Q6pC7moqTZyKy1VxrURPMa9u/WqJ+/7Jn4FJQJ+8IL/XyGHLh
sXWtXpU0Xy+N7fqrRv3aB41Hvw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:14:27 2026 by rpki-client