
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json)
Hash identifier: cpB9obV5/0L6+7wkFAgRC5zFcXtOmW5b9CfS8LlsrYk=
Subject key identifier: 56:AE:8B:6A:1D:87:5C:26:44:A1:DB:F0:3A:80:07:B8:16:BE:15:A7
Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
Manifest number: 113D
Signing time: Tue 12 May 2026 17:35:55 +0000
Manifest this update: Tue 12 May 2026 17:35:54 +0000
Manifest next update: Tue 19 May 2026 17:35:54 +0000
Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: YbrTf+bWY85b/G4dyxnVvgerXJfsm/qN2Q62avl+ugU=)
2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: eNZGXS/zqJii4r7Dp4wSHUyscFNYWSRreo4HbBsG1r8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Validity
Not Before: May 12 17:35:54 2026 GMT
Not After : May 19 17:35:54 2026 GMT
Subject: CN=6a0364fb-99d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:a6:2d:bb:60:71:fb:1d:26:32:eb:57:83:
d5:a1:0f:78:9c:45:34:8d:01:5a:0d:fb:54:f2:e4:
4a:d0:e4:4e:1f:06:36:7e:38:7f:b7:e9:38:5c:11:
23:d6:49:71:5b:69:cb:e6:23:b5:34:f9:b0:b4:63:
60:f6:d2:71:03:e9:0e:f8:73:ab:72:be:3b:c0:71:
98:5d:45:f4:dc:94:89:8d:50:0f:a7:37:51:fe:04:
6e:7d:e7:fd:b9:12:62:ba:e5:a0:a2:46:c5:0b:40:
3b:8d:d9:53:60:c8:a7:90:bd:8f:29:19:8d:c9:db:
a0:3e:94:16:04:0b:c3:71:36:e7:ec:e9:d9:7e:9f:
63:0d:ec:70:1c:44:af:02:f7:b7:82:e5:b4:25:60:
25:0d:e5:00:94:f0:4c:93:97:7e:9c:ce:21:58:c2:
40:2b:30:fe:c1:39:14:09:df:05:c6:29:23:70:cd:
38:64:ef:54:2a:b4:b3:e4:a5:67:b0:84:26:ce:72:
21:7e:94:14:de:67:93:79:61:8a:89:9c:08:3c:be:
bc:29:f9:f0:a8:d4:53:01:0d:86:0a:4f:52:2c:ed:
26:56:c1:93:cd:3b:be:45:b2:67:7b:1d:12:c7:5a:
51:da:20:2f:c7:ae:b6:f3:fa:15:85:71:98:76:30:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AE:8B:6A:1D:87:5C:26:44:A1:DB:F0:3A:80:07:B8:16:BE:15:A7
X509v3 Authority Key Identifier:
keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:6b:98:2f:a4:80:82:7c:83:9d:f1:c5:8b:25:d4:a6:f6:84:
77:a7:ed:fd:ef:f5:43:f2:a5:0c:b2:de:00:f7:cd:b0:f4:f6:
ed:9b:fe:1f:fc:55:09:5b:70:ce:9c:12:c0:04:66:8b:d0:c4:
dc:7b:be:c5:62:0e:40:9d:5f:c3:7e:b2:13:6f:e2:c3:e6:40:
8d:55:51:66:a2:ef:a2:11:51:52:3d:c5:24:8a:45:c3:02:bc:
a2:b0:a2:7d:25:7b:44:5b:ac:a8:e5:8d:f4:a0:50:a8:22:8e:
2d:67:45:ab:30:b8:34:e2:85:bc:de:a4:a9:03:58:bc:38:e9:
97:82:82:a0:ea:47:e5:12:50:fa:e7:da:3b:53:d1:15:a5:8d:
7e:f1:99:f7:80:b4:ca:ef:8e:c3:10:14:10:92:49:06:87:4a:
5a:be:f2:e0:7e:18:7b:22:1d:27:c7:02:6a:02:1c:ba:ba:8e:
db:86:e6:69:fb:b9:63:05:6d:16:b2:a6:70:02:e8:74:cf:94:
ff:0e:2b:30:1c:91:53:f7:fc:f0:91:ce:8c:81:27:44:47:94:
fe:89:11:8d:0d:05:48:b7:96:27:6b:1c:45:58:ae:f8:1e:6b:
ea:d0:fc:25:27:2b:59:1f:61:73:49:b4:4d:da:cd:a2:a0:37:
c9:16:57:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE
MkY2MjMxQTQwHhcNMjYwNTEyMTczNTU0WhcNMjYwNTE5MTczNTU0WjAYMRYwFAYD
VQQDEw02YTAzNjRmYi05OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxMimLbtgcfsdJjLrV4PVoQ94nEU0jQFaDftU8uRK0OROHwY2fjh/t+k4XBEj
1klxW2nL5iO1NPmwtGNg9tJxA+kO+HOrcr47wHGYXUX03JSJjVAPpzdR/gRufef9
uRJiuuWgokbFC0A7jdlTYMinkL2PKRmNydugPpQWBAvDcTbn7OnZfp9jDexwHESv
Ave3guW0JWAlDeUAlPBMk5d+nM4hWMJAKzD+wTkUCd8FxikjcM04ZO9UKrSz5KVn
sIQmznIhfpQU3meTeWGKiZwIPL68KfnwqNRTAQ2GCk9SLO0mVsGTzTu+RbJnex0S
x1pR2iAvx6628/oVhXGYdjCMZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFaui2od
h1wmRKHb8DqAB7gWvhWnMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx
RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp
UU9FNVE1V2x6TVRTOWlNYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZmuYL6SAgnyDnfHFiyXUpvaEd6ft/e/1Q/KlDLLeAPfNsPT27Zv+H/xVCVtw
zpwSwARmi9DE3Hu+xWIOQJ1fw36yE2/iw+ZAjVVRZqLvohFRUj3FJIpFwwK8orCi
fSV7RFusqOWN9KBQqCKOLWdFqzC4NOKFvN6kqQNYvDjpl4KCoOpH5RJQ+ufaO1PR
FaWNfvGZ94C0yu+OwxAUEJJJBodKWr7y4H4YeyIdJ8cCagIcurqO24bmafu5YwVt
FrKmcALodM+U/w4rMByRU/f88JHOjIEnREeU/okRjQ0FSLeWJ2scRViu+B5r6tD8
JScrWR9hc0m0TdrNoqA3yRZXZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 17:03:49 2026 by rpki-client