
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json)
Hash identifier: cHljP7FbI76EeD9wm93Ic+ixz7mHLmVEe7yFEeirwgg=
Subject key identifier: A4:50:F8:B6:CE:7C:5A:14:E0:F0:DE:5D:CA:04:F4:9A:C3:D2:8D:68
Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
Manifest number: 01A3
Signing time: Mon 11 May 2026 04:15:23 +0000
Manifest this update: Mon 11 May 2026 04:15:23 +0000
Manifest next update: Mon 18 May 2026 04:15:23 +0000
Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: Wa+r7fTMdMCj8E3GNIRDHets52kuVN++yvVaX2e4/YM=)
2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 3wRVfI1zpk+cbpoO3lK5QYCwvSabow1kgGaBDb4LpII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Validity
Not Before: May 11 04:15:23 2026 GMT
Not After : May 18 04:15:23 2026 GMT
Subject: CN=6a0157db-8a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:21:4b:7c:9c:ab:e5:58:4b:88:a6:24:06:
17:f3:38:9b:59:29:fb:d4:42:f4:14:90:46:c4:69:
3c:99:69:73:d0:09:43:9a:38:47:a2:22:32:65:03:
4e:df:79:08:b4:61:74:0a:92:6a:94:9c:29:f1:d9:
da:b3:31:90:50:f5:fb:47:30:52:5b:9a:af:70:16:
b4:6c:10:ba:21:99:95:e0:77:d8:d1:1d:07:b5:21:
0b:e1:74:f1:fb:50:5d:9f:d2:89:bd:2a:df:dd:fc:
7e:82:a1:94:31:31:e1:af:4a:19:2f:9e:0e:c0:5f:
50:cb:b7:1c:b3:a9:8e:0e:74:73:9e:de:d6:c4:3d:
4e:84:65:f5:59:c9:7f:c9:78:94:c8:9e:a2:f8:46:
dc:bb:5a:35:d8:5a:73:a4:94:ff:89:1c:80:2c:15:
d3:3d:ff:8f:97:bd:de:a9:c6:4b:af:48:3b:1b:2a:
7b:98:40:15:59:ff:65:f5:8f:64:46:fd:c7:e0:19:
e8:a9:80:1b:8a:db:14:fe:5a:3c:20:f1:c5:36:5e:
ae:b5:79:d7:c2:7f:f3:1d:5d:f5:12:98:e4:60:e5:
5a:d3:bb:19:47:7f:cb:37:44:e2:91:85:15:e0:9d:
27:56:30:ce:ec:58:ad:c1:fb:98:4e:06:25:34:fc:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:50:F8:B6:CE:7C:5A:14:E0:F0:DE:5D:CA:04:F4:9A:C3:D2:8D:68
X509v3 Authority Key Identifier:
keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:ca:27:00:9a:e2:23:29:31:94:bb:cf:fc:66:50:d2:71:02:
26:5a:06:40:91:fc:f3:a0:41:f7:80:e6:6b:e5:9b:2a:18:77:
6d:24:31:d1:bd:ce:28:f2:a9:8c:25:75:65:a4:49:35:31:52:
cc:67:fb:43:34:b5:9c:fd:7b:bf:1d:0a:8c:a9:55:f0:22:a2:
31:fa:b5:e5:1c:a3:1a:fb:5c:8a:70:29:6d:43:d1:c9:76:7b:
7d:c1:2c:a8:06:56:8d:93:15:87:d0:51:94:05:27:46:cb:e9:
3d:49:52:c0:43:55:a4:6c:7b:50:05:d8:43:cb:4d:98:5a:df:
53:9b:c5:fc:3b:8d:b2:46:b4:5f:1e:c0:95:3d:d5:50:7e:b3:
91:ce:af:75:2e:33:95:e3:fd:b4:93:34:7d:ef:d8:48:c7:be:
88:b4:5b:de:e8:64:d5:c1:27:fa:46:2d:51:59:98:8a:b2:b6:
59:67:88:d3:5c:17:9d:b2:77:5b:bc:54:a8:68:bd:f4:5a:6d:
b2:1f:e1:74:7d:ef:af:1f:67:6b:95:71:72:0a:fd:6b:80:08:
b0:76:22:e3:44:21:2e:bd:32:1d:e0:f0:28:3c:9a:3c:85:63:
92:09:2b:24:86:d5:0d:5d:87:f0:ad:76:2a:06:42:97:e0:53:
e1:f1:5f:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw
QkMxNjgxMEMwHhcNMjYwNTExMDQxNTIzWhcNMjYwNTE4MDQxNTIzWjAYMRYwFAYD
VQQDEw02YTAxNTdkYi04YTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkGQhS3ycq+VYS4imJAYX8zibWSn71EL0FJBGxGk8mWlz0AlDmjhHoiIyZQNO
33kItGF0CpJqlJwp8dnaszGQUPX7RzBSW5qvcBa0bBC6IZmV4HfY0R0HtSEL4XTx
+1Bdn9KJvSrf3fx+gqGUMTHhr0oZL54OwF9Qy7ccs6mODnRznt7WxD1OhGX1Wcl/
yXiUyJ6i+Ebcu1o12FpzpJT/iRyALBXTPf+Pl73eqcZLr0g7Gyp7mEAVWf9l9Y9k
Rv3H4BnoqYAbitsU/lo8IPHFNl6utXnXwn/zHV31EpjkYOVa07sZR3/LN0TikYUV
4J0nVjDO7FitwfuYTgYlNPyZmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRQ+LbO
fFoU4PDeXcoE9JrD0o1oMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG
QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1
bTRlYlRjdXZCQ2tMd1dnUXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2MonAJriIykxlLvP/GZQ0nECJloGQJH886BB94Dma+WbKhh3bSQx0b3OKPKp
jCV1ZaRJNTFSzGf7QzS1nP17vx0KjKlV8CKiMfq15RyjGvtcinApbUPRyXZ7fcEs
qAZWjZMVh9BRlAUnRsvpPUlSwENVpGx7UAXYQ8tNmFrfU5vF/DuNska0Xx7AlT3V
UH6zkc6vdS4zleP9tJM0fe/YSMe+iLRb3uhk1cEn+kYtUVmYirK2WWeI01wXnbJ3
W7xUqGi99Fptsh/hdH3vrx9na5Vxcgr9a4AIsHYi40QhLr0yHeDwKDyaPIVjkgkr
JIbVDV2H8K12KgZCl+BT4fFfzQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:03 2026 by rpki-client