
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json)
Hash identifier: K8rGPSRwJYat/z+yv96UuOVQd9uOgBCqsQPUWCrzb74=
Subject key identifier: 76:CF:50:24:FF:4E:43:BD:50:64:D0:50:7A:C1:CE:3E:8F:90:F5:01
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial: 09D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
Manifest number: 09CC
Signing time: Tue 12 May 2026 19:57:00 +0000
Manifest this update: Tue 12 May 2026 19:57:00 +0000
Manifest next update: Tue 19 May 2026 19:57:00 +0000
Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: kKc6kHyyekp7He7p12mh21VoA+wC5YFTrHj4OHMBr+E=)
2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: +2e0ypBMf/2EVb6MaYRFXsgQhBqjAZqucCJc3CHmtVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2516 (0x9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Validity
Not Before: May 12 19:57:00 2026 GMT
Not After : May 19 19:57:00 2026 GMT
Subject: CN=6a03860c-a849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:09:c3:d7:d1:d0:3e:a4:f0:9d:53:7b:40:
f2:a2:e5:09:f9:96:2f:d5:99:3f:5c:28:4c:95:06:
a6:8f:ea:a3:ba:fe:a3:c5:48:21:df:b6:be:7a:48:
8f:37:14:d5:30:67:7a:a3:40:f6:52:e6:45:e7:86:
26:fd:cf:74:69:e0:96:4d:47:32:e6:44:05:96:20:
5f:cd:6d:09:3c:b9:10:f2:70:cd:27:83:ce:b8:db:
f6:a5:be:9b:d1:26:ad:36:91:e5:9f:1e:77:53:77:
ee:14:b8:0c:25:67:a0:88:e3:7b:92:13:7b:65:c2:
86:fc:ed:a6:5e:ba:2b:98:32:a0:3c:42:99:ca:44:
7a:6f:eb:59:45:6b:60:54:b5:65:68:23:38:14:e6:
18:01:6e:5d:ab:5a:27:9a:96:d9:6e:29:de:42:27:
34:c5:05:9b:ba:27:42:55:31:c5:5a:81:3b:9d:60:
d1:17:bf:8c:8c:ff:88:66:93:90:a9:b7:3c:78:2f:
12:17:29:12:5a:de:a6:4f:ff:b8:b1:11:fe:8d:89:
9b:cf:e1:e5:61:24:d8:85:0c:69:bf:3c:d1:2d:ed:
e6:89:83:b1:ed:30:48:53:17:96:a6:7e:e6:e6:b9:
e9:d4:32:f9:92:24:1b:02:87:f6:69:19:1e:44:8c:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CF:50:24:FF:4E:43:BD:50:64:D0:50:7A:C1:CE:3E:8F:90:F5:01
X509v3 Authority Key Identifier:
keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:3d:0d:87:4d:fa:cb:ac:e1:8e:d7:d6:ef:9f:00:e5:d6:71:
68:eb:e4:6f:e8:b1:b5:fe:c4:ea:31:76:23:3e:74:dc:90:04:
6c:fd:03:7c:6b:19:33:5a:3a:af:b2:5a:29:b6:9c:6f:10:0d:
23:93:ec:e4:59:c5:89:c8:43:af:23:03:c4:5a:e6:ab:d0:7e:
45:11:23:53:e8:8c:84:10:50:04:11:90:70:2b:ac:30:45:4e:
fe:53:6b:81:eb:26:05:04:8e:96:b0:05:cd:75:b7:16:24:a8:
1d:89:9b:4d:86:4a:29:6a:b7:5d:94:b3:95:00:83:27:01:73:
e5:94:60:57:fd:66:13:6c:c6:f9:6b:0e:06:d7:49:30:46:14:
cc:43:b4:92:9b:1f:8b:2e:d6:78:cc:cb:d1:6f:9d:ce:0b:9c:
2c:4e:ee:fa:af:36:16:3d:39:ea:8b:85:21:ea:f4:30:a3:ce:
4b:a3:b3:16:50:1c:ae:d3:ec:0e:48:53:96:c2:53:e7:e1:63:
31:51:a3:30:c2:31:39:e3:9a:fb:39:9e:8c:8e:92:10:51:e1:
72:79:06:83:6c:90:77:78:48:7f:79:a3:57:ae:0e:dc:da:8e:
27:54:08:ec:c0:22:30:3a:fd:39:0d:e4:51:c7:6e:d9:6b:96:
8b:96:05:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4
QzE5QzgyNEIwHhcNMjYwNTEyMTk1NzAwWhcNMjYwNTE5MTk1NzAwWjAYMRYwFAYD
VQQDEw02YTAzODYwYy1hODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvAJw9fR0D6k8J1Te0DyouUJ+ZYv1Zk/XChMlQamj+qjuv6jxUgh37a+ekiP
NxTVMGd6o0D2UuZF54Ym/c90aeCWTUcy5kQFliBfzW0JPLkQ8nDNJ4POuNv2pb6b
0SatNpHlnx53U3fuFLgMJWegiON7khN7ZcKG/O2mXrormDKgPEKZykR6b+tZRWtg
VLVlaCM4FOYYAW5dq1onmpbZbineQic0xQWbuidCVTHFWoE7nWDRF7+MjP+IZpOQ
qbc8eC8SFykSWt6mT/+4sRH+jYmbz+HlYSTYhQxpvzzRLe3miYOx7TBIUxeWpn7m
5rnp1DL5kiQbAof2aRkeRIxIAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbPUCT/
TkO9UGTQUHrBzj6PkPUBMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0
MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1
enBnTFhibDNGRi1NR2Nna3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkz0Nh036y6zhjtfW758A5dZxaOvkb+ixtf7E6jF2Iz503JAEbP0DfGsZM1o6
r7JaKbacbxANI5Ps5FnFichDryMDxFrmq9B+RREjU+iMhBBQBBGQcCusMEVO/lNr
gesmBQSOlrAFzXW3FiSoHYmbTYZKKWq3XZSzlQCDJwFz5ZRgV/1mE2zG+WsOBtdJ
MEYUzEO0kpsfiy7WeMzL0W+dzgucLE7u+q82Fj056ouFIer0MKPOS6OzFlAcrtPs
DkhTlsJT5+FjMVGjMMIxOeOa+zmejI6SEFHhcnkGg2yQd3hIf3mjV64O3NqOJ1QI
7MAiMDr9OQ3kUcdu2WuWi5YF8g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:11:20 2026 by rpki-client