
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier: lzcrApe7oUFVqg9YxlXlde02ji4J4DpHVO9P7xI6/3o=
Subject key identifier: C8:08:7B:25:0B:C4:56:BD:73:B8:CB:A8:E1:8E:F1:87:8B:51:F6:68
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial: 1C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number: 1BF9
Signing time: Tue 12 May 2026 16:14:03 +0000
Manifest this update: Tue 12 May 2026 16:14:02 +0000
Manifest next update: Tue 19 May 2026 16:14:02 +0000
Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: dTlPwd2r5TMSXPA5SmXyh7nLQNiteKJ6FYu9NnRrKs8=)
2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7173 (0x1c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Validity
Not Before: May 12 16:14:02 2026 GMT
Not After : May 19 16:14:02 2026 GMT
Subject: CN=6a0351cb-89c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:00:5e:f0:4e:99:fc:42:41:03:a0:e2:ff:
25:72:6e:af:e5:d4:c7:dc:5e:cd:3f:2b:62:5e:1f:
35:96:46:14:0d:b4:82:0d:fe:ce:d2:11:a4:e9:64:
e3:85:02:82:1b:1a:2e:f0:e5:04:31:45:f8:32:17:
cb:64:69:5d:6f:10:b0:33:1d:67:d2:f4:8b:ab:42:
07:31:31:64:dc:44:b4:29:f4:f4:26:a4:8d:b8:89:
ab:8d:92:17:61:09:46:95:10:57:0b:e0:43:3a:4e:
43:86:d8:e6:85:fb:63:02:61:81:d3:5a:26:f5:49:
ee:9e:f1:5a:06:61:e4:12:23:0c:21:cb:70:8e:50:
85:7d:8f:93:28:84:78:c9:69:91:02:8a:97:7e:8e:
45:5a:2f:dc:d7:4f:94:ac:0d:e7:f2:07:0f:72:04:
d9:b1:de:f9:32:62:e0:8a:8f:1d:ff:4c:f5:f1:35:
3f:d7:e5:48:d1:80:40:b3:ed:9d:61:ce:6b:28:37:
88:3b:f6:10:5f:e0:13:cc:37:21:e6:9e:a3:3f:8f:
5f:ce:97:81:a9:94:1e:fe:94:81:34:ba:a4:7c:6c:
2a:e4:68:5a:12:bb:d9:11:61:b9:8e:17:d2:21:0e:
83:39:59:a4:37:f5:6b:3e:99:af:c6:59:f0:f5:b5:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:08:7B:25:0B:C4:56:BD:73:B8:CB:A8:E1:8E:F1:87:8B:51:F6:68
X509v3 Authority Key Identifier:
keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:f3:88:f2:60:e6:de:fb:80:09:cc:20:df:e9:43:4e:a7:8b:
84:fd:72:a6:a7:27:f7:63:99:0b:da:6d:12:88:98:90:a4:e5:
a8:2d:0e:1e:9f:20:5f:86:9d:85:81:0f:b0:83:38:1c:52:49:
07:05:f2:7b:05:88:a4:0f:2d:e3:44:d1:10:12:cd:ef:6b:b0:
70:2d:13:43:aa:53:fe:7c:5c:0d:12:00:b8:53:8c:23:1b:5a:
d5:6c:54:6a:00:12:ac:e4:50:51:c5:67:3c:29:6a:fd:8e:b8:
67:3f:1e:d0:74:c3:50:ea:99:d7:5b:0e:43:cb:03:d0:e4:a3:
96:89:a5:aa:ab:0a:2d:62:a0:a1:85:f8:85:13:26:c9:4e:d2:
56:e3:2e:c1:ff:16:7a:63:88:a1:3f:86:b9:93:d1:18:ff:15:
ce:de:c1:ae:f7:82:dd:3c:18:ae:3b:2d:41:a5:e9:95:06:a4:
62:9e:2e:05:5d:5c:b1:6c:10:03:98:55:76:0c:db:90:8a:a8:
b1:ac:4e:c1:52:dd:0e:a9:c3:26:b4:10:f1:a2:01:d8:85:f4:
6e:ad:49:e1:c2:08:f0:0f:11:7e:85:9b:8b:5c:80:e2:14:60:
af:32:63:fd:d0:a4:c6:fa:d4:cf:ec:f6:e0:df:c4:1f:7c:57:
18:1e:37:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzhERDUxMTAvBgNVBAUTKEQ2QzNGODEzNzhFODU0MDA3OEJBNzk5NDQyRUVEQkVD
NzgwRTBGN0IwHhcNMjYwNTEyMTYxNDAyWhcNMjYwNTE5MTYxNDAyWjAYMRYwFAYD
VQQDEw02YTAzNTFjYi04OWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk8AAXvBOmfxCQQOg4v8lcm6v5dTH3F7NPytiXh81lkYUDbSCDf7O0hGk6WTj
hQKCGxou8OUEMUX4MhfLZGldbxCwMx1n0vSLq0IHMTFk3ES0KfT0JqSNuImrjZIX
YQlGlRBXC+BDOk5DhtjmhftjAmGB01om9UnunvFaBmHkEiMMIctwjlCFfY+TKIR4
yWmRAoqXfo5FWi/c10+UrA3n8gcPcgTZsd75MmLgio8d/0z18TU/1+VI0YBAs+2d
Yc5rKDeIO/YQX+ATzDch5p6jP49fzpeBqZQe/pSBNLqkfGwq5GhaErvZEWG5jhfS
IQ6DOVmkN/VrPpmvxlnw9bVzPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMgIeyUL
xFa9c7jLqOGO8YeLUfZoMB8GA1UdIwQYMBaAFNbD+BN46FQAeLp5lELu2+x4Dg97
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOERENS9ENUExQTFDNjEy
QTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZBQjR1bm1VUXU3YjdIZ09E
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFzUDRFM2pvVkFCNHVubVVRdTdiN0hnT0Qzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OERENS9ENUExQTFDNjEyQTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZB
QjR1bm1VUXU3YjdIZ09EM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR/OI8mDm3vuACcwg3+lDTqeLhP1ypqcn92OZC9ptEoiYkKTlqC0OHp8gX4ad
hYEPsIM4HFJJBwXyewWIpA8t40TREBLN72uwcC0TQ6pT/nxcDRIAuFOMIxta1WxU
agASrORQUcVnPClq/Y64Zz8e0HTDUOqZ11sOQ8sD0OSjlomlqqsKLWKgoYX4hRMm
yU7SVuMuwf8WemOIoT+GuZPRGP8Vzt7BrveC3TwYrjstQaXplQakYp4uBV1csWwQ
A5hVdgzbkIqosaxOwVLdDqnDJrQQ8aIB2IX0bq1J4cII8A8RfoWbi1yA4hRgrzJj
/dCkxvrUz+z24N/EH3xXGB43gQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:32:46 2026 by rpki-client