
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json)
Hash identifier: JhS6zmSLdRTPavHA8Os3n/CcHejwiBP1anBHw67QIfY=
Subject key identifier: 12:B1:0A:F4:F3:40:A4:A8:19:51:88:09:82:9B:ED:FA:BF:4B:4E:06
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial: 0945
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
Manifest number: 08F7
Signing time: Tue 12 May 2026 20:40:26 +0000
Manifest this update: Tue 12 May 2026 20:40:25 +0000
Manifest next update: Tue 19 May 2026 20:40:25 +0000
Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: xDadM8TmNSSWexFgFfbHymraVD+J6eAJQ2CQJifR3Oc=)
2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: bKALx6YD+Z5QL+SPXX75fMgztzxC7lFsCyk2pATWF3g=)
3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: Bo7KfSmgopE09z8Ii/6iDq4ZBQOfTMw5H36AojNCI5M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Validity
Not Before: May 12 20:40:25 2026 GMT
Not After : May 19 20:40:25 2026 GMT
Subject: CN=6a039039-1edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c7:f3:c1:5d:7f:5e:36:05:24:99:bb:fc:7c:
fb:a7:45:f9:e8:a4:22:72:44:d9:3d:a0:c6:44:1e:
68:e1:93:6f:3d:e3:b4:cb:48:d5:d8:8e:c4:a5:a1:
d1:82:65:27:75:8b:c6:c0:08:fa:58:da:38:c0:22:
1c:02:63:89:48:01:15:03:32:65:73:c9:c8:32:f5:
63:be:1d:c0:c4:f0:75:27:6b:ca:bf:a8:08:6a:5f:
5a:28:bf:c4:2e:f3:bc:da:04:1b:74:60:c5:a5:db:
10:85:5e:e0:92:c8:e4:e0:0c:e7:4d:05:63:88:f4:
52:51:e1:cc:21:1d:4c:0f:ed:18:d8:d7:62:6a:68:
f5:70:ba:61:45:e5:16:9c:80:52:dd:3f:4a:04:e2:
3d:39:a8:49:93:59:9d:e6:ab:2e:84:33:12:17:e4:
84:ac:30:97:bf:79:c8:52:d2:db:39:e9:ae:d9:f4:
3f:ba:1f:8d:e4:bf:a7:26:7a:cb:35:34:b6:59:3b:
b8:21:0a:7e:41:19:c4:11:4f:32:a5:48:ea:4e:d1:
55:ed:96:04:1f:4b:cb:7b:2d:0b:cc:18:04:f0:97:
b6:76:ee:a3:72:77:72:c0:e8:5e:8e:cd:dc:9a:dc:
7b:4b:2f:0c:c1:af:19:9b:0e:84:7c:ab:69:bd:9f:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B1:0A:F4:F3:40:A4:A8:19:51:88:09:82:9B:ED:FA:BF:4B:4E:06
X509v3 Authority Key Identifier:
keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:66:e7:a1:72:8b:1f:5a:12:68:19:4d:59:aa:07:55:ed:e0:
32:e2:9d:2f:cf:c5:c2:90:19:73:67:3d:d0:f1:ad:d9:55:eb:
f8:bb:0c:d8:5a:ba:dc:02:48:21:51:aa:61:b7:bc:00:fe:d7:
f7:b4:2a:19:d9:26:84:4c:d6:e0:7a:0d:d8:07:18:27:20:86:
b2:33:94:42:b1:e0:0f:eb:17:ec:50:e1:64:8c:27:24:4e:d8:
18:fc:05:ec:fd:bb:c1:af:86:55:f5:37:19:3b:88:50:37:92:
dc:ce:63:7f:74:de:b4:4c:db:4f:5e:f4:ca:ed:5d:a0:ef:90:
c1:03:9c:a8:2b:76:17:cc:1c:ae:55:a9:9a:89:76:8f:85:79:
1b:39:2c:31:ef:0d:af:9d:c2:ad:0e:ee:76:c4:81:01:8a:c7:
15:01:38:f0:3d:28:e1:d3:71:7d:82:cb:aa:07:6a:4b:73:ab:
1b:d1:40:4f:d3:8b:a1:3b:0e:c9:2f:b9:ee:bd:9f:e5:9a:3d:
a3:d2:3d:6b:89:49:0b:5a:1f:fa:89:2c:d1:3a:bd:46:2d:51:
91:e6:6e:97:0b:7f:32:99:6d:7b:6d:2b:9c:a9:4d:94:32:0d:
85:1c:d3:06:36:e1:6c:63:af:28:c6:8b:d4:b1:f0:35:ee:38:
1e:83:58:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx
Nzc4RDA2QkYwHhcNMjYwNTEyMjA0MDI1WhcNMjYwNTE5MjA0MDI1WjAYMRYwFAYD
VQQDEw02YTAzOTAzOS0xZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA98fzwV1/XjYFJJm7/Hz7p0X56KQickTZPaDGRB5o4ZNvPeO0y0jV2I7EpaHR
gmUndYvGwAj6WNo4wCIcAmOJSAEVAzJlc8nIMvVjvh3AxPB1J2vKv6gIal9aKL/E
LvO82gQbdGDFpdsQhV7gksjk4AznTQVjiPRSUeHMIR1MD+0Y2Ndiamj1cLphReUW
nIBS3T9KBOI9OahJk1md5qsuhDMSF+SErDCXv3nIUtLbOemu2fQ/uh+N5L+nJnrL
NTS2WTu4IQp+QRnEEU8ypUjqTtFV7ZYEH0vLey0LzBgE8Je2du6jcndywOhejs3c
mtx7Sy8Mwa8Zmw6EfKtpvZ+mvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKxCvTz
QKSoGVGICYKb7fq/S04GMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx
QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF
ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf2bnoXKLH1oSaBlNWaoHVe3gMuKdL8/FwpAZc2c90PGt2VXr+LsM2Fq63AJI
IVGqYbe8AP7X97QqGdkmhEzW4HoN2AcYJyCGsjOUQrHgD+sX7FDhZIwnJE7YGPwF
7P27wa+GVfU3GTuIUDeS3M5jf3TetEzbT170yu1doO+QwQOcqCt2F8wcrlWpmol2
j4V5GzksMe8Nr53CrQ7udsSBAYrHFQE48D0o4dNxfYLLqgdqS3OrG9FAT9OLoTsO
yS+57r2f5Zo9o9I9a4lJC1of+oks0Tq9Ri1RkeZulwt/Mplte20rnKlNlDINhRzT
BjbhbGOvKMaL1LHwNe44HoNYsQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:43:46 2026 by rpki-client