
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
File: C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json)
Hash identifier: YnlTQ+OX75DJRdOC/HdUQ7mE1Y/0gelSNkCXa9dgMEs=
Subject key identifier: 01:2B:8C:A6:60:36:8D:A8:1E:39:39:E8:B4:0C:AC:49:E2:77:3C:7E
Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
Certificate issuer: /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
Manifest number: 8E
Signing time: Wed 13 May 2026 07:39:04 +0000
Manifest this update: Wed 13 May 2026 07:39:03 +0000
Manifest next update: Wed 20 May 2026 07:39:03 +0000
Files and hashes: 1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: QSQHwdAuHYSboEorONw/pFk+7503vjcCMDy58IfzTmg=)
2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: SoN2OmaKDx3s/tXFdxvFr9GR6YOZ0tZJgZDuBgai0t4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Validity
Not Before: May 13 07:39:03 2026 GMT
Not After : May 20 07:39:03 2026 GMT
Subject: CN=6a042a98-8478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:37:24:ac:43:c5:64:00:38:3b:cc:52:cf:
f5:64:79:f6:7c:95:d0:22:fc:52:96:8e:66:9a:33:
e8:c8:61:97:ca:5a:4f:67:dd:a1:3e:68:36:76:61:
f3:2d:29:cf:71:c5:b0:c4:ae:91:86:b0:5a:3c:88:
db:11:dc:7b:0f:aa:8e:a8:5a:90:c9:f1:40:92:e0:
3c:d1:16:58:3b:cf:d8:b3:03:9c:09:2d:cf:c1:a9:
d9:20:84:03:8d:7e:21:ee:64:08:f6:10:d7:b8:c7:
46:ea:6a:b9:3d:79:a3:b8:13:b0:d8:a8:fd:eb:c5:
e5:4d:a0:cc:79:3c:2f:77:85:07:15:f5:61:38:d9:
0c:38:44:f1:de:e5:ad:97:f5:52:f3:d1:1b:00:77:
54:39:de:33:dc:34:05:28:0c:3e:66:ba:4c:22:33:
5f:11:30:ec:b6:8c:2f:51:2a:63:c0:28:df:d2:5c:
ff:7b:d9:18:6f:65:21:c6:01:74:7d:31:7f:b9:57:
13:ff:13:01:db:35:f0:4c:2b:8d:48:90:23:70:72:
ad:20:4c:62:25:db:a9:8d:08:fd:a1:ef:a0:46:56:
d4:a5:c1:ce:d2:88:88:fe:55:af:67:71:8c:b2:63:
4f:27:e7:c1:03:a6:66:24:8c:e8:39:17:9f:a5:8d:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:8C:A6:60:36:8D:A8:1E:39:39:E8:B4:0C:AC:49:E2:77:3C:7E
X509v3 Authority Key Identifier:
keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:bb:63:b3:3e:fa:39:55:82:e3:51:dd:9c:8d:31:bf:52:11:
8f:60:ba:b8:00:e1:a7:b5:b3:ad:8e:eb:c2:02:7b:b8:11:15:
5d:7b:c0:23:29:28:51:8d:2a:75:a8:9b:1a:46:48:bd:c6:27:
5f:21:fa:05:48:6d:f8:9a:a9:d9:a9:17:5e:18:88:80:91:c3:
d2:38:ab:10:6d:d6:b6:6b:1a:1d:e4:b4:8e:79:bb:49:2c:98:
4c:42:60:6a:72:13:f4:68:01:de:9c:f9:18:bc:60:2c:f5:dc:
a4:f0:f5:ed:83:bd:c9:c7:ee:e5:a4:c5:f5:d9:6a:e6:d6:9d:
e8:b8:f9:d0:15:a8:48:3c:c9:2e:82:2e:76:e5:9e:4e:32:d1:
3b:51:d4:e0:d6:b6:01:a7:32:f3:54:c2:ac:35:e7:15:83:13:
f9:cf:27:25:8a:63:5b:1a:3f:c9:28:f4:ef:21:71:74:d4:0c:
d9:b1:25:ba:a8:ec:f2:54:5c:65:cb:8b:a3:b0:f0:e6:84:bb:
dc:3b:73:f3:06:b1:43:72:c8:69:d5:fd:fd:41:2c:94:b9:66:
a6:f0:e2:1e:2f:3d:9e:56:78:d1:e4:8b:bd:3e:00:ed:28:5d:
d7:5d:54:24:4c:d7:80:de:31:1d:dc:9e:19:2d:3a:23:27:a4:
f6:34:56:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkwMUUxMTAvBgNVBAUTKDBCQkJBNDEyNEJBNEM3QzhBN0Y5RDA5N0VFRUFBOTgz
MkYwOTc5NjcwHhcNMjYwNTEzMDczOTAzWhcNMjYwNTIwMDczOTAzWjAYMRYwFAYD
VQQDEw02YTA0MmE5OC04NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYc3JKxDxWQAODvMUs/1ZHn2fJXQIvxSlo5mmjPoyGGXylpPZ92hPmg2dmHz
LSnPccWwxK6RhrBaPIjbEdx7D6qOqFqQyfFAkuA80RZYO8/YswOcCS3PwanZIIQD
jX4h7mQI9hDXuMdG6mq5PXmjuBOw2Kj968XlTaDMeTwvd4UHFfVhONkMOETx3uWt
l/VS89EbAHdUOd4z3DQFKAw+ZrpMIjNfETDstowvUSpjwCjf0lz/e9kYb2UhxgF0
fTF/uVcT/xMB2zXwTCuNSJAjcHKtIExiJdupjQj9oe+gRlbUpcHO0oiI/lWvZ3GM
smNPJ+fBA6ZmJIzoORefpY3YYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAErjKZg
No2oHjk56LQMrEnidzx+MB8GA1UdIwQYMBaAFAu7pBJLpMfIp/nQl+7qqYMvCXln
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTAxRS9FNkU4ODBEODc4
REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4aW4tZENYN3VxcGd5OEpl
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M3dWtFa3VreDhpbi1kQ1g3dXFwZ3k4SmVXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTAxRS9FNkU4ODBEODc4REExMUYwQjBGQkUyMTZDNEY5QUUwMi9DN3VrRWt1a3g4
aW4tZENYN3VxcGd5OEplV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2btjsz76OVWC41HdnI0xv1IRj2C6uADhp7WzrY7rwgJ7uBEVXXvAIykoUY0q
daibGkZIvcYnXyH6BUht+Jqp2akXXhiIgJHD0jirEG3WtmsaHeS0jnm7SSyYTEJg
anIT9GgB3pz5GLxgLPXcpPD17YO9ycfu5aTF9dlq5tad6Lj50BWoSDzJLoIuduWe
TjLRO1HU4Na2Aacy81TCrDXnFYMT+c8nJYpjWxo/ySj07yFxdNQM2bEluqjs8lRc
ZcuLo7Dw5oS73Dtz8waxQ3LIadX9/UEslLlmpvDiHi89nlZ40eSLvT4A7Shd111U
JEzXgN4xHdyeGS06Iyek9jRWEw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:35:37 2026 by rpki-client