
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json)
Hash identifier: vfyF015ROc/pwfGJbHw2sbWtToHO2mgS6YsFZsGCybM=
Subject key identifier: 71:35:78:62:63:95:33:5C:EF:37:72:10:03:74:33:91:77:14:EA:9A
Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9
Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
Certificate serial: 0401
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
Manifest number: 03F5
Signing time: Mon 11 May 2026 00:32:59 +0000
Manifest this update: Mon 11 May 2026 00:32:59 +0000
Manifest next update: Mon 18 May 2026 00:32:59 +0000
Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: ZiAU1qVjGc9J/ufCyjc9o6EW6MIh4UoigtWYNd0E0M8=)
2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: kBFUh+A5t0uG5ToonKBS8JyMqqztNI0BDIiwYVryoTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl
rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9
Validity
Not Before: May 11 00:32:59 2026 GMT
Not After : May 18 00:32:59 2026 GMT
Subject: CN=6a0123bb-cb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2f:7d:4e:e5:8f:fd:26:d4:e6:c4:76:aa:cb:
c6:8d:1e:3f:33:7c:e5:7f:94:eb:b1:4b:5c:c3:85:
10:6b:ba:ed:e0:12:dd:1d:97:75:45:66:34:38:85:
b4:41:c3:d2:f8:41:c7:76:d3:40:83:ab:c5:f7:6e:
57:62:2f:57:f6:4a:fd:38:7a:33:81:af:4b:3d:31:
93:5c:79:c8:69:b5:c6:bf:11:90:91:2b:04:02:0c:
ad:46:b9:8e:88:aa:6b:b7:d8:68:a6:4c:71:d1:2b:
06:84:f1:89:52:d3:c8:1c:39:f7:7f:fa:d2:fb:08:
e9:4d:42:14:71:51:89:11:42:93:19:1d:ff:38:5f:
f1:b2:6f:ef:6e:0c:fd:ed:0f:b5:89:f5:66:19:90:
13:74:e2:d4:e7:c4:d8:c1:ef:05:ff:c1:ba:38:cf:
90:29:b8:cc:d8:29:25:36:fe:bb:c8:f1:b4:11:e6:
47:7d:17:2a:88:a7:c3:82:d6:84:98:eb:07:fa:0e:
d9:f2:43:00:17:df:5f:a6:08:59:0b:0e:ea:69:af:
57:e2:ad:49:8d:2a:a7:a7:22:1c:c0:c6:ca:18:3e:
00:d2:b5:43:66:d8:ba:09:e9:ef:83:4f:7b:7d:84:
73:64:9a:15:94:24:64:52:5f:85:7b:13:1e:40:cb:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:35:78:62:63:95:33:5C:EF:37:72:10:03:74:33:91:77:14:EA:9A
X509v3 Authority Key Identifier:
keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:29:7b:b0:82:f0:4b:5d:8e:d0:b7:4d:02:a0:79:ba:89:da:
07:6b:f2:0a:75:cd:af:52:f5:f8:52:25:0f:ea:32:a2:6c:73:
c8:fc:6f:5f:68:a9:e3:f2:57:13:03:a9:8f:ff:5d:09:5a:b7:
29:3d:96:59:d3:9a:26:09:06:4d:37:2f:1e:c7:e4:fb:da:b6:
e8:e8:6c:fb:6e:1f:10:da:fd:56:9c:db:28:27:57:23:0f:d7:
bc:62:a7:47:e2:db:f9:08:1c:7f:10:43:fe:61:49:d1:a7:9e:
7b:18:80:64:c5:97:31:64:f1:de:66:c1:30:fc:81:51:96:a8:
48:ec:d1:b8:1f:72:f1:a2:84:d9:80:c9:ae:da:8a:fa:ad:f8:
a3:10:af:59:49:05:e0:32:a5:55:a3:e3:04:fd:be:ac:c9:e2:
3d:9e:db:de:82:1a:1d:41:ce:38:2c:14:d6:09:93:4a:43:b9:
e5:43:29:e4:c5:3a:ea:30:61:62:a5:34:eb:fd:4f:a4:e0:4e:
b4:89:9f:13:22:5e:40:13:c2:65:20:c3:a9:6b:b7:f5:c1:78:
4e:28:40:c5:d6:6b:f6:17:94:27:fd:a4:80:25:2e:46:dc:31:
be:93:0e:eb:5c:ae:5a:7e:da:da:b6:65:fd:16:ea:29:cd:3a:
6d:44:58:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE1OTAxMTAvBgNVBAUTKDIwMDAwMDVBQzVBMTc0NDA0QkQzQkZDMjk5NDMzMjNF
OTYwNjI1QjkwHhcNMjYwNTExMDAzMjU5WhcNMjYwNTE4MDAzMjU5WjAYMRYwFAYD
VQQDEw02YTAxMjNiYi1jYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9i99TuWP/SbU5sR2qsvGjR4/M3zlf5TrsUtcw4UQa7rt4BLdHZd1RWY0OIW0
QcPS+EHHdtNAg6vF925XYi9X9kr9OHozga9LPTGTXHnIabXGvxGQkSsEAgytRrmO
iKprt9hopkxx0SsGhPGJUtPIHDn3f/rS+wjpTUIUcVGJEUKTGR3/OF/xsm/vbgz9
7Q+1ifVmGZATdOLU58TYwe8F/8G6OM+QKbjM2CklNv67yPG0EeZHfRcqiKfDgtaE
mOsH+g7Z8kMAF99fpghZCw7qaa9X4q1JjSqnpyIcwMbKGD4A0rVDZti6Cenvg097
fYRzZJoVlCRkUl+FexMeQMvCyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHE1eGJj
lTNc7zdyEAN0M5F3FOqaMB8GA1UdIwQYMBaAFCAAAFrFoXRAS9O/wplDMj6WBiW5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5MC85NTEwRTg2QUMw
N0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRFQkwwN19DbVVNeVBwWUdK
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBQUFXc1doZEVCTDA3X0NtVU15UHBZR0piay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTU5MC85NTEwRTg2QUMwN0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRF
QkwwN19DbVVNeVBwWUdKYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoyl7sILwS12O0LdNAqB5uonaB2vyCnXNr1L1+FIlD+oyomxzyPxvX2ip4/JX
EwOpj/9dCVq3KT2WWdOaJgkGTTcvHsfk+9q26Ohs+24fENr9VpzbKCdXIw/XvGKn
R+Lb+QgcfxBD/mFJ0aeeexiAZMWXMWTx3mbBMPyBUZaoSOzRuB9y8aKE2YDJrtqK
+q34oxCvWUkF4DKlVaPjBP2+rMniPZ7b3oIaHUHOOCwU1gmTSkO55UMp5MU66jBh
YqU06/1PpOBOtImfEyJeQBPCZSDDqWu39cF4TihAxdZr9heUJ/2kgCUuRtwxvpMO
61yuWn7a2rZl/RbqKc06bURYCw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:39:59 2026 by rpki-client