
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
File: R4pL3QESHRxrMz7MPiW6Gohxmao.mft (raw, json)
Hash identifier: zFpGwY1zLQ+rEGym3KGZCh06BnkVbblla5oWQR5A+A4=
Subject key identifier: 4F:DA:CD:EA:21:4E:54:4F:3E:65:9F:30:02:B1:AC:CB:D0:A7:F3:0A
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Certificate issuer: /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial: 0E8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
Manifest number: 0E7F
Signing time: Tue 12 May 2026 17:47:16 +0000
Manifest this update: Tue 12 May 2026 17:47:15 +0000
Manifest next update: Tue 19 May 2026 17:47:15 +0000
Files and hashes: 1: R4pL3QESHRxrMz7MPiW6Gohxmao.crl (hash: AHzhYOmr3d+gGxA1Zpftm0Unff+3Z0D1//P0/05ZZdc=)
2: 7043D43679BB11ECB6D72266C4F9AE02.roa (hash: 4apSZMW7Vfs833gnnmQpU2EzXDtEcmjJdHV9lEBaG8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3723 (0xe8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Validity
Not Before: May 12 17:47:15 2026 GMT
Not After : May 19 17:47:15 2026 GMT
Subject: CN=6a0367a3-d9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:f5:c3:bd:87:ec:96:a2:94:3a:c5:76:c5:
48:73:b3:d4:d9:f4:51:c3:7c:c5:00:0d:7f:5d:22:
bd:23:ea:0a:ad:11:4a:32:40:1d:b5:f5:b2:03:23:
98:cd:62:62:ef:c8:34:90:05:7d:95:04:91:35:96:
2f:dd:20:33:14:68:0f:fd:65:75:25:4a:b3:dd:89:
52:95:0e:40:38:ba:f0:1b:66:3a:28:fb:46:b7:d1:
88:aa:db:4c:1c:35:83:3b:17:f0:fe:6e:99:ef:89:
08:21:c6:af:ce:38:2e:3d:28:21:4d:81:aa:eb:f8:
56:ef:47:69:57:86:b0:bc:e5:25:e9:f2:6e:2e:42:
e4:4b:63:f9:22:e6:f8:c3:71:34:83:73:9f:98:ce:
2f:49:67:89:ee:3f:e2:27:b0:1e:6e:2e:57:95:5d:
20:35:6f:5c:b0:5d:e7:33:fd:66:c4:85:e2:77:0f:
85:5a:e1:7c:76:ee:af:c9:ed:e8:12:ce:d4:3e:d0:
0c:a9:a1:8b:22:92:5f:55:05:46:89:16:15:db:89:
35:aa:73:5f:46:3f:64:18:12:87:e9:30:ad:c4:97:
06:54:eb:fc:3d:20:2d:83:10:8f:60:b7:70:03:16:
75:e0:5e:d6:d1:f4:ae:dd:5b:b4:33:f2:a8:7f:13:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DA:CD:EA:21:4E:54:4F:3E:65:9F:30:02:B1:AC:CB:D0:A7:F3:0A
X509v3 Authority Key Identifier:
keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:59:bb:34:d2:09:e9:6b:9e:7e:d4:57:e1:fa:47:9b:68:e4:
ed:55:d3:8e:5e:c4:cc:4e:8b:6d:d3:d6:1b:d3:a3:f0:4d:4f:
57:5d:77:c9:c5:59:08:49:0a:a1:51:63:c1:ad:df:01:50:b4:
19:54:79:a4:e5:48:dd:df:f6:bb:58:34:44:1e:13:59:8c:bd:
fc:ef:39:6f:d3:10:07:41:89:99:bc:6a:6f:73:cf:f4:3e:47:
d2:90:e7:1a:6b:45:02:d2:79:61:c4:ed:2d:10:04:d7:7b:04:
ce:bf:31:6c:cb:ab:19:bf:46:93:08:77:02:c4:d9:81:da:91:
f6:72:15:c2:b3:ed:3c:2b:e5:6e:e8:57:c0:51:af:e1:c8:f4:
7c:05:23:40:f7:7c:db:ec:2a:ee:b7:0d:60:a7:ae:aa:e0:c4:
98:52:c9:5d:a2:61:69:8d:05:c7:b3:87:45:a9:5b:a2:2f:8f:
70:b7:65:44:5f:ee:2f:8c:ed:eb:0f:93:61:98:ee:80:84:7a:
ec:64:1a:8f:a2:55:ee:5c:c8:6e:1e:22:37:aa:dd:e4:6c:a7:
76:59:26:69:96:dc:b3:1a:58:42:51:42:0d:85:94:ec:44:4c:
49:d9:9d:bc:5c:75:be:f0:60:69:b0:a4:d2:f2:fe:71:e4:2f:
81:20:98:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYwNzYxMTAvBgNVBAUTKDQ3OEE0QkREMDExMjFEMUM2QjMzM0VDQzNFMjVCQTFB
ODg3MTk5QUEwHhcNMjYwNTEyMTc0NzE1WhcNMjYwNTE5MTc0NzE1WjAYMRYwFAYD
VQQDEw02YTAzNjdhMy1kOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1B31w72H7JailDrFdsVIc7PU2fRRw3zFAA1/XSK9I+oKrRFKMkAdtfWyAyOY
zWJi78g0kAV9lQSRNZYv3SAzFGgP/WV1JUqz3YlSlQ5AOLrwG2Y6KPtGt9GIqttM
HDWDOxfw/m6Z74kIIcavzjguPSghTYGq6/hW70dpV4awvOUl6fJuLkLkS2P5Iub4
w3E0g3OfmM4vSWeJ7j/iJ7Aebi5XlV0gNW9csF3nM/1mxIXidw+FWuF8du6vye3o
Es7UPtAMqaGLIpJfVQVGiRYV24k1qnNfRj9kGBKH6TCtxJcGVOv8PSAtgxCPYLdw
AxZ14F7W0fSu3Vu0M/KofxM1VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/azeoh
TlRPPmWfMAKxrMvQp/MKMB8GA1UdIwQYMBaAFEeKS90BEh0cazM+zD4luhqIcZmq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjA3Ni9BNDA4RjU4MkI5
MDQxMUU5QjFENTBCNDFDNEY5QUUwMi9SNHBMM1FFU0hSeHJNejdNUGlXNkdvaHht
YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I0cEwzUUVTSFJ4ck16N01QaVc2R29oeG1hby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjA3Ni9BNDA4RjU4MkI5MDQxMUU5QjFENTBCNDFDNEY5QUUwMi9SNHBMM1FFU0hS
eHJNejdNUGlXNkdvaHhtYW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGlm7NNIJ6WueftRX4fpHm2jk7VXTjl7EzE6LbdPWG9Oj8E1PV113ycVZCEkK
oVFjwa3fAVC0GVR5pOVI3d/2u1g0RB4TWYy9/O85b9MQB0GJmbxqb3PP9D5H0pDn
GmtFAtJ5YcTtLRAE13sEzr8xbMurGb9Gkwh3AsTZgdqR9nIVwrPtPCvlbuhXwFGv
4cj0fAUjQPd82+wq7rcNYKeuquDEmFLJXaJhaY0Fx7OHRalboi+PcLdlRF/uL4zt
6w+TYZjugIR67GQaj6JV7lzIbh4iN6rd5GyndlkmaZbcsxpYQlFCDYWU7ERMSdmd
vFx1vvBgabCk0vL+ceQvgSCYgA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:12:49 2026 by rpki-client