
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json)
Hash identifier: JA9Nq5WS4m7e2N41+RGkOtpMUxFfuhBQGnE8XjKMQM8=
Subject key identifier: 27:20:A8:FF:CB:66:68:48:1C:60:CE:C6:6A:0F:FD:A6:23:00:56:50
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial: 041C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
Manifest number: 040C
Signing time: Wed 13 May 2026 00:32:18 +0000
Manifest this update: Wed 13 May 2026 00:32:18 +0000
Manifest next update: Wed 20 May 2026 00:32:18 +0000
Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: rJzSCp93WkR6v5MNoTYf0N6NUpIxWw7P7zGJ6AKzbME=)
2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: M18r22Dfi6nMP8Zm1Hu9fqPiSXgEwNJEQtY8GIZmgdA=)
3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: FKnTP9sIRlwzNOVjIzWeUAaLIjQhiB2MOeVMrVthOl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1052 (0x41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Validity
Not Before: May 13 00:32:18 2026 GMT
Not After : May 20 00:32:18 2026 GMT
Subject: CN=6a03c692-6760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:87:dc:7d:f8:8b:d9:2c:ce:f3:e9:bb:c0:
02:c6:4c:78:17:5d:5f:90:6f:fb:94:af:76:6a:d4:
9b:74:a9:b0:b8:2d:91:71:e6:49:c6:d8:ae:e8:90:
46:9d:22:08:da:e9:d4:5a:b0:07:15:e8:ee:60:b3:
f1:2e:51:5e:15:2c:48:dc:a9:ac:1b:92:bf:76:b5:
bf:20:66:e9:21:da:d2:40:c9:d4:ed:e7:b4:f5:d1:
65:36:61:20:fb:2a:fe:e5:37:98:b4:9d:0d:3f:03:
04:e8:7a:1b:b9:53:54:48:11:90:a5:1b:2f:bf:89:
0c:aa:fe:10:b1:d2:58:ad:8a:53:6d:89:0d:10:c9:
12:5b:33:55:13:c4:ee:0e:d6:bc:dc:a5:fb:ba:d4:
c1:f8:d8:4b:e6:d3:70:30:cf:14:d2:0d:ed:cf:ab:
08:e9:ba:1a:a7:21:e6:c9:84:7c:d5:42:ee:b9:ff:
1c:b0:2c:ec:d6:dc:46:f9:4e:c0:55:a5:05:aa:17:
31:f7:a7:ea:56:74:81:1e:8c:c6:c0:4b:7e:9d:33:
b0:30:0a:0a:60:b3:81:bf:fe:c4:e8:79:7e:34:3b:
d1:ef:9b:5f:5f:b6:ed:96:e3:72:63:ca:dd:0a:25:
55:91:29:63:25:f5:f8:2b:e3:09:d1:e8:c9:20:95:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:A8:FF:CB:66:68:48:1C:60:CE:C6:6A:0F:FD:A6:23:00:56:50
X509v3 Authority Key Identifier:
keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:62:d2:60:10:1f:ab:54:81:d9:4d:e3:96:48:f6:3a:20:9f:
2e:4b:90:b1:1f:40:22:7a:be:24:99:16:01:c9:e8:82:0a:14:
53:57:05:99:7d:09:e8:ba:6e:99:10:9c:bf:f6:0d:82:4c:7f:
eb:f7:2b:d5:7d:2c:10:df:4c:7d:5a:52:53:c6:da:82:e4:7c:
06:40:86:9a:de:ce:6e:b4:78:af:6b:77:e0:cb:52:b1:fe:35:
59:27:51:34:bc:52:e1:9b:c7:d2:51:e2:f6:d0:ed:01:c8:98:
86:6f:2f:75:3b:29:ca:27:28:a3:3d:6a:44:83:57:be:d4:59:
d6:63:f6:2e:0f:0f:49:3b:b3:98:de:1d:a7:fd:3b:93:54:99:
df:3e:a1:d4:7e:27:77:c1:54:cc:b5:34:72:17:6b:c9:42:a2:
dc:84:77:bd:96:e0:76:90:96:d0:70:70:9a:97:eb:b1:d5:00:
03:f6:c7:f0:84:1c:46:f5:bb:9f:a1:32:d6:a1:5e:db:02:32:
0a:40:c7:bb:73:bb:31:ee:eb:83:f6:d5:28:08:c0:a0:23:1c:
5d:1b:ed:b7:a6:d6:2a:36:6a:8d:0d:7b:02:37:ab:aa:34:47:
50:31:b3:5a:da:dd:99:5f:e6:05:8e:0c:f6:e9:50:e3:78:cb:
a4:d7:ca:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4
Mjc5ODE0QTkwHhcNMjYwNTEzMDAzMjE4WhcNMjYwNTIwMDAzMjE4WjAYMRYwFAYD
VQQDEw02YTAzYzY5Mi02NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAny2H3H34i9kszvPpu8ACxkx4F11fkG/7lK92atSbdKmwuC2RceZJxtiu6JBG
nSII2unUWrAHFejuYLPxLlFeFSxI3KmsG5K/drW/IGbpIdrSQMnU7ee09dFlNmEg
+yr+5TeYtJ0NPwME6HobuVNUSBGQpRsvv4kMqv4QsdJYrYpTbYkNEMkSWzNVE8Tu
Dta83KX7utTB+NhL5tNwMM8U0g3tz6sI6boapyHmyYR81ULuuf8csCzs1txG+U7A
VaUFqhcx96fqVnSBHozGwEt+nTOwMAoKYLOBv/7E6Hl+NDvR75tfX7btluNyY8rd
CiVVkSljJfX4K+MJ0ejJIJXVpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcgqP/L
ZmhIHGDOxmoP/aYjAFZQMB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2
NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO
SUoyMFBjYUEtM2lDZVlGS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOWLSYBAfq1SB2U3jlkj2OiCfLkuQsR9AInq+JJkWAcnoggoUU1cFmX0J6Lpu
mRCcv/YNgkx/6/cr1X0sEN9MfVpSU8baguR8BkCGmt7ObrR4r2t34MtSsf41WSdR
NLxS4ZvH0lHi9tDtAciYhm8vdTspyicooz1qRINXvtRZ1mP2Lg8PSTuzmN4dp/07
k1SZ3z6h1H4nd8FUzLU0chdryUKi3IR3vZbgdpCW0HBwmpfrsdUAA/bH8IQcRvW7
n6Ey1qFe2wIyCkDHu3O7Me7rg/bVKAjAoCMcXRvtt6bWKjZqjQ17AjerqjRHUDGz
WtrdmV/mBY4M9ulQ43jLpNfKAQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:29:10 2026 by rpki-client