
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json)
Hash identifier: PSf4IQk7AFBVOWMaF24w7d6VQWKudVOj1zMVOzSQ2OI=
Subject key identifier: F0:60:A8:C7:AF:38:D6:99:C7:D6:40:AE:28:BD:E8:54:2B:4B:6D:F6
Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
Manifest number: A2
Signing time: Mon 11 May 2026 07:26:37 +0000
Manifest this update: Mon 11 May 2026 07:26:36 +0000
Manifest next update: Mon 18 May 2026 07:26:36 +0000
Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: 7swLWKJlsHVYBEJ5AnvKKXasSqdZnjiog08mzw0IB0M=)
2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: sLjeaSGa4LRSlSB8sQPoF/VbSZaMLTrPtakBzYE292w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Validity
Not Before: May 11 07:26:36 2026 GMT
Not After : May 18 07:26:36 2026 GMT
Subject: CN=6a0184ad-a143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:9c:a1:31:9b:4f:83:82:af:96:85:22:c8:
aa:2a:2e:4b:11:4e:ec:71:ef:ef:c0:bd:5c:df:5e:
2e:bc:ea:15:46:7e:29:e2:33:95:90:0e:46:7e:44:
c6:12:f5:52:8d:87:be:12:d8:74:30:8b:a3:cc:95:
c0:74:bf:30:aa:6f:a2:fe:95:19:72:6b:53:ab:fd:
f7:07:da:3d:ea:e1:eb:04:e5:b0:f6:7d:95:30:1a:
d7:4c:2a:c5:45:97:89:fa:94:cb:cc:d0:23:64:eb:
e5:9f:9a:33:c2:bc:ac:a7:85:fb:52:f3:1e:3f:18:
1c:84:72:41:ff:63:2e:a0:ff:8e:bb:94:ee:80:a9:
86:19:6f:56:f6:ec:c1:08:0a:45:57:4b:0a:a4:2e:
7e:4f:83:fe:8d:b8:20:e0:56:cd:64:65:8c:35:af:
16:70:9e:38:9b:f0:27:f5:83:ea:3b:49:01:a7:e6:
1b:06:ff:23:79:d2:45:a9:39:21:74:91:43:f8:6a:
18:e7:d6:cc:86:cd:ab:5f:14:30:10:e7:9e:dc:0c:
90:7a:d8:6e:1b:85:cd:a8:ce:10:24:fb:2a:35:5b:
d2:19:da:5b:b8:ab:f6:eb:30:75:c3:e4:4b:c9:d6:
60:c4:8e:81:c5:6f:29:7b:fb:ec:05:e6:45:3f:1e:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:60:A8:C7:AF:38:D6:99:C7:D6:40:AE:28:BD:E8:54:2B:4B:6D:F6
X509v3 Authority Key Identifier:
keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:7a:18:4e:43:fb:35:5c:2d:04:d1:0f:51:03:c6:55:b0:00:
42:31:31:ff:ac:0a:0f:03:4c:b5:d5:52:78:64:7e:a2:43:68:
5b:af:4a:ba:08:2e:1c:30:a8:1c:ae:c7:85:90:c0:1f:1b:83:
5e:b3:5b:ca:36:7a:e4:3d:25:77:94:32:d1:15:22:2a:89:df:
9a:75:6b:fa:d4:5c:98:0d:15:62:5d:e2:c5:92:9b:33:35:4e:
7b:32:d4:da:a9:d7:1c:4d:55:31:2e:ac:c5:d0:e5:fc:74:fe:
41:6c:5c:dd:3d:76:ed:e0:df:79:cf:17:bb:a2:94:6b:ef:8e:
19:53:93:ea:55:03:67:22:f2:bd:e4:56:65:d3:65:a6:fa:24:
38:9f:ed:37:27:56:bc:5c:73:12:7d:80:b0:85:ae:2c:45:9b:
e8:cc:ba:cd:78:1c:42:13:ae:b0:84:43:87:02:94:48:42:24:
fd:d4:0d:9c:2c:7a:77:ec:86:1a:d2:25:05:85:2b:93:f4:f8:
6d:89:41:7d:b1:4a:e2:79:be:c2:bc:59:3b:d0:62:8b:f8:a8:
97:07:eb:b6:0c:ae:16:ea:4f:57:f5:36:dc:31:4d:12:20:4b:
86:85:74:90:64:10:8c:d1:4d:8d:24:48:2d:81:4a:4c:05:5d:
43:b9:0a:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMzQUExMTAvBgNVBAUTKEY3RDZERTZFN0IyQUM3QkQ0NTBDNzcxNTg2M0U5Nzk5
NTUzODNFNEUwHhcNMjYwNTExMDcyNjM2WhcNMjYwNTE4MDcyNjM2WjAYMRYwFAYD
VQQDEw02YTAxODRhZC1hMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfWcoTGbT4OCr5aFIsiqKi5LEU7sce/vwL1c314uvOoVRn4p4jOVkA5GfkTG
EvVSjYe+Eth0MIujzJXAdL8wqm+i/pUZcmtTq/33B9o96uHrBOWw9n2VMBrXTCrF
RZeJ+pTLzNAjZOvln5ozwrysp4X7UvMePxgchHJB/2MuoP+Ou5TugKmGGW9W9uzB
CApFV0sKpC5+T4P+jbgg4FbNZGWMNa8WcJ44m/An9YPqO0kBp+YbBv8jedJFqTkh
dJFD+GoY59bMhs2rXxQwEOee3AyQethuG4XNqM4QJPsqNVvSGdpbuKv26zB1w+RL
ydZgxI6BxW8pe/vsBeZFPx7KvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBgqMev
ONaZx9ZArii96FQrS232MB8GA1UdIwQYMBaAFPfW3m57Kse9RQx3FYY+l5lVOD5O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNBQS81MkQ5QUQ0NjU5
NjcxMUYwOEM0MDc5MkNDNEY5QUUwMi85OWJlYm5zcXg3MUZESGNWaGo2WG1WVTRQ
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzNBQS81MkQ5QUQ0NjU5NjcxMUYwOEM0MDc5MkNDNEY5QUUwMi85OWJlYm5zcXg3
MUZESGNWaGo2WG1WVTRQazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAHoYTkP7NVwtBNEPUQPGVbAAQjEx/6wKDwNMtdVSeGR+okNoW69KugguHDCo
HK7HhZDAHxuDXrNbyjZ65D0ld5Qy0RUiKonfmnVr+tRcmA0VYl3ixZKbMzVOezLU
2qnXHE1VMS6sxdDl/HT+QWxc3T127eDfec8Xu6KUa++OGVOT6lUDZyLyveRWZdNl
pvokOJ/tNydWvFxzEn2AsIWuLEWb6My6zXgcQhOusIRDhwKUSEIk/dQNnCx6d+yG
GtIlBYUrk/T4bYlBfbFK4nm+wrxZO9Bii/iolwfrtgyuFupPV/U23DFNEiBLhoV0
kGQQjNFNjSRILYFKTAVdQ7kK4g==
-----END CERTIFICATE-----
Generated at Wed May 13 04:40:28 2026 by rpki-client