
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier: V0as4SYAT8MWqMXDQ/6wePJCACVTLqTgYFg85dRgi1I=
Subject key identifier: FA:15:94:74:77:DD:FD:44:48:78:CF:C1:38:2D:1E:26:D5:F3:CB:0E
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 121D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number: 0DAC
Signing time: Tue 12 May 2026 20:17:30 +0000
Manifest this update: Tue 12 May 2026 20:17:30 +0000
Manifest next update: Tue 19 May 2026 20:17:30 +0000
Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: JsFHRM/HWeTaGB47Pf27Ho94tS9rNmiIayUi8KPrX9U=)
2: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: nYeFBOsuOa+AhwOe+QjEdtDHW5x1Jxsma/8+kniQAXk=)
3: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: 9kr7YRweIjs9sYz5LEa5FyxtFuVknS+hpV3R4t44fNs=)
4: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: B6cIG1afbkG3vI1TqciNvobQif79q4lJ3Y9WuIuXm0U=)
5: A173B894112711F0845DF16FC4F9AE02.roa (hash: G6+GS22xNwr0Km9vx99x7wOcMdZwDFcolP4ZXOu6yf4=)
6: B0F927B62E5111F1BD10F65598833773.roa (hash: em5iUJZEKtL0Axv1zyPX1IRFywiRSoynFUcbjn7CkRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4637 (0x121d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: May 12 20:17:30 2026 GMT
Not After : May 19 20:17:30 2026 GMT
Subject: CN=6a038ada-f529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:b4:85:21:f0:37:23:a7:b0:45:5c:81:72:
a4:70:53:fb:ad:39:a8:3f:5f:be:ea:5a:a8:0e:b8:
4a:a2:bf:f1:af:9d:2f:f3:d2:3e:0c:db:3e:de:72:
06:78:9e:a6:04:42:a0:12:4e:07:7f:7f:f3:4c:97:
15:77:8e:d9:a7:07:67:f3:45:a2:5f:51:18:48:37:
f1:da:81:0f:ec:90:70:17:00:57:e9:c0:99:c3:cf:
26:c8:6c:aa:5d:96:a1:82:b0:1b:8f:2b:8b:78:5d:
a9:98:fa:a4:c7:77:b6:49:df:90:c6:65:c6:50:15:
d6:f1:f0:3e:8d:0b:ec:b7:4b:2f:05:1e:77:b7:2f:
c8:36:4d:72:d0:10:9c:61:56:77:ba:e3:7d:e3:86:
f3:5d:e7:e4:fe:6c:0d:35:ad:f5:35:77:da:15:e0:
4f:b9:e4:2b:ee:1a:be:81:02:ec:70:d9:42:50:57:
da:4d:a9:e4:51:bc:4d:27:1e:90:4f:d1:ce:13:18:
66:92:ef:15:b4:44:aa:1b:8c:b3:60:91:e6:dc:e8:
68:03:23:b0:f2:c9:4c:0b:d3:09:7f:43:f4:6e:af:
3f:c7:02:1e:f7:9d:37:15:37:76:ee:c3:ea:47:8b:
41:78:1c:57:82:a6:31:5e:47:a8:ff:15:f5:1a:37:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:94:74:77:DD:FD:44:48:78:CF:C1:38:2D:1E:26:D5:F3:CB:0E
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:4a:57:5d:b6:2f:bf:63:69:33:f2:5b:80:47:5e:86:27:
cd:46:d7:b1:61:1f:c5:04:3f:83:9d:74:0e:72:1a:21:23:3e:
5d:27:f5:fb:e3:61:56:b9:1a:d7:fc:95:97:b2:c4:4a:09:cc:
5b:35:e6:d6:0b:65:90:15:d6:14:87:af:6a:59:6a:fb:86:4e:
a4:16:94:d2:3c:5d:f0:1c:37:3f:c2:36:59:5c:be:c4:35:89:
9c:f2:2a:c7:75:fa:7c:2e:5c:93:94:62:5c:44:38:ef:e3:82:
48:15:01:53:0c:56:2d:aa:f9:03:d5:45:d3:4d:ce:28:e0:01:
be:4c:96:34:10:6d:f6:f2:12:82:95:dd:4a:d9:5a:bb:01:1a:
ac:8b:4c:81:a6:ce:de:f8:5f:38:00:50:f3:ee:1e:f6:38:52:
c2:33:96:bd:51:14:8a:22:e5:35:ff:4f:69:fe:5c:0c:50:9a:
9d:63:bd:29:e0:b2:6f:b2:f6:c3:40:05:02:1a:b1:92:ea:fe:
95:1f:dc:e7:ec:a9:d5:bc:8d:67:d6:a0:df:de:7e:84:98:db:
27:0f:f1:b5:be:a0:da:b2:cc:cb:07:0a:c8:b2:15:c4:51:73:
4a:51:bd:24:62:8d:24:79:61:a9:2b:8f:36:c3:35:82:43:5a:
c9:9e:fe:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjYwNTEyMjAxNzMwWhcNMjYwNTE5MjAxNzMwWjAYMRYwFAYD
VQQDEw02YTAzOGFkYS1mNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjHe0hSHwNyOnsEVcgXKkcFP7rTmoP1++6lqoDrhKor/xr50v89I+DNs+3nIG
eJ6mBEKgEk4Hf3/zTJcVd47Zpwdn80WiX1EYSDfx2oEP7JBwFwBX6cCZw88myGyq
XZahgrAbjyuLeF2pmPqkx3e2Sd+QxmXGUBXW8fA+jQvst0svBR53ty/INk1y0BCc
YVZ3uuN944bzXefk/mwNNa31NXfaFeBPueQr7hq+gQLscNlCUFfaTankUbxNJx6Q
T9HOExhmku8VtESqG4yzYJHm3OhoAyOw8slMC9MJf0P0bq8/xwIe9503FTd27sPq
R4tBeBxXgqYxXkeo/xX1GjdOxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoVlHR3
3f1ESHjPwTgtHibV88sOMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjEzNC81N0IzRTBCQ0MyQTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlH
eUhMamlBV3haUXRmaUNkdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe9pKV122L79jaTPyW4BHXoYnzUbXsWEfxQQ/g510DnIaISM+XSf1++NhVrka
1/yVl7LESgnMWzXm1gtlkBXWFIevallq+4ZOpBaU0jxd8Bw3P8I2WVy+xDWJnPIq
x3X6fC5ck5RiXEQ47+OCSBUBUwxWLar5A9VF003OKOABvkyWNBBt9vISgpXdStla
uwEarItMgabO3vhfOABQ8+4e9jhSwjOWvVEUiiLlNf9Paf5cDFCanWO9KeCyb7L2
w0AFAhqxkur+lR/c5+yp1byNZ9ag395+hJjbJw/xtb6g2rLMywcKyLIVxFFzSlG9
JGKNJHlhqSuPNsM1gkNayZ7+Kw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:29:20 2026 by rpki-client