
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json)
Hash identifier: xIRKew+YQMa/mRW1WtsCtJoEIQ6DAJfXglIGGmkG8qM=
Subject key identifier: 4F:BC:1A:BE:FE:24:C9:14:AF:1F:18:05:C1:A8:62:4F:8E:95:56:83
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial: 093A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
Manifest number: 08DD
Signing time: Tue 12 May 2026 20:34:24 +0000
Manifest this update: Tue 12 May 2026 20:34:23 +0000
Manifest next update: Tue 19 May 2026 20:34:23 +0000
Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: SjQ4vjuWCFJ82XkIEAAv+XMin39wfD9/QyXYqdmU5vs=)
2: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: M1VJgF+x/Um3lhU3p8O1xPTE+txLupRts9yRpHKZudw=)
3: 02BCB71ABF0411F097C9AB09C4F9AE02.roa (hash: YRs268il8jeL4kWOWO8b3QB1BLS7s3nyXufDu9/6sJo=)
4: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (hash: jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=)
5: 46D8E036BED211F093382E71C4F9AE02.roa (hash: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=)
6: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: LxOE3iZIwIwbWUQyl4az6q7pcoRLSjG1pe6jKOrSfF0=)
7: F8E5E56ABA3311F097F3633AC4F9AE02.roa (hash: HAqcjovZJYFVqZGaHRtS4+R51e9Xtry3aapf5JCY8eI=)
8: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: mg17sUTdYtMBrbbm2kbt75lKpJ892MbQTYVPcd6BdmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2362 (0x93a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Validity
Not Before: May 12 20:34:23 2026 GMT
Not After : May 19 20:34:23 2026 GMT
Subject: CN=6a038ed0-9d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:6f:3a:ab:1c:4b:da:25:da:6c:1c:20:77:
ce:8d:93:8d:79:ef:24:c6:ef:c3:27:8d:45:1f:25:
c3:9a:3d:ce:ab:b6:ff:71:52:e2:48:34:0c:52:b1:
7c:59:1b:40:f5:56:5b:5f:87:68:57:c8:7d:08:c2:
c2:06:bb:3d:d2:25:66:97:65:e5:dd:da:42:92:c8:
e7:c2:81:64:f1:ac:a6:4c:2b:2c:c2:fc:01:d7:b1:
57:40:db:1c:6f:7f:65:95:00:4a:80:15:9b:b7:ba:
9e:aa:d3:6c:c6:d9:7f:1b:0a:a8:37:90:30:f5:dd:
fc:2b:f9:61:e6:06:4f:4e:94:ed:09:aa:5b:3d:42:
73:bb:de:75:32:ff:0b:fc:07:d6:c3:a7:88:31:9d:
45:89:8b:7a:33:f9:d0:fb:1e:ff:25:6d:93:82:16:
f0:91:36:7a:bd:00:f5:75:13:e8:db:01:ff:92:ff:
55:24:60:66:dd:b0:0c:b6:ca:34:7e:55:c0:31:7e:
e1:2b:b1:f2:4a:6b:12:2d:bb:f7:6d:dc:ce:9e:3f:
0e:47:02:ba:dd:b9:b3:6a:fb:22:f0:7f:bb:37:b1:
ac:35:5e:25:29:b9:61:97:3e:6d:be:8c:0d:c6:bf:
88:b6:04:39:c8:af:19:7e:52:9c:cb:5a:c4:fc:ad:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:1A:BE:FE:24:C9:14:AF:1F:18:05:C1:A8:62:4F:8E:95:56:83
X509v3 Authority Key Identifier:
keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:4a:cc:ea:0e:f9:9a:2b:d1:57:24:60:3a:84:fd:36:70:0a:
16:6c:11:4c:2d:f3:f6:16:33:a3:01:23:d6:bc:22:3d:3c:f3:
26:28:bd:05:23:b0:07:58:c7:f3:d6:22:83:04:85:82:76:17:
87:f6:bf:4a:01:48:2e:dd:93:a3:15:e6:65:77:13:d9:7a:d3:
c0:ad:23:97:3b:26:90:ea:7d:57:14:dc:0a:32:73:d6:1d:e3:
3f:c1:72:c7:27:84:fb:89:96:26:da:73:f6:0c:8f:e1:89:3f:
19:9c:89:c0:93:dc:04:ce:ed:27:34:e7:d7:82:c0:d3:95:14:
ee:e8:68:76:90:25:7f:00:00:70:1f:9d:7c:d9:35:d2:f6:a5:
1e:f4:d7:90:65:91:b7:06:fd:aa:9c:f3:c2:e0:b8:8f:40:fb:
01:f6:1d:e2:b7:c0:76:bb:d1:92:c2:ff:a3:40:ae:56:85:df:
ca:78:91:84:4c:63:73:8a:94:1a:92:e4:d0:c7:e0:fd:4f:ce:
b5:bb:eb:5f:23:14:85:36:a5:5e:5f:a1:4d:50:e5:33:73:cc:
19:be:95:4e:26:07:c8:7b:57:9e:97:29:fb:de:8b:e3:df:82:
f3:c5:49:e7:4a:da:76:b1:80:f8:8f:7c:30:7d:43:98:f7:ab:
9d:66:b3:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB
MTRERjUxMkIwHhcNMjYwNTEyMjAzNDIzWhcNMjYwNTE5MjAzNDIzWjAYMRYwFAYD
VQQDEw02YTAzOGVkMC05ZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqBRvOqscS9ol2mwcIHfOjZONee8kxu/DJ41FHyXDmj3Oq7b/cVLiSDQMUrF8
WRtA9VZbX4doV8h9CMLCBrs90iVml2Xl3dpCksjnwoFk8aymTCsswvwB17FXQNsc
b39llQBKgBWbt7qeqtNsxtl/GwqoN5Aw9d38K/lh5gZPTpTtCapbPUJzu951Mv8L
/AfWw6eIMZ1FiYt6M/nQ+x7/JW2TghbwkTZ6vQD1dRPo2wH/kv9VJGBm3bAMtso0
flXAMX7hK7HySmsSLbv3bdzOnj8ORwK63bmzavsi8H+7N7GsNV4lKblhlz5tvowN
xr+ItgQ5yK8ZflKcy1rE/K2RvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+8Gr7+
JMkUrx8YBcGoYk+OlVaDMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1
REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0
MnloWWhyMXhISGloVGZVU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhErM6g75mivRVyRgOoT9NnAKFmwRTC3z9hYzowEj1rwiPTzzJii9BSOwB1jH
89YigwSFgnYXh/a/SgFILt2ToxXmZXcT2XrTwK0jlzsmkOp9VxTcCjJz1h3jP8Fy
xyeE+4mWJtpz9gyP4Yk/GZyJwJPcBM7tJzTn14LA05UU7uhodpAlfwAAcB+dfNk1
0valHvTXkGWRtwb9qpzzwuC4j0D7AfYd4rfAdrvRksL/o0CuVoXfyniRhExjc4qU
GpLk0Mfg/U/OtbvrXyMUhTalXl+hTVDlM3PMGb6VTiYHyHtXnpcp+96L49+C88VJ
50radrGA+I98MH1DmPernWazHA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:35:05 2026 by rpki-client