
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
File: mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json)
Hash identifier: OsyMLAfrRLE6Z9biQsLwslYV7nXvsCCJe6azQUGPj9w=
Subject key identifier: BF:8B:4C:06:0D:13:8A:7D:0B:2F:E5:A1:F5:AB:91:93:9E:40:06:F5
Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
Certificate issuer: /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
Manifest number: 47
Signing time: Wed 13 May 2026 08:32:51 +0000
Manifest this update: Wed 13 May 2026 08:32:51 +0000
Manifest next update: Wed 20 May 2026 08:32:51 +0000
Files and hashes: 1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: 7yibA4X/2JjlLCUc60cAP3dGC4vZ7cgu9YaZVKo1Tsw=)
2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: 18c0IjqREvvCbFh1OonuDqpoKVFbN0WBr8JimtNfp4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Validity
Not Before: May 13 08:32:51 2026 GMT
Not After : May 20 08:32:51 2026 GMT
Subject: CN=6a043733-9a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:dc:6b:d3:cf:6b:d1:7a:10:31:9d:84:1c:
d9:5f:d8:37:6f:33:71:7d:83:30:58:04:76:18:25:
51:85:a6:e7:8c:f5:0c:cc:ad:03:33:f4:70:a9:6a:
c2:f8:83:0a:0a:3b:dd:90:17:c0:b6:5c:3a:24:6e:
fe:d8:a5:a6:2a:06:60:ce:85:eb:e3:58:38:7d:f1:
ca:d6:ee:a9:70:35:06:a1:3a:fc:d3:0a:c8:32:ce:
9e:02:13:fe:e5:d9:49:80:c4:f7:ff:8d:2c:c8:b6:
a8:dc:24:c7:a8:b5:3c:0a:eb:07:ff:32:e8:e4:1f:
49:c1:ed:cd:d6:a0:53:37:9e:39:c9:7d:22:49:57:
e3:81:18:74:2e:e0:65:50:94:37:1d:4b:5f:bd:35:
99:65:e9:9d:33:bf:af:d1:ff:71:4b:c9:45:27:ec:
9f:57:bc:c5:3e:b8:4b:9a:c2:8d:af:94:58:99:b3:
59:a7:8d:93:02:f5:cc:e8:90:8d:d7:4b:01:59:66:
47:7d:a4:86:ae:1c:ff:c1:84:b7:fb:0e:c1:58:71:
12:aa:4b:a9:2c:f7:63:8d:05:88:33:55:52:8c:3f:
79:98:c6:2c:6b:61:d6:e5:20:69:d7:e0:c6:4a:8b:
29:ae:4e:09:17:18:b3:45:f8:85:83:ca:f9:e0:39:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:4C:06:0D:13:8A:7D:0B:2F:E5:A1:F5:AB:91:93:9E:40:06:F5
X509v3 Authority Key Identifier:
keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:68:15:a2:af:a6:6a:26:91:d7:fe:47:d0:5d:4c:2a:81:bf:
c2:e6:43:06:dd:83:e0:29:ed:48:2c:62:e5:44:ba:db:4e:15:
67:ef:42:a2:36:e1:a3:be:6d:be:9c:6e:ad:b4:21:a0:c4:e7:
4d:23:2d:3c:3e:43:31:3a:2b:fa:35:72:02:bd:32:91:0c:95:
e8:32:76:3a:a0:0e:85:6d:53:91:05:2b:1d:3b:2d:ae:3c:b3:
64:6a:8b:c4:a3:d5:76:6a:11:03:d8:70:36:26:eb:67:43:13:
30:c3:d4:40:5d:29:6b:55:55:38:9b:9d:9e:00:be:54:3c:88:
49:96:d7:39:c1:42:88:cf:a7:f6:cb:1b:c5:27:88:b6:8e:d2:
03:51:3e:e7:9d:2d:74:f6:03:81:d4:30:d8:51:8e:91:05:d2:
82:15:55:fc:3a:b4:56:53:4f:e0:e0:b5:37:6a:e2:77:be:32:
6c:8c:3d:75:bf:c3:63:ba:d3:52:ec:0f:ce:7f:d1:b4:8e:49:
12:73:3d:98:89:18:85:23:60:52:b8:c0:91:c6:51:3e:9d:38:
42:c8:af:51:0a:86:be:a4:a9:dd:4a:6d:2f:0a:56:cf:06:2e:
49:e1:c5:03:9d:76:0e:d9:1f:73:ca:8d:4a:c0:32:a7:3b:6c:
16:c4:fa:8b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QTg1MDExMC8GA1UEBRMoOTk1RDcwQTk3RjU2QjJFMDAwQkFDQTZFQ0E0MzczRTYy
MDdCQjk4RDAeFw0yNjA1MTMwODMyNTFaFw0yNjA1MjAwODMyNTFaMBgxFjAUBgNV
BAMTDTZhMDQzNzMzLTlhM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8mNxr089r0XoQMZ2EHNlf2DdvM3F9gzBYBHYYJVGFpueM9QzMrQMz9HCpasL4
gwoKO92QF8C2XDokbv7YpaYqBmDOhevjWDh98crW7qlwNQahOvzTCsgyzp4CE/7l
2UmAxPf/jSzItqjcJMeotTwK6wf/MujkH0nB7c3WoFM3njnJfSJJV+OBGHQu4GVQ
lDcdS1+9NZll6Z0zv6/R/3FLyUUn7J9XvMU+uEuawo2vlFiZs1mnjZMC9czokI3X
SwFZZkd9pIauHP/BhLf7DsFYcRKqS6ks92ONBYgzVVKMP3mYxixrYdblIGnX4MZK
iymuTgkXGLNF+IWDyvngOa85AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv4tMBg0T
in0LL+Wh9auRk55ABvUwHwYDVR0jBBgwFoAUmV1wqX9WsuAAuspuykNz5iB7uY0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODUwLzJEQkM0OTQ4RUQy
NzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlXc3VBQXVzcHV5a056NWlCN3VZ
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbVYxd3FYOVdzdUFBdXNwdXlrTno1aUI3dVkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB
ODUwLzJEQkM0OTQ4RUQyNzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlXc3VB
QXVzcHV5a056NWlCN3VZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5aBWir6ZqJpHX/kfQXUwqgb/C5kMG3YPgKe1ILGLlRLrbThVn70KiNuGjvm2+
nG6ttCGgxOdNIy08PkMxOiv6NXICvTKRDJXoMnY6oA6FbVORBSsdOy2uPLNkaovE
o9V2ahED2HA2JutnQxMww9RAXSlrVVU4m52eAL5UPIhJltc5wUKIz6f2yxvFJ4i2
jtIDUT7nnS109gOB1DDYUY6RBdKCFVX8OrRWU0/g4LU3auJ3vjJsjD11v8NjutNS
7A/Of9G0jkkScz2YiRiFI2BSuMCRxlE+nThCyK9RCoa+pKndSm0vClbPBi5J4cUD
nXYO2R9zyo1KwDKnO2wWxPqL
-----END CERTIFICATE-----
Generated at Wed May 13 16:06:52 2026 by rpki-client