
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
File: 74sS4pnzyE0UvzVyXwLdxQOxLgE.mft (raw, json)
Hash identifier: xpl4FAPZ6+hiQTRWamt6UO0YsswqbwssTJobqQbp18E=
Subject key identifier: 10:74:3F:D4:16:27:5E:30:14:E4:90:69:60:72:B6:37:72:63:42:48
Authority key identifier: EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01
Certificate issuer: /CN=A91EC978/serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
Manifest number: 3A
Signing time: Wed 13 May 2026 08:44:44 +0000
Manifest this update: Wed 13 May 2026 08:44:44 +0000
Manifest next update: Wed 20 May 2026 08:44:44 +0000
Files and hashes: 1: 74sS4pnzyE0UvzVyXwLdxQOxLgE.crl (hash: KysMrNYTBLo1FUrHQMbw6Hh5LG3JGntOAlM2MXZYy4Y=)
2: F46C6AE2001311F1811932CE406F56BC.roa (hash: MxFfnouduq0AyvPx5Uzbe5lXPlmcgFB0L/5+2A+Av3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl
rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC978, serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
Validity
Not Before: May 13 08:44:44 2026 GMT
Not After : May 20 08:44:44 2026 GMT
Subject: CN=6a0439fc-b6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:6f:a7:29:1b:e6:ce:05:58:63:84:f8:58:
28:fb:4a:4e:8e:e6:0e:b6:8b:06:f1:c6:ab:4f:4a:
06:5a:0d:d0:ba:b8:e2:d9:fe:54:47:e7:95:5c:6c:
63:7c:85:8f:9c:bb:e9:ea:c5:aa:d7:9a:53:5b:77:
7a:c7:00:94:09:e9:4e:9c:f5:51:dd:81:23:cf:f7:
65:c1:f7:95:58:61:1d:3f:81:35:e4:ab:32:13:72:
78:36:a1:67:38:51:12:ae:7f:4c:71:2c:7b:f6:37:
da:71:ad:b7:b4:bd:bd:91:e9:ec:44:bf:99:36:4d:
f2:da:4d:66:1c:b9:42:bf:37:f8:c4:87:54:4b:3f:
d9:5c:92:ba:a0:6e:cc:26:1a:bc:f1:d7:db:df:29:
6b:a1:53:62:65:a2:da:5e:55:d4:f8:82:88:9e:32:
0b:7c:78:61:90:bb:78:61:a5:97:a2:61:77:41:66:
b5:67:b1:9c:42:ea:21:fd:dd:b2:d8:8d:d7:4c:90:
f2:16:6e:1d:b4:56:fc:ec:34:0e:f6:9e:73:5d:e3:
86:31:c1:a1:27:b2:e6:5c:13:8a:17:64:81:4d:6d:
17:ee:d2:5c:81:b0:32:34:37:37:e7:5b:55:28:b3:
57:57:c2:50:93:fc:f6:7e:85:2d:34:fc:49:8c:c0:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:3F:D4:16:27:5E:30:14:E4:90:69:60:72:B6:37:72:63:42:48
X509v3 Authority Key Identifier:
keyid:EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:37:81:74:ca:5c:12:13:d3:6d:20:84:6f:00:10:8c:f0:
df:bf:8a:c0:62:1e:79:f8:43:ec:59:52:b3:86:6f:41:9a:cb:
0e:28:83:93:64:fa:3c:4b:34:72:8b:16:71:5d:0d:0c:f0:cb:
47:fc:03:6d:77:a8:6a:1f:c8:a0:0d:e1:43:a1:97:a8:a7:50:
da:39:ee:42:f3:13:0c:9f:2b:7b:04:d4:57:53:39:35:96:e0:
0d:b2:02:0f:cb:76:c6:d9:39:f0:73:73:28:a0:86:9c:dd:8e:
95:e9:ce:e2:11:73:73:8e:8d:f6:b2:a5:68:5c:4a:de:07:46:
8a:02:79:b4:de:7a:81:d0:b7:e9:15:8d:ee:76:f8:7e:e7:a8:
e4:24:00:85:e3:31:a2:4f:04:3e:eb:65:71:7f:de:ea:88:c4:
1f:b9:a9:33:db:a8:cf:ca:1d:fa:be:3b:31:88:9c:1b:b9:ec:
cb:ac:52:80:eb:64:c8:8a:17:6e:57:70:be:09:1d:67:c8:65:
bd:ef:43:c4:ba:d4:58:96:08:85:61:80:84:be:12:c1:96:bb:
60:4d:cd:bd:e9:58:d4:e6:4b:bd:27:ef:f9:ea:bf:60:77:28:
34:9f:08:d6:fd:87:be:de:8f:36:60:9b:73:86:81:b8:05:3b:
ef:aa:b4:03
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
Qzk3ODExMC8GA1UEBRMoRUY4QjEyRTI5OUYzQzg0RDE0QkYzNTcyNUYwMkREQzUw
M0IxMkUwMTAeFw0yNjA1MTMwODQ0NDRaFw0yNjA1MjAwODQ0NDRaMBgxFjAUBgNV
BAMTDTZhMDQzOWZjLWI2ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCo3m+nKRvmzgVYY4T4WCj7Sk6O5g62iwbxxqtPSgZaDdC6uOLZ/lRH55VcbGN8
hY+cu+nqxarXmlNbd3rHAJQJ6U6c9VHdgSPP92XB95VYYR0/gTXkqzITcng2oWc4
URKuf0xxLHv2N9pxrbe0vb2R6exEv5k2TfLaTWYcuUK/N/jEh1RLP9lckrqgbswm
Grzx19vfKWuhU2JlotpeVdT4goieMgt8eGGQu3hhpZeiYXdBZrVnsZxC6iH93bLY
jddMkPIWbh20VvzsNA72nnNd44YxwaEnsuZcE4oXZIFNbRfu0lyBsDI0NzfnW1Uo
s1dXwlCT/PZ+hS00/EmMwPCbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEHQ/1BYn
XjAU5JBpYHK2N3JjQkgwHwYDVR0jBBgwFoAU74sS4pnzyE0UvzVyXwLdxQOxLgEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOTc4L0M1MjZFNjBFMDAx
MzExRjFCQzM4QUJDQzQwNkY1NkJDLzc0c1M0cG56eUUwVXZ6VnlYd0xkeFFPeExn
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNzRzUzRwbnp5RTBVdnpWeVh3TGR4UU94TGdFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD
OTc4L0M1MjZFNjBFMDAxMzExRjFCQzM4QUJDQzQwNkY1NkJDLzc0c1M0cG56eUUw
VXZ6VnlYd0xkeFFPeExnRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5ADeBdMpcEhPTbSCEbwAQjPDfv4rAYh55+EPsWVKzhm9BmssOKIOTZPo8SzRy
ixZxXQ0M8MtH/ANtd6hqH8igDeFDoZeop1DaOe5C8xMMnyt7BNRXUzk1luANsgIP
y3bG2Tnwc3MooIac3Y6V6c7iEXNzjo32sqVoXEreB0aKAnm03nqB0LfpFY3udvh+
56jkJACF4zGiTwQ+62Vxf97qiMQfuakz26jPyh36vjsxiJwbuezLrFKA62TIihdu
V3C+CR1nyGW970PEutRYlgiFYYCEvhLBlrtgTc296VjU5ku9J+/56r9gdyg0nwjW
/Ye+3o82YJtzhoG4BTvvqrQD
-----END CERTIFICATE-----
Generated at Wed May 13 12:11:44 2026 by rpki-client