
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier: IBVRNeIBLmkawKxazk8DQWj/csQC6cirzmNv+aMVc3Y=
Subject key identifier: 7E:82:A2:6C:47:0B:18:93:AB:1F:6B:43:50:FC:FD:BD:1C:04:C3:D1
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial: 11E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number: 11CC
Signing time: Tue 12 May 2026 17:12:36 +0000
Manifest this update: Tue 12 May 2026 17:12:36 +0000
Manifest next update: Tue 19 May 2026 17:12:36 +0000
Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: 7fN/vImOgpAmEOZYrzg1aCrhBWOSBpRZbI8ERcOY2O4=)
2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4582 (0x11e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Validity
Not Before: May 12 17:12:36 2026 GMT
Not After : May 19 17:12:36 2026 GMT
Subject: CN=6a035f84-00e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4e:0d:c5:e2:f2:6f:fc:c7:34:8b:ee:90:3f:
5f:7e:9b:43:8e:09:ef:fb:59:8b:c3:a3:14:37:79:
4f:bf:44:1e:34:ab:31:e1:13:80:cb:d5:12:7e:7c:
04:d6:c9:d4:33:35:8b:93:b4:79:97:14:17:59:b8:
2c:28:97:fc:32:bf:63:6b:2b:df:38:bb:b1:23:4e:
49:b2:2b:06:9c:e0:ec:04:37:da:ad:9f:2d:2d:12:
ad:bf:c9:2d:c2:93:61:a6:6d:31:2b:a8:c2:5e:cf:
26:a2:6d:ab:1b:f1:60:94:ca:18:58:fd:4b:6f:ec:
15:ae:cf:cb:28:93:9b:70:82:5f:2e:d2:68:9d:2c:
5d:a3:e1:48:bc:56:1a:c6:00:84:60:ea:92:75:95:
3d:6d:8e:fc:3c:1e:99:fb:7b:85:4e:5b:c8:56:86:
c5:c5:17:76:dd:17:6b:2f:f6:df:61:b8:11:bb:ff:
04:34:7c:d1:3f:75:33:ac:88:df:35:61:c9:1d:00:
f5:05:ff:ca:45:9e:2c:8d:21:29:57:02:63:98:c0:
d8:05:3d:60:a1:0e:df:3e:80:77:0d:51:88:0b:01:
03:65:60:5d:42:46:50:00:e9:53:2f:b8:15:5f:93:
3e:98:24:60:46:c1:d1:06:6d:b5:83:f1:4b:43:cd:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:82:A2:6C:47:0B:18:93:AB:1F:6B:43:50:FC:FD:BD:1C:04:C3:D1
X509v3 Authority Key Identifier:
keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:66:4c:e6:7a:14:3b:6e:3a:1a:90:11:1c:82:92:c8:03:d7:
e0:14:b3:65:ab:d2:30:68:13:3e:20:b6:27:17:ee:2c:85:29:
db:d0:41:46:05:3e:58:27:61:62:93:35:2b:79:86:57:79:2b:
d5:d3:ee:b3:07:1c:5b:6b:45:bf:e4:f1:ff:33:01:68:b1:b3:
f8:bb:1b:5a:2d:d4:a8:bd:58:d9:79:fc:0c:41:2f:04:16:5f:
4e:e0:4a:a6:60:78:10:18:fd:a3:65:60:9a:5c:04:6b:f4:2b:
81:5f:0d:17:8b:9f:16:04:32:f5:d7:e5:6d:f9:68:2a:7d:a8:
6a:76:44:32:1c:98:0d:a2:56:23:11:19:07:ca:ba:d8:fc:0c:
72:4e:b7:17:86:3b:90:4e:95:68:47:93:de:a3:89:de:c0:cb:
5a:a7:2d:bb:04:89:6b:36:88:f9:03:7c:fd:1c:53:5d:77:2a:
65:1d:27:e3:52:f6:2a:d0:0b:fa:2a:58:e8:65:26:41:71:3a:
bf:8a:31:b3:0b:c4:49:99:b8:8c:36:44:8b:e2:d1:b7:ce:09:
a8:b9:b2:cd:76:20:b1:95:3b:ab:26:8a:3a:1a:28:ea:62:f3:
89:c6:c8:1f:85:6f:95:3e:7e:5c:ce:d6:24:f4:ed:50:4d:10:
d0:23:c6:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1
RDQ0RDFGMDgwHhcNMjYwNTEyMTcxMjM2WhcNMjYwNTE5MTcxMjM2WjAYMRYwFAYD
VQQDEw02YTAzNWY4NC0wMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7k4NxeLyb/zHNIvukD9ffptDjgnv+1mLw6MUN3lPv0QeNKsx4ROAy9USfnwE
1snUMzWLk7R5lxQXWbgsKJf8Mr9jayvfOLuxI05JsisGnODsBDfarZ8tLRKtv8kt
wpNhpm0xK6jCXs8mom2rG/FglMoYWP1Lb+wVrs/LKJObcIJfLtJonSxdo+FIvFYa
xgCEYOqSdZU9bY78PB6Z+3uFTlvIVobFxRd23RdrL/bfYbgRu/8ENHzRP3UzrIjf
NWHJHQD1Bf/KRZ4sjSEpVwJjmMDYBT1goQ7fPoB3DVGICwEDZWBdQkZQAOlTL7gV
X5M+mCRgRsHRBm21g/FLQ83uZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH6ComxH
CxiTqx9rQ1D8/b0cBMPRMB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3
MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr
V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ2ZM5noUO246GpARHIKSyAPX4BSzZavSMGgTPiC2JxfuLIUp29BBRgU+WCdh
YpM1K3mGV3kr1dPuswccW2tFv+Tx/zMBaLGz+LsbWi3UqL1Y2Xn8DEEvBBZfTuBK
pmB4EBj9o2VgmlwEa/QrgV8NF4ufFgQy9dflbfloKn2oanZEMhyYDaJWIxEZB8q6
2PwMck63F4Y7kE6VaEeT3qOJ3sDLWqctuwSJazaI+QN8/RxTXXcqZR0n41L2KtAL
+ipY6GUmQXE6v4oxswvESZm4jDZEi+LRt84JqLmyzXYgsZU7qyaKOhoo6mLzicbI
H4VvlT5+XM7WJPTtUE0Q0CPGEQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:29:16 2026 by rpki-client