
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json)
Hash identifier: 86ZIG6aR6uYDsKTF3/Ig3nv9IcCN7IVNyFiymqKuCXs=
Subject key identifier: AB:52:77:2E:F1:74:06:6E:76:2B:7B:14:60:0F:7A:AA:10:9F:35:06
Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Certificate serial: 0E26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
Manifest number: 0E18
Signing time: Sat 04 Apr 2026 17:41:35 +0000
Manifest this update: Sat 04 Apr 2026 17:41:35 +0000
Manifest next update: Sat 11 Apr 2026 17:41:35 +0000
Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: bIfS2sYn46IHTFLtKWtXKHAGrZqx1+UuYw9YR4fpzf8=)
2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: TM1Cuv/lWUQCG87caHf82iQpffoCDFo6qvEoNmDrtjA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3622 (0xe26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33
Validity
Not Before: Apr 4 17:41:35 2026 GMT
Not After : Apr 11 17:41:35 2026 GMT
Subject: CN=69d14d4f-c64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:c4:98:58:96:af:84:d6:92:54:32:dd:7e:
de:f8:28:7d:bb:65:60:f3:bf:66:cd:28:d4:bf:8b:
d0:ea:6b:66:51:94:64:58:6e:eb:bf:ba:ec:40:24:
90:3b:6b:e6:90:87:c6:da:c0:23:12:2d:25:d5:25:
43:92:0a:c9:3d:7e:3c:1a:01:43:4e:60:b8:64:ee:
5d:4a:0b:21:d6:46:0e:93:a2:3e:3d:c7:56:7c:3e:
af:ad:32:b3:f3:df:fb:82:57:3c:77:f0:8e:ae:68:
ac:05:69:cb:e6:c2:e1:6e:85:f0:c5:97:7c:50:09:
42:d0:3a:0f:24:dc:ab:8a:71:45:75:7d:bc:66:bf:
43:ba:14:b4:19:6c:4b:85:26:b1:ef:e8:05:48:cb:
9f:9e:aa:d0:31:79:0d:37:c7:8d:17:38:fb:dd:83:
0e:2a:55:75:68:b2:61:f7:0b:6e:bf:89:fa:0a:ad:
db:6f:a8:0f:87:df:da:a9:63:fb:a0:16:0f:8d:3a:
d3:fd:32:4e:1b:51:0c:b0:a4:20:4a:60:ef:11:5e:
7d:86:33:23:4e:43:10:5d:a8:31:46:e1:35:4e:97:
0f:b1:28:ec:69:71:1c:75:6f:66:f7:e2:cc:a6:8c:
4a:65:9b:2b:f0:1e:56:8e:40:82:80:0d:02:1f:9a:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:52:77:2E:F1:74:06:6E:76:2B:7B:14:60:0F:7A:AA:10:9F:35:06
X509v3 Authority Key Identifier:
keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:64:2b:20:b7:86:a7:53:dc:b9:92:a7:9f:42:65:b7:8e:11:
eb:62:61:d4:ad:f0:c8:33:c2:b6:68:c3:62:98:41:da:95:1c:
08:ba:3e:f2:0a:03:70:03:9a:36:ff:bf:9b:a0:40:1b:f0:15:
8b:6a:1c:73:ad:79:fc:e6:56:78:c6:d6:30:04:61:dd:57:08:
39:58:5a:c7:50:fe:c4:f4:df:1e:d5:4d:35:27:b0:64:03:5a:
9b:6b:45:34:8f:b2:cf:3b:83:d2:37:55:a9:cb:44:5a:63:6a:
53:e2:02:a0:9e:98:cf:45:97:3d:2d:89:2e:17:ae:c5:0d:90:
73:fd:5b:fb:05:02:ae:35:4f:b5:09:68:75:ea:3a:6d:a4:f1:
b2:46:ae:01:a1:66:24:9c:fd:39:6c:5b:b6:27:02:61:be:45:
4e:56:14:49:23:74:b7:cf:c6:72:64:d0:9d:2d:65:a9:b2:d7:
2e:2f:01:f5:4d:07:63:b7:61:6f:c4:28:01:16:a6:1f:8a:35:
a6:a0:2a:dd:3f:c8:56:82:be:6b:18:96:f1:6c:fd:2a:35:5f:
4f:8f:9a:d3:2b:86:a9:7f:4b:8a:92:5c:5d:f9:ba:21:38:40:
51:9b:7a:21:a2:ed:94:fc:4b:d0:9b:01:40:fd:b8:ea:1c:30:
8f:82:5e:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4
ODRDRDFCMzMwHhcNMjYwNDA0MTc0MTM1WhcNMjYwNDExMTc0MTM1WjAYMRYwFAYD
VQQDEw02OWQxNGQ0Zi1jNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKnEmFiWr4TWklQy3X7e+Ch9u2Vg879mzSjUv4vQ6mtmUZRkWG7rv7rsQCSQ
O2vmkIfG2sAjEi0l1SVDkgrJPX48GgFDTmC4ZO5dSgsh1kYOk6I+PcdWfD6vrTKz
89/7glc8d/COrmisBWnL5sLhboXwxZd8UAlC0DoPJNyrinFFdX28Zr9DuhS0GWxL
hSax7+gFSMufnqrQMXkNN8eNFzj73YMOKlV1aLJh9wtuv4n6Cq3bb6gPh9/aqWP7
oBYPjTrT/TJOG1EMsKQgSmDvEV59hjMjTkMQXagxRuE1TpcPsSjsaXEcdW9m9+LM
poxKZZsr8B5WjkCCgA0CH5rWJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtSdy7x
dAZudit7FGAPeqoQnzUGMB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB
MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDA5Ni9FNTA0MkMyQUNBMzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1
ZmVvVk5uLXFuY09JVE5Hek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAymQrILeGp1PcuZKnn0Jlt44R62Jh1K3wyDPCtmjDYphB2pUcCLo+8goDcAOa
Nv+/m6BAG/AVi2occ615/OZWeMbWMARh3VcIOVhax1D+xPTfHtVNNSewZANam2tF
NI+yzzuD0jdVqctEWmNqU+ICoJ6Yz0WXPS2JLheuxQ2Qc/1b+wUCrjVPtQlodeo6
baTxskauAaFmJJz9OWxbticCYb5FTlYUSSN0t8/GcmTQnS1lqbLXLi8B9U0HY7dh
b8QoARamH4o1pqAq3T/IVoK+axiW8Wz9KjVfT4+a0yuGqX9LipJcXfm6IThAUZt6
IaLtlPxL0JsBQP246hwwj4JeGQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:50 2026 by rpki-client