
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
File: RpDBBq64PHTXvfOk55k8CYErrPw.mft (raw, json)
Hash identifier: TewGGLDOTbOtP2cxptngMvYFKoy57ewkSd6sGgz2Dt8=
Subject key identifier: 2D:9A:92:F8:3F:9C:80:0C:25:A4:68:A6:60:F4:8B:5F:FF:4E:81:0A
Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
Manifest number: 09
Signing time: Tue 19 May 2026 09:03:47 +0000
Manifest this update: Tue 19 May 2026 09:03:46 +0000
Manifest next update: Tue 26 May 2026 09:03:46 +0000
Files and hashes: 1: RpDBBq64PHTXvfOk55k8CYErrPw.crl (hash: QIwCFD/QNbfKk4pCag9JOV9vRWdsArGRWniovBjrCcs=)
2: A6F2C5C2491F11F193C776FB9E833773.roa (hash: n5FzFzWq7oMTynehpaBLyN7oo00BnAIyk+aOZacDhN0=)
3: A66886B4491F11F193C776FB9E833773.roa (hash: AM5l48c14FagzjhiVljacWktMvN3ORmA7Ru/n9zKl8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 09:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Validity
Not Before: May 19 09:03:46 2026 GMT
Not After : May 26 09:03:46 2026 GMT
Subject: CN=6a0c2773-64ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:99:12:b0:22:4b:e9:44:7e:81:e0:29:aa:
e0:8f:29:fe:7c:01:a7:23:81:35:56:4e:1b:47:67:
b7:ef:d8:dd:ec:83:11:a2:e8:bb:ed:8c:89:c6:80:
0a:93:37:ed:e5:90:5d:df:fb:a9:bc:8c:c8:86:ff:
8e:7f:88:43:89:2e:6c:9f:db:a6:45:d7:08:19:c0:
54:66:30:6e:6a:d4:ae:03:ab:5f:8f:69:80:71:5d:
61:3d:54:df:f7:00:bd:7c:79:f5:4f:d7:4a:17:58:
ba:7e:17:d0:97:96:44:bb:25:20:69:82:2d:47:3b:
e7:ee:53:50:5c:d1:e6:a5:2f:59:8a:25:85:41:f0:
be:9b:5a:d7:1b:89:18:00:de:d2:22:1d:16:d3:21:
99:0a:27:aa:02:d6:4b:d9:1f:7e:a1:b0:d3:89:60:
5d:fd:29:16:d1:32:7c:5e:93:91:a5:b2:da:70:5f:
55:52:09:1b:d5:2e:1f:30:8f:cf:63:d4:87:fd:58:
a7:a1:a7:22:95:d0:29:5f:03:67:6a:9a:da:06:25:
14:d0:ea:9f:7e:8c:86:d8:8b:1b:2e:92:ac:f4:51:
67:81:06:66:7c:53:28:cd:43:f1:44:43:8c:4c:ba:
1c:16:5b:1c:b6:c5:5d:cd:59:62:b4:93:c3:94:d9:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9A:92:F8:3F:9C:80:0C:25:A4:68:A6:60:F4:8B:5F:FF:4E:81:0A
X509v3 Authority Key Identifier:
keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7a:0a:6e:35:41:ea:b9:92:1e:0e:62:76:83:e3:12:25:d3:
2a:6d:8d:a2:86:95:45:d0:d4:dd:0d:24:91:a2:0e:f8:08:22:
20:ec:a0:2d:a6:c4:6c:a7:e4:94:34:47:ae:0c:44:d3:ed:9f:
d0:be:37:c8:c0:dc:6a:34:f2:c0:55:7d:73:ac:ea:f5:92:ef:
fd:d5:ef:60:77:63:0c:bf:f9:3c:77:ab:f5:80:dd:a0:65:c1:
21:01:10:60:d9:4f:1a:99:54:a2:30:55:dd:1a:80:4e:4a:d3:
96:61:2f:f7:43:54:98:6a:50:cd:0f:b9:e4:c9:58:a3:ad:f8:
a1:0d:50:3c:22:8d:c2:99:86:d7:6d:ef:05:d6:0b:5c:99:d5:
0b:e1:68:c3:b5:1b:03:dc:fa:74:94:1f:d3:3c:b8:38:e2:ed:
61:6a:f8:79:6f:52:d4:65:51:93:5d:13:fc:90:a4:74:23:1d:
41:78:fc:8d:84:44:b9:8f:81:6a:78:7d:87:c1:29:7b:db:ee:
1f:88:76:4a:7f:dd:11:fd:85:41:48:e0:e3:25:0d:c4:fd:43:
82:39:e9:8a:9c:58:b0:fd:ba:10:cc:7d:49:91:66:82:e5:0a:
f3:8a:41:79:40:bc:6e:0f:11:e8:9d:20:11:79:aa:76:6a:1c:
3b:52:32:bc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
REUwNjExMC8GA1UEBRMoNDY5MEMxMDZBRUI4M0M3NEQ3QkRGM0E0RTc5OTNDMDk4
MTJCQUNGQzAeFw0yNjA1MTkwOTAzNDZaFw0yNjA1MjYwOTAzNDZaMBgxFjAUBgNV
BAMTDTZhMGMyNzczLTY0YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtvJkSsCJL6UR+geApquCPKf58AacjgTVWThtHZ7fv2N3sgxGi6LvtjInGgAqT
N+3lkF3f+6m8jMiG/45/iEOJLmyf26ZF1wgZwFRmMG5q1K4Dq1+PaYBxXWE9VN/3
AL18efVP10oXWLp+F9CXlkS7JSBpgi1HO+fuU1Bc0ealL1mKJYVB8L6bWtcbiRgA
3tIiHRbTIZkKJ6oC1kvZH36hsNOJYF39KRbRMnxek5GlstpwX1VSCRvVLh8wj89j
1If9WKehpyKV0ClfA2dqmtoGJRTQ6p9+jIbYixsukqz0UWeBBmZ8UyjNQ/FEQ4xM
uhwWWxy2xV3NWWK0k8OU2adzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULZqS+D+c
gAwlpGimYPSLX/9OgQowHwYDVR0jBBgwFoAURpDBBq64PHTXvfOk55k8CYErrPww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERTA2LzY2OURCNTcyNDkx
RjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhUWHZmT2s1NWs4Q1lFcnJQ
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUnBEQkJxNjRQSFRYdmZPazU1azhDWUVyclB3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE
RTA2LzY2OURCNTcyNDkxRjExRjE4MzU5MzJDQTlFODMzNzczL1JwREJCcTY0UEhU
WHZmT2s1NWs4Q1lFcnJQdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbegpuNUHquZIeDmJ2g+MSJdMqbY2ihpVF0NTdDSSRog74CCIg7KAtpsRsp+SU
NEeuDETT7Z/QvjfIwNxqNPLAVX1zrOr1ku/91e9gd2MMv/k8d6v1gN2gZcEhARBg
2U8amVSiMFXdGoBOStOWYS/3Q1SYalDND7nkyVijrfihDVA8Io3CmYbXbe8F1gtc
mdUL4WjDtRsD3Pp0lB/TPLg44u1havh5b1LUZVGTXRP8kKR0Ix1BePyNhES5j4Fq
eH2HwSl72+4fiHZKf90R/YVBSODjJQ3E/UOCOemKnFiw/boQzH1JkWaC5QrzikF5
QLxuDxHonSAReap2ahw7UjK8
-----END CERTIFICATE-----
Generated at Thu May 21 09:34:24 2026 by rpki-client