
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json)
Hash identifier: 5C7NnF0JdAvqMXoeBtJdeCCPT+GyZXjT/Md9DfjOAyI=
Subject key identifier: 3C:48:A0:20:AB:60:B3:03:D6:F9:36:A6:B9:DC:2C:69:80:72:D4:1F
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial: 0514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
Manifest number: 050D
Signing time: Wed 20 May 2026 23:41:55 +0000
Manifest this update: Wed 20 May 2026 23:41:55 +0000
Manifest next update: Wed 27 May 2026 23:41:55 +0000
Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: 3bFmphCDxZ56JV81Z7Oc6KadzpGrPCtKm+H19kR19EA=)
2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: tzCOvyqYt7MFJ8SNbSmhb4aGjE+HioiUqoKryi7LaSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Validity
Not Before: May 20 23:41:55 2026 GMT
Not After : May 27 23:41:55 2026 GMT
Subject: CN=6a0e46c3-251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:50:10:b8:29:a5:8f:a7:11:f3:8a:b2:2b:
a5:81:ce:3e:38:5b:b9:d8:03:f4:38:35:b2:62:9f:
c5:13:ad:f6:df:ec:6e:c2:a9:29:46:63:05:bf:86:
0d:ae:e4:88:19:88:1d:37:14:0a:13:47:bb:94:f0:
d0:f0:16:e4:7a:86:9b:5b:eb:fd:12:df:52:70:74:
ec:89:ca:77:06:5f:cd:9b:1c:fb:1e:ec:78:4c:12:
af:e2:57:0d:87:4a:3d:53:ba:ac:b4:62:8b:07:e3:
76:24:b3:4c:a7:57:8e:02:6a:eb:aa:64:66:d1:9e:
6e:23:fa:0b:7f:67:1c:c5:4c:d0:e7:b4:7d:56:1a:
c6:c4:eb:97:cf:d4:4b:1e:0d:6c:14:35:8e:98:d5:
7f:d2:e9:7c:75:a0:c1:38:eb:bf:c6:e1:bc:c2:e4:
89:c1:da:77:c5:d9:37:6e:70:ce:68:0e:c4:76:55:
b1:07:1b:cc:2f:e0:e3:11:be:83:d7:ae:22:72:b3:
b7:27:09:8c:ff:92:54:19:70:9a:ee:62:34:cd:71:
23:81:c6:bf:49:93:52:fb:46:d9:47:26:5b:29:0c:
ed:44:71:8f:88:09:cd:f5:bc:79:a0:09:51:6c:33:
3b:ab:6f:e7:0e:53:14:41:83:a4:0f:ef:73:29:e7:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:A0:20:AB:60:B3:03:D6:F9:36:A6:B9:DC:2C:69:80:72:D4:1F
X509v3 Authority Key Identifier:
keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b5:61:fc:d2:94:13:e3:d2:ca:5b:e2:c0:62:f7:c8:d1:87:
8b:c5:a8:eb:9e:ef:af:c5:54:a3:94:7a:ad:b3:85:43:12:35:
b9:a7:63:31:84:39:f3:5c:33:54:36:4d:65:72:06:89:f3:f2:
6b:c0:1d:26:7e:87:fa:82:6d:bb:ca:c0:2e:5b:e2:d0:25:c4:
3d:88:6d:93:7d:f3:e2:f8:79:87:b0:97:39:80:7a:5f:84:46:
20:23:71:78:a5:c4:ac:b4:e2:19:fd:86:33:53:a1:1c:65:b5:
13:13:d3:49:6f:f1:c5:32:20:c5:2c:a1:a7:7d:01:39:84:3d:
d8:65:b6:f5:a8:44:0e:95:0a:a2:2c:17:5f:d7:37:1e:9d:da:
fc:e2:42:ba:54:e7:9f:ba:90:dd:a8:db:01:1e:51:ab:d2:e9:
54:a2:47:89:bf:a0:cd:6d:42:32:bb:96:37:38:71:22:89:d4:
f5:25:c2:66:13:56:da:70:8d:7d:fa:5d:53:e7:7a:d5:1d:1d:
23:58:f2:13:6f:a9:6b:2e:39:7e:23:12:ae:0d:44:5a:95:0c:
a8:b0:74:df:c7:20:1c:a9:27:7b:cc:4a:5e:17:ef:6d:d7:1a:
68:25:fa:b6:57:95:35:4e:10:dd:20:d3:df:58:9d:25:e5:06:
74:33:37:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD
QjdCRDM0MEUwHhcNMjYwNTIwMjM0MTU1WhcNMjYwNTI3MjM0MTU1WjAYMRYwFAYD
VQQDEw02YTBlNDZjMy0yNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsC9QELgppY+nEfOKsiulgc4+OFu52AP0ODWyYp/FE6323+xuwqkpRmMFv4YN
ruSIGYgdNxQKE0e7lPDQ8BbkeoabW+v9Et9ScHTsicp3Bl/Nmxz7Hux4TBKv4lcN
h0o9U7qstGKLB+N2JLNMp1eOAmrrqmRm0Z5uI/oLf2ccxUzQ57R9VhrGxOuXz9RL
Hg1sFDWOmNV/0ul8daDBOOu/xuG8wuSJwdp3xdk3bnDOaA7EdlWxBxvML+DjEb6D
164icrO3JwmM/5JUGXCa7mI0zXEjgca/SZNS+0bZRyZbKQztRHGPiAnN9bx5oAlR
bDM7q2/nDlMUQYOkD+9zKeeEcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxIoCCr
YLMD1vk2prncLGmActQfMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy
RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO
QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5
VXFZLXkwdzRhVFhMZTlOQTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXrVh/NKUE+PSylviwGL3yNGHi8Wo657vr8VUo5R6rbOFQxI1uadjMYQ581wz
VDZNZXIGifPya8AdJn6H+oJtu8rALlvi0CXEPYhtk33z4vh5h7CXOYB6X4RGICNx
eKXErLTiGf2GM1OhHGW1ExPTSW/xxTIgxSyhp30BOYQ92GW29ahEDpUKoiwXX9c3
Hp3a/OJCulTnn7qQ3ajbAR5Rq9LpVKJHib+gzW1CMruWNzhxIonU9SXCZhNW2nCN
ffpdU+d61R0dI1jyE2+pay45fiMSrg1EWpUMqLB038cgHKkne8xKXhfvbdcaaCX6
tleVNU4Q3SDT31idJeUGdDM3wA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:28:48 2026 by rpki-client