
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json)
Hash identifier: /CrF9S2qZeXeiHtDAHgPHsBgrShbi7z4sy0m70dDGAw=
Subject key identifier: F8:18:26:3C:2C:4A:0F:7E:EB:09:55:14:BF:48:23:AF:8E:5D:15:23
Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0
Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
Manifest number: 0212
Signing time: Thu 21 May 2026 02:57:00 +0000
Manifest this update: Thu 21 May 2026 02:56:59 +0000
Manifest next update: Thu 28 May 2026 02:56:59 +0000
Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: AdQHf0/YAYVzudgIUj4PoKC1ssB2aROcAm3tSfcfwz8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl
rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
Validity
Not Before: May 21 02:56:59 2026 GMT
Not After : May 28 02:56:59 2026 GMT
Subject: CN=6a0e747c-30b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:9a:57:ba:05:81:9c:99:62:ab:14:37:43:
71:3e:01:7f:37:b4:95:34:b1:7c:4b:c1:48:f2:c1:
f3:f7:31:e3:41:bd:d6:ab:8a:4e:02:3e:9e:95:cf:
4b:3b:c7:3e:da:26:4f:25:f6:66:79:47:a0:5d:16:
13:30:64:94:62:38:8a:79:23:f8:ec:c7:bd:31:1f:
ca:a1:b0:02:b3:5d:9b:8c:76:0f:03:7b:a1:ca:fc:
59:4e:6a:60:2d:8a:bd:58:40:0f:7e:30:2c:4f:92:
b1:be:b1:6a:71:9f:34:bc:61:d7:2a:22:de:85:12:
64:70:76:f6:75:7a:64:8b:f1:93:ca:41:32:d0:3e:
3d:6d:c1:c7:91:64:95:c3:2b:8c:c6:0b:a9:67:0e:
c2:3f:65:28:e0:c0:f0:2a:03:2e:e2:e3:7d:05:6a:
13:2a:31:04:3d:53:f5:bb:d4:5e:b7:8a:be:5f:69:
ea:6d:cc:67:8c:c2:f9:c2:86:92:27:ac:06:21:60:
3a:c0:05:8d:4f:05:d3:61:e2:51:ae:98:2b:38:da:
b0:5b:56:5c:d9:93:91:43:7d:05:42:69:0f:44:00:
0d:58:3d:6c:a9:90:f1:03:fb:ba:e2:98:ff:4d:ea:
2a:4d:99:f4:09:73:14:ad:30:ee:90:1c:06:0f:7a:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:26:3C:2C:4A:0F:7E:EB:09:55:14:BF:48:23:AF:8E:5D:15:23
X509v3 Authority Key Identifier:
keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:82:68:f5:41:c4:e6:13:55:1c:5f:fb:80:f8:85:ca:18:1d:
63:f3:3d:b7:97:55:ad:b9:82:89:13:ff:95:95:5c:9d:e1:3d:
c6:37:45:f9:3e:7c:61:6e:ae:fe:5a:7b:94:83:e7:21:ed:60:
32:4d:7b:f3:ad:ea:86:11:0e:c2:40:22:c6:f2:59:f0:2a:ba:
9e:6b:d3:ba:9d:32:bf:b7:7e:aa:8b:da:f3:ce:21:9f:ca:e3:
89:14:63:0e:9d:18:a4:8d:a4:3d:32:07:65:ef:a3:d7:e5:5e:
e1:69:7d:c1:72:f1:bd:cd:54:61:33:ab:85:cd:05:53:3f:d2:
f5:9e:5f:ad:83:f0:47:f5:ba:fd:34:f7:35:72:68:f1:6b:0e:
00:71:b7:c4:b0:75:87:63:ea:ac:92:4f:62:19:5e:0a:a7:47:
4a:4e:9d:d7:61:ac:96:c2:c0:c6:8f:07:c0:91:7f:f0:e2:1d:
83:e9:c1:4f:33:09:fc:58:28:81:e7:df:8f:a1:e4:e8:13:ae:
4e:e4:97:75:59:e1:21:02:b7:ce:45:87:5c:3c:0e:a6:d3:ec:
8a:f4:a0:dc:96:2b:06:e2:4b:0d:89:87:27:ad:ea:2a:f6:cc:
4a:26:a6:ba:df:7b:cd:2b:40:41:6b:10:30:75:65:ba:6a:f8:
e0:24:49:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1
RTA1NUUxQTAwHhcNMjYwNTIxMDI1NjU5WhcNMjYwNTI4MDI1NjU5WjAYMRYwFAYD
VQQDEw02YTBlNzQ3Yy0zMGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2HWaV7oFgZyZYqsUN0NxPgF/N7SVNLF8S8FI8sHz9zHjQb3Wq4pOAj6elc9L
O8c+2iZPJfZmeUegXRYTMGSUYjiKeSP47Me9MR/KobACs12bjHYPA3uhyvxZTmpg
LYq9WEAPfjAsT5KxvrFqcZ80vGHXKiLehRJkcHb2dXpki/GTykEy0D49bcHHkWSV
wyuMxgupZw7CP2Uo4MDwKgMu4uN9BWoTKjEEPVP1u9Ret4q+X2nqbcxnjML5woaS
J6wGIWA6wAWNTwXTYeJRrpgrONqwW1Zc2ZORQ30FQmkPRAANWD1sqZDxA/u64pj/
TeoqTZn0CXMUrTDukBwGD3oc7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgYJjws
Sg9+6wlVFL9II6+OXRUjMB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC
NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0
YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS
M0xnalJfRkVzSVZlQlY0YUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgoJo9UHE5hNVHF/7gPiFyhgdY/M9t5dVrbmCiRP/lZVcneE9xjdF+T58YW6u
/lp7lIPnIe1gMk17863qhhEOwkAixvJZ8Cq6nmvTup0yv7d+qova884hn8rjiRRj
Dp0YpI2kPTIHZe+j1+Ve4Wl9wXLxvc1UYTOrhc0FUz/S9Z5frYPwR/W6/TT3NXJo
8WsOAHG3xLB1h2PqrJJPYhleCqdHSk6d12GslsLAxo8HwJF/8OIdg+nBTzMJ/Fgo
geffj6Hk6BOuTuSXdVnhIQK3zkWHXDwOptPsivSg3JYrBuJLDYmHJ63qKvbMSiam
ut97zStAQWsQMHVlumr44CRJRA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:36:31 2026 by rpki-client