
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier: GH/JhedL68anqO5ufthE/uQKcboZhNhJDd+fpyUDCzA=
Subject key identifier: 91:CD:C8:00:40:44:96:4B:4E:BC:F5:F4:56:53:59:80:0A:AB:5E:05
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number: EA
Signing time: Sun 03 May 2026 06:44:51 +0000
Manifest this update: Sun 03 May 2026 06:44:50 +0000
Manifest next update: Sun 10 May 2026 06:44:50 +0000
Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: mPJvzpYk41yJNN8HzuzJUNSeipBKf35JmgPwV33Cjx4=)
2: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: VJiboECQcz4EPJ3s89go0nGoquID30lt86NixvuBLSQ=)
3: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: uOYxYsUyV5d201wkHKNC5KliU1I0MfAZOgIjo4393UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Validity
Not Before: May 3 06:44:50 2026 GMT
Not After : May 10 06:44:50 2026 GMT
Subject: CN=69f6eee3-3407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8b:38:78:b3:e9:0d:b4:d2:66:9a:6e:b0:e3:
e5:86:13:36:a5:3c:97:f3:9b:08:b0:bd:a6:ac:bd:
0b:42:42:ca:5e:bb:8b:3a:b4:e6:1c:b3:29:fa:f5:
dc:ac:df:35:62:32:3b:18:4c:4d:04:dd:a5:30:c4:
c6:0f:cb:a2:69:73:73:9c:f0:55:11:c5:5d:09:1b:
a1:2f:75:42:4a:da:87:47:9e:12:1b:b2:41:20:04:
cb:ee:90:ca:4e:7d:bc:cd:20:20:42:36:f3:0f:39:
49:80:45:b1:85:f2:ab:5e:e9:f2:e1:c4:84:6a:d7:
de:8a:73:e1:6a:74:bf:71:59:9e:04:c0:eb:3f:c3:
f3:40:b5:17:38:e0:3e:7f:23:8f:28:38:66:57:63:
11:02:07:43:41:e2:5a:6d:ea:e8:c5:ab:ba:62:e4:
b9:2e:39:ef:56:54:44:bd:f4:35:dc:f5:28:af:85:
ef:eb:db:04:e7:d1:09:e7:a5:38:eb:33:9a:65:a9:
68:10:21:ff:01:2d:d5:a9:8b:03:8d:46:df:c0:8a:
ab:d3:19:0b:06:5e:3a:93:a1:54:47:47:f5:24:5b:
cb:d4:87:b2:5c:ec:b7:27:01:40:39:7d:ae:53:c5:
0a:9c:0d:e5:09:52:58:e2:80:0c:7f:6c:dc:8f:7e:
24:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CD:C8:00:40:44:96:4B:4E:BC:F5:F4:56:53:59:80:0A:AB:5E:05
X509v3 Authority Key Identifier:
keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:12:e2:ba:64:55:38:65:88:95:7a:71:6d:73:39:54:8a:58:
f2:86:ae:e9:10:10:c8:45:23:7a:82:f3:f8:1d:28:bd:55:ca:
2e:70:ea:dd:40:c6:89:d3:c4:2e:26:50:95:c6:b0:fb:86:08:
2d:11:ab:22:b1:92:de:5d:4b:02:12:45:d3:19:e3:28:84:a7:
64:9c:c2:77:f3:71:91:12:c8:75:26:08:6a:36:ba:c2:58:2e:
37:52:6b:f6:7c:08:ba:21:ce:4c:35:c6:bf:a7:7a:3d:02:13:
86:08:10:b7:21:ef:87:cf:d2:05:b6:76:cd:4b:24:6a:e6:4b:
08:f8:f6:9c:ad:9d:ab:62:f0:9a:8b:da:99:f5:27:a8:7b:01:
a5:d8:b6:32:e9:5c:68:79:e0:f0:80:5d:55:14:f8:e9:1f:4a:
42:07:81:d1:7f:b3:97:fd:ac:2f:ae:41:aa:82:b1:38:da:59:
96:8c:5c:a2:c1:a9:4c:7f:59:30:96:85:55:5c:ec:61:89:00:
3b:54:df:83:d7:85:ce:e1:8b:6d:13:7c:9a:d0:ca:b5:d0:fb:
d5:63:3a:c1:8b:ba:9d:83:a1:99:45:72:98:8a:89:d0:a8:2d:
af:79:a8:1a:97:0d:33:2e:2c:2c:7e:b5:ae:c8:d6:67:98:17:
04:42:f4:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBBMkUxMTAvBgNVBAUTKDZBM0VGNjcxODJEQkIwRjZDQ0YzQ0E0MTM3OEMwMTE5
ODA2QUU5QkQwHhcNMjYwNTAzMDY0NDUwWhcNMjYwNTEwMDY0NDUwWjAYMRYwFAYD
VQQDEw02OWY2ZWVlMy0zNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiIs4eLPpDbTSZppusOPlhhM2pTyX85sIsL2mrL0LQkLKXruLOrTmHLMp+vXc
rN81YjI7GExNBN2lMMTGD8uiaXNznPBVEcVdCRuhL3VCStqHR54SG7JBIATL7pDK
Tn28zSAgQjbzDzlJgEWxhfKrXuny4cSEatfeinPhanS/cVmeBMDrP8PzQLUXOOA+
fyOPKDhmV2MRAgdDQeJaberoxau6YuS5LjnvVlREvfQ13PUor4Xv69sE59EJ56U4
6zOaZaloECH/AS3VqYsDjUbfwIqr0xkLBl46k6FUR0f1JFvL1IeyXOy3JwFAOX2u
U8UKnA3lCVJY4oAMf2zcj34kxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHNyABA
RJZLTrz19FZTWYAKq14FMB8GA1UdIwQYMBaAFGo+9nGC27D2zPPKQTeMARmAaum9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEEyRS9DODM2QzdCMkU5
MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQYk04OHBCTjR3QkdZQnE2
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEEyRS9DODM2QzdCMkU5MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQ
Yk04OHBCTjR3QkdZQnE2YjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHhLiumRVOGWIlXpxbXM5VIpY8oau6RAQyEUjeoLz+B0ovVXKLnDq3UDGidPE
LiZQlcaw+4YILRGrIrGS3l1LAhJF0xnjKISnZJzCd/NxkRLIdSYIaja6wlguN1Jr
9nwIuiHOTDXGv6d6PQIThggQtyHvh8/SBbZ2zUskauZLCPj2nK2dq2LwmovamfUn
qHsBpdi2MulcaHng8IBdVRT46R9KQgeB0X+zl/2sL65BqoKxONpZloxcosGpTH9Z
MJaFVVzsYYkAO1Tfg9eFzuGLbRN8mtDKtdD71WM6wYu6nYOhmUVymIqJ0Kgtr3mo
GpcNMy4sLH61rsjWZ5gXBEL0EQ==
-----END CERTIFICATE-----
Generated at Sun May 3 17:08:39 2026 by rpki-client