
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
File: aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json)
Hash identifier: JCK6Ao5NY4nHwm6Fw/0iPk3fKeHYuEBz0/v97EHzEPg=
Subject key identifier: AE:CC:E0:1B:A0:3F:40:2A:70:A4:15:33:D7:7B:C7:05:88:4E:2B:79
Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
Certificate issuer: /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Certificate serial: 051E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
Manifest number: 04FE
Signing time: Wed 20 May 2026 23:51:56 +0000
Manifest this update: Wed 20 May 2026 23:51:56 +0000
Manifest next update: Wed 27 May 2026 23:51:56 +0000
Files and hashes: 1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: BiXEWBMunGZBEHn/niNvo5me89p3fZha4SEdWgf1wpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1310 (0x51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Validity
Not Before: May 20 23:51:56 2026 GMT
Not After : May 27 23:51:56 2026 GMT
Subject: CN=6a0e491c-1886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:ed:b4:ee:91:1b:14:5b:ed:ea:23:ea:3a:
c6:5b:b3:3a:67:9e:94:ed:50:fb:61:1a:c0:9d:50:
34:25:b7:ae:4e:bd:59:67:1f:29:33:d0:8a:17:7e:
01:62:c6:f8:14:19:02:94:28:bf:26:9c:9f:7d:1d:
bb:36:ce:b3:5e:4c:3b:dd:f5:ab:32:01:f1:93:ea:
4a:94:c8:f5:bc:0c:2a:3c:5a:ca:0e:40:70:a2:f6:
f6:a1:3a:d4:eb:b1:1d:64:81:9c:14:ac:8d:e7:8a:
f7:45:ff:f2:49:d6:ce:bb:e7:11:a0:d5:3d:71:bc:
f5:19:76:71:68:8f:d4:e5:88:ea:ae:c1:de:ab:eb:
cb:35:89:2c:d9:3f:b6:78:45:b9:68:3b:bb:b5:8e:
6e:8b:62:99:5d:c3:fe:9a:00:a1:c6:c4:ba:72:97:
e5:cb:97:25:2f:13:99:2f:60:7a:d0:57:d5:b6:33:
b5:0a:13:04:1f:a6:d7:70:57:b2:ea:c2:b5:55:e6:
ed:fe:51:79:4a:5b:2b:9c:d7:48:8e:10:6a:7e:89:
8a:86:8b:f6:79:70:46:5a:e6:de:34:ff:06:7b:57:
01:5c:20:2f:13:37:48:7b:6e:bc:e4:9a:b8:66:fb:
87:c1:f9:8c:89:4e:21:d0:d6:82:51:d2:42:61:0f:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CC:E0:1B:A0:3F:40:2A:70:A4:15:33:D7:7B:C7:05:88:4E:2B:79
X509v3 Authority Key Identifier:
keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:97:7d:23:1a:fd:9c:91:31:7e:79:bf:37:84:59:49:32:41:
17:18:38:0d:01:b2:be:ea:d1:70:4e:3a:31:89:8b:e7:4b:2c:
66:f4:5e:7a:47:0e:1f:a1:dc:8b:99:c4:9f:5a:41:3d:bd:ff:
93:d1:3c:e9:0f:b2:21:98:b4:17:64:d0:4e:bb:96:3b:d1:fa:
55:52:87:2d:3c:74:89:cc:82:8a:7e:19:f2:f3:c6:40:4a:83:
cd:b7:cf:f8:72:b0:93:7c:24:a0:ce:4e:ae:04:a1:6e:64:0a:
a4:a0:e2:00:fe:a2:b7:6b:0e:00:f6:ec:e0:81:32:a0:88:a0:
a8:e2:fb:1f:af:76:62:da:67:e4:cb:ff:c3:0b:ff:76:d7:28:
6e:e6:d6:2d:ea:18:36:04:80:ba:9c:a7:d0:a6:c2:9b:62:43:
4c:d4:08:af:32:c9:b5:ec:f0:9e:ad:b9:37:a0:a4:d2:92:af:
d7:6a:39:03:c7:b4:10:85:ec:8a:f0:5a:3e:19:47:95:51:31:
cc:6b:12:dd:30:0a:31:1b:a0:94:e4:0c:5e:1c:51:17:1a:7d:
fb:a9:d2:ab:18:a7:de:27:c8:de:1f:87:b2:e0:41:1d:55:39:
1e:cd:74:fa:28:8a:f0:6b:79:64:81:84:34:d0:2a:28:fb:30:
bb:b9:c0:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJBMUYxMTAvBgNVBAUTKDY5MzlGQzA0MERBNUMzMEI3NjZEQzc5NEY5Q0E0QzJG
NDFBQ0FFRUEwHhcNMjYwNTIwMjM1MTU2WhcNMjYwNTI3MjM1MTU2WjAYMRYwFAYD
VQQDEw02YTBlNDkxYy0xODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1kHttO6RGxRb7eoj6jrGW7M6Z56U7VD7YRrAnVA0JbeuTr1ZZx8pM9CKF34B
Ysb4FBkClCi/JpyffR27Ns6zXkw73fWrMgHxk+pKlMj1vAwqPFrKDkBwovb2oTrU
67EdZIGcFKyN54r3Rf/ySdbOu+cRoNU9cbz1GXZxaI/U5YjqrsHeq+vLNYks2T+2
eEW5aDu7tY5ui2KZXcP+mgChxsS6cpfly5clLxOZL2B60FfVtjO1ChMEH6bXcFey
6sK1Vebt/lF5SlsrnNdIjhBqfomKhov2eXBGWubeNP8Ge1cBXCAvEzdIe2685Jq4
ZvuHwfmMiU4h0NaCUdJCYQ8TXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK7M4Bug
P0AqcKQVM9d7xwWITit5MB8GA1UdIwQYMBaAFGk5/AQNpcMLdm3HlPnKTC9BrK7q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkExRi8xRUNGRkM0QzYy
MTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3dDJiY2VVLWNwTUwwR3Ny
dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FUbjhCQTJsd3d0MmJjZVUtY3BNTDBHc3J1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MkExRi8xRUNGRkM0QzYyMTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3
dDJiY2VVLWNwTUwwR3NydW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJpd9Ixr9nJExfnm/N4RZSTJBFxg4DQGyvurRcE46MYmL50ssZvReekcOH6Hc
i5nEn1pBPb3/k9E86Q+yIZi0F2TQTruWO9H6VVKHLTx0icyCin4Z8vPGQEqDzbfP
+HKwk3wkoM5OrgShbmQKpKDiAP6it2sOAPbs4IEyoIigqOL7H692Ytpn5Mv/wwv/
dtcobubWLeoYNgSAupyn0KbCm2JDTNQIrzLJtezwnq25N6Ck0pKv12o5A8e0EIXs
ivBaPhlHlVExzGsS3TAKMRuglOQMXhxRFxp9+6nSqxin3ifI3h+HsuBBHVU5Hs10
+iiK8Gt5ZIGENNAqKPswu7nA8Q==
-----END CERTIFICATE-----
Generated at Thu May 21 09:28:58 2026 by rpki-client