
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json)
Hash identifier: ZvjZWv69BPB16MlWkvZDBovrqeR6A8gWezoq8MRvGZw=
Subject key identifier: E1:2D:CA:80:5E:A1:41:08:54:D3:AC:DB:C7:AF:C4:6F:A8:D2:43:31
Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Certificate serial: 060C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
Manifest number: 05FF
Signing time: Wed 20 May 2026 22:57:55 +0000
Manifest this update: Wed 20 May 2026 22:57:54 +0000
Manifest next update: Wed 27 May 2026 22:57:54 +0000
Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: GVrv+ZDSks2NjEd1fHcX+VmJ+2JP6H5Uh26/FnCr0LU=)
2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: VDech5jPNGmdLMydFhvBmeMj/+3X8iHs7o3tOUHRvXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1548 (0x60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Validity
Not Before: May 20 22:57:54 2026 GMT
Not After : May 27 22:57:54 2026 GMT
Subject: CN=6a0e3c73-5dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:3e:32:f1:91:5e:ec:e4:0b:79:85:01:68:
6f:2b:93:25:eb:db:d4:32:25:a6:08:91:63:e6:4d:
5e:e1:38:84:0d:39:44:ef:ca:ae:1b:c7:ff:bd:84:
17:34:0f:f3:68:ab:39:8a:52:b4:6c:19:a5:21:5e:
3c:08:4f:6e:86:09:ba:6a:09:c4:0f:27:c3:00:c9:
a5:d4:d7:01:af:7d:ca:77:b3:b2:a5:c3:55:2a:15:
9c:0f:79:6d:7f:f0:87:da:c7:a4:72:12:39:61:ed:
39:50:d0:9a:dc:c2:b5:37:d5:eb:3f:9f:56:96:af:
48:a7:2e:2c:22:61:35:1c:86:de:65:38:cd:4d:6c:
32:81:9b:44:bd:4f:9d:dc:72:64:92:c5:dc:c2:22:
f5:fd:2c:3a:ec:50:81:eb:fa:66:6e:cb:62:76:59:
bb:f3:32:fe:23:a9:ec:15:b3:41:c2:3f:3d:86:57:
00:02:cd:15:8f:94:7a:08:37:fc:73:5f:42:63:f7:
ee:cb:c2:c9:f8:81:39:42:cd:c6:22:30:29:2a:18:
a8:e3:ad:b5:bb:bd:12:1c:1f:67:c7:7e:57:9a:50:
21:62:30:f9:3b:cc:0c:9c:fe:06:d5:08:81:a7:ec:
cd:7e:62:cf:50:23:c3:30:ab:b7:00:8b:60:3a:23:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:CA:80:5E:A1:41:08:54:D3:AC:DB:C7:AF:C4:6F:A8:D2:43:31
X509v3 Authority Key Identifier:
keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:f9:ce:9a:cd:0c:5f:f4:8c:dd:66:11:f7:6c:25:80:83:f7:
06:d8:c4:b0:41:68:15:25:c4:eb:3e:0e:06:02:4d:0d:7e:00:
73:07:da:2f:c3:02:da:c3:fc:83:4c:f5:a5:62:0f:1c:52:78:
f4:71:49:98:40:ce:d1:7e:85:cc:58:b6:b1:f0:98:02:03:97:
15:61:d2:04:96:7b:77:a2:e4:f2:d9:e9:27:7f:d8:38:4e:09:
48:4a:a2:e2:68:09:77:a0:62:6a:fc:40:3c:d2:6a:40:c1:e4:
db:2e:9a:4a:8d:c7:fc:1d:c2:7a:b8:65:31:23:32:cb:79:7f:
16:06:b0:9d:e9:07:67:98:d4:59:f1:ba:3d:1f:33:72:5b:49:
9c:04:ac:17:4a:33:e3:3c:f7:32:a9:82:6a:8b:8d:48:b4:e8:
ee:ff:f1:d2:e2:ad:b2:58:54:84:93:4b:d4:aa:65:f5:f9:d0:
db:f5:12:af:f9:41:aa:21:02:d2:c9:93:62:01:7a:0c:bb:0f:
22:7b:4a:4f:e9:91:69:b7:b0:47:59:15:38:6d:5f:37:c3:10:
c3:df:8c:e3:7d:95:b5:6a:e4:c8:4f:be:5f:c7:c8:c7:f7:19:
24:66:22:6b:56:97:de:74:b5:51:ad:e2:87:1c:fb:8c:82:b0:
e4:c8:64:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF
MUQ0MEUyNUMwHhcNMjYwNTIwMjI1NzU0WhcNMjYwNTI3MjI1NzU0WjAYMRYwFAYD
VQQDEw02YTBlM2M3My01ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzl8+MvGRXuzkC3mFAWhvK5Ml69vUMiWmCJFj5k1e4TiEDTlE78quG8f/vYQX
NA/zaKs5ilK0bBmlIV48CE9uhgm6agnEDyfDAMml1NcBr33Kd7OypcNVKhWcD3lt
f/CH2sekchI5Ye05UNCa3MK1N9XrP59Wlq9Ipy4sImE1HIbeZTjNTWwygZtEvU+d
3HJkksXcwiL1/Sw67FCB6/pmbstidlm78zL+I6nsFbNBwj89hlcAAs0Vj5R6CDf8
c19CY/fuy8LJ+IE5Qs3GIjApKhio4621u70SHB9nx35XmlAhYjD5O8wMnP4G1QiB
p+zNfmLPUCPDMKu3AItgOiMIewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEtyoBe
oUEIVNOs28evxG+o0kMxMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0
RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDVDMy84QTMzRDcyMEY0RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJH
QmxiX181NXFwRExoMUE0bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJvnOms0MX/SM3WYR92wlgIP3BtjEsEFoFSXE6z4OBgJNDX4AcwfaL8MC2sP8
g0z1pWIPHFJ49HFJmEDO0X6FzFi2sfCYAgOXFWHSBJZ7d6Lk8tnpJ3/YOE4JSEqi
4mgJd6BiavxAPNJqQMHk2y6aSo3H/B3CerhlMSMyy3l/FgawnekHZ5jUWfG6PR8z
cltJnASsF0oz4zz3MqmCaouNSLTo7v/x0uKtslhUhJNL1Kpl9fnQ2/USr/lBqiEC
0smTYgF6DLsPIntKT+mRabewR1kVOG1fN8MQw9+M432VtWrkyE++X8fIx/cZJGYi
a1aX3nS1Ua3ihxz7jIKw5Mhklg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:34 2026 by rpki-client