
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
File: aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json)
Hash identifier: iELaVXYejtzPVC1tE1nPKu1NeYGW24LdJcGX4i4JAM4=
Subject key identifier: 80:8F:03:21:2E:07:00:F1:9D:AC:13:83:12:F6:F2:75:7F:D5:27:90
Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Certificate serial: EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
Manifest number: E1
Signing time: Sun 05 Apr 2026 06:00:03 +0000
Manifest this update: Sun 05 Apr 2026 06:00:02 +0000
Manifest next update: Sun 12 Apr 2026 06:00:02 +0000
Files and hashes: 1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: eRuEmuYDBryQv+il/hyXmhUCT/CGogNqEekqsnj9tsE=)
2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: L6/yynEwdWf1sD2wlmqOrbdnKHzkKjuQTgZ1LmsT/eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Validity
Not Before: Apr 5 06:00:02 2026 GMT
Not After : Apr 12 06:00:02 2026 GMT
Subject: CN=69d1fa63-b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:bf:2b:e8:5e:94:e5:d6:b2:d4:c6:f4:35:
df:da:e2:be:2e:0b:5f:fd:49:d3:6b:4f:5e:3e:c6:
6d:98:05:ab:6d:33:65:10:49:3d:6e:b8:60:34:83:
c9:15:b8:4d:1d:5a:4a:98:a2:53:88:19:6a:e5:6d:
e8:40:46:02:8b:5b:49:75:b7:c8:53:27:5d:e7:0c:
ca:13:46:37:46:92:92:04:a1:7e:d0:10:24:cb:97:
47:00:f2:9f:4f:c3:48:22:97:a4:de:51:01:b9:80:
ef:96:0a:01:4a:99:88:69:0f:3a:0c:68:49:cc:78:
bd:c3:25:59:7e:3d:dd:3d:b9:d8:0a:e0:80:3a:1f:
29:e2:f3:83:23:7e:4f:70:42:5a:0d:86:13:54:66:
48:d7:75:93:45:8a:41:f1:2a:0c:f8:36:39:43:a5:
04:fb:ca:af:04:7d:0e:f3:61:5f:41:c4:f9:dd:f8:
97:46:02:8f:d9:e5:07:eb:01:1a:f4:6c:ab:29:09:
e6:98:cd:17:86:73:fc:a5:ce:75:c5:05:5c:af:25:
01:35:8d:27:c6:47:a3:8b:fe:09:06:88:f4:29:67:
01:bd:87:32:41:a5:45:0e:5c:23:fd:bb:bb:d1:46:
cb:8e:9e:a5:6c:72:e9:36:a0:cd:5f:26:ef:79:a2:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8F:03:21:2E:07:00:F1:9D:AC:13:83:12:F6:F2:75:7F:D5:27:90
X509v3 Authority Key Identifier:
keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:2d:00:c3:89:da:a9:42:3c:2b:76:a3:03:e3:a2:c4:3f:08:
03:5c:d2:2a:cd:d9:a4:44:92:05:e9:a2:ca:a5:6c:4c:57:53:
70:a3:5c:48:bc:35:56:6f:84:37:1e:a9:b2:6b:26:33:26:4d:
fe:55:4c:af:12:c1:ec:9b:96:df:22:d6:46:b3:37:aa:5e:b4:
2e:af:b1:0a:1e:cd:f9:c3:7f:95:1b:c3:1a:5d:7b:c8:0d:99:
28:50:df:3a:67:75:a8:a4:d1:e0:32:8d:78:6e:7c:23:81:68:
e4:9c:62:25:6c:f4:ba:39:f4:10:b9:ce:41:a0:f7:40:90:29:
b8:24:14:d6:d7:ab:57:45:b7:34:b6:0f:67:bc:f5:f7:64:ac:
02:0d:39:cb:b3:f4:92:18:b8:a5:1b:e1:05:f7:9f:09:e6:ef:
12:ec:a8:70:cd:e1:a0:4b:f8:fd:77:f8:6c:4e:4d:cf:36:59:
cd:34:2a:c5:4a:79:65:dd:5f:1f:c5:df:66:f3:da:77:a2:61:
f0:46:f3:77:d4:71:4d:5a:8b:f7:30:1a:32:ae:97:c1:bb:02:
b9:06:d4:a3:5f:85:64:d5:80:ad:0d:04:71:37:90:24:98:06:
f3:10:6e:d8:de:f7:74:47:05:80:e6:a3:38:52:10:e3:9f:b2:
4e:0f:50:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUyMDgxMTAvBgNVBAUTKDY4QUQwRDA0NzBGNkFDNkYxOUM2NEVFRjQwOTRFRTBC
QjU4NzFFREEwHhcNMjYwNDA1MDYwMDAyWhcNMjYwNDEyMDYwMDAyWjAYMRYwFAYD
VQQDEw02OWQxZmE2My1iOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA22W/K+helOXWstTG9DXf2uK+Lgtf/UnTa09ePsZtmAWrbTNlEEk9brhgNIPJ
FbhNHVpKmKJTiBlq5W3oQEYCi1tJdbfIUydd5wzKE0Y3RpKSBKF+0BAky5dHAPKf
T8NIIpek3lEBuYDvlgoBSpmIaQ86DGhJzHi9wyVZfj3dPbnYCuCAOh8p4vODI35P
cEJaDYYTVGZI13WTRYpB8SoM+DY5Q6UE+8qvBH0O82FfQcT53fiXRgKP2eUH6wEa
9GyrKQnmmM0XhnP8pc51xQVcryUBNY0nxkeji/4JBoj0KWcBvYcyQaVFDlwj/bu7
0UbLjp6lbHLpNqDNXybveaIbCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFICPAyEu
BwDxnawTgxL28nV/1SeQMB8GA1UdIwQYMBaAFGitDQRw9qxvGcZO70CU7gu1hx7a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIwOC85RTI4NTU3RUU0
RUUxMUVGQjFFRDc2MEVDNEY5QUUwMi9hSzBOQkhEMnJHOFp4azd2UUpUdUM3V0hI
dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FLME5CSEQyckc4WnhrN3ZRSlR1QzdXSEh0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTIwOC85RTI4NTU3RUU0RUUxMUVGQjFFRDc2MEVDNEY5QUUwMi9hSzBOQkhEMnJH
OFp4azd2UUpUdUM3V0hIdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIC0Aw4naqUI8K3ajA+OixD8IA1zSKs3ZpESSBemiyqVsTFdTcKNcSLw1Vm+E
Nx6psmsmMyZN/lVMrxLB7JuW3yLWRrM3ql60Lq+xCh7N+cN/lRvDGl17yA2ZKFDf
Omd1qKTR4DKNeG58I4Fo5JxiJWz0ujn0ELnOQaD3QJApuCQU1terV0W3NLYPZ7z1
92SsAg05y7P0khi4pRvhBfefCebvEuyocM3hoEv4/Xf4bE5NzzZZzTQqxUp5Zd1f
H8XfZvPad6Jh8Ebzd9RxTVqL9zAaMq6XwbsCuQbUo1+FZNWArQ0EcTeQJJgG8xBu
2N73dEcFgOajOFIQ45+yTg9Q/A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:27 2026 by rpki-client