
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft
File: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft (raw, json)
Hash identifier: fbtvxZ5o1y4XI81vvwf4r/N/ClaJE74+l5/Yu6KfsJ8=
Subject key identifier: 15:C8:54:DF:89:C2:1C:EE:F0:C4:CB:89:04:65:83:0D:61:A1:0F:0F
Authority key identifier: 03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE
Certificate issuer: /CN=A91B40B2/serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE
Certificate serial: 64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft
Manifest number: 62
Signing time: Tue 23 Jun 2026 08:17:26 +0000
Manifest this update: Tue 23 Jun 2026 08:17:26 +0000
Manifest next update: Tue 30 Jun 2026 08:17:26 +0000
Files and hashes: 1: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl (hash: wv/nL+1PCS+Kht+lhriZ/ePtUkc0HrwD0I3gREoIyio=)
2: 78A0CEEADA3811F080F82F148DD3641D.roa (hash: eOwaT1T8Z8VCMGhXjw1If947zmL/1K+4PuT9NJbQ77g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl
rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B40B2, serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE
Validity
Not Before: Jun 23 08:17:26 2026 GMT
Not After : Jun 30 08:17:26 2026 GMT
Subject: CN=6a3a4116-5806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:08:98:c8:70:ab:9f:01:4d:ae:60:9b:ea:
ea:ec:d3:85:74:ba:ca:2f:2b:b2:57:84:2f:04:e9:
55:7c:e9:53:4d:bd:29:f6:e1:32:61:66:d4:53:2b:
41:23:fe:d7:2c:7e:9d:e1:b7:69:1b:f5:c9:a0:2a:
ea:98:af:d0:a4:ab:32:32:16:44:75:03:f9:17:f7:
7f:e1:8a:3b:aa:5a:a6:4b:73:0e:57:5b:e1:83:ff:
ab:40:06:73:58:17:ea:b4:ad:8e:5c:5e:6a:eb:50:
5e:4b:61:7f:7a:1d:77:73:3c:22:4d:df:b1:c0:b8:
15:9d:1a:9e:d2:8b:bf:af:a5:bb:92:2e:d5:3f:38:
f8:d9:d9:f0:f0:3c:2c:8a:ab:6d:c3:bb:ed:64:4b:
04:a4:49:83:84:e1:20:c5:e6:5a:2f:8b:2b:8c:6a:
89:bc:8c:7f:4b:c4:f6:54:94:55:e7:aa:d2:3f:32:
c2:9b:bb:c4:2e:a1:db:b8:79:e1:5c:82:f4:e2:1e:
cd:92:69:2e:7a:ef:59:ad:87:4d:9a:54:1f:57:43:
bb:30:9d:68:50:2b:52:a7:45:ef:d0:b3:58:d5:df:
1f:a8:7c:4d:07:de:68:d7:93:0d:61:95:ed:42:76:
88:07:bb:df:2f:0f:f0:13:88:2d:72:03:4e:da:eb:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C8:54:DF:89:C2:1C:EE:F0:C4:CB:89:04:65:83:0D:61:A1:0F:0F
X509v3 Authority Key Identifier:
keyid:03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:d4:7d:ba:6d:40:b6:79:a1:03:f0:c8:26:53:22:c4:cb:12:
07:0f:2f:91:63:74:95:df:61:c7:87:1e:37:7d:e7:a5:5c:59:
9d:0a:ce:87:3c:4a:65:e9:7e:8d:18:f0:f6:4f:1e:fa:c6:8f:
a7:04:46:8c:55:b9:d7:64:3a:c7:00:0c:3f:74:0f:3d:69:0b:
46:9b:30:a6:bf:21:39:3c:33:5d:53:39:dd:b2:41:06:00:8b:
03:23:fa:1f:91:7f:f3:ff:83:0d:10:18:db:e0:00:b9:e9:86:
35:42:91:41:79:39:24:cb:60:2d:f6:4b:dc:da:e7:87:8f:8c:
10:68:3a:88:22:39:09:cc:9b:85:2b:0d:6b:16:11:10:21:ae:
65:32:51:a0:c8:61:2e:cb:bd:a6:f6:ff:0f:9a:a8:be:0e:48:
2b:2d:a5:f8:3b:47:1f:94:6b:5b:6c:f2:15:9a:5d:9e:90:23:
1d:57:8a:16:6f:14:70:82:a4:81:13:04:63:ea:08:8c:47:9b:
5d:e9:f0:ad:a2:98:fe:e0:9a:78:a4:7d:a2:a1:8d:06:69:f1:
92:ef:ab:ae:dd:7c:c1:d4:1f:a0:19:76:d9:b2:90:15:9d:83:
41:79:d6:a7:3b:0e:2c:88:99:0a:e2:8b:d5:97:7c:0e:39:dc:
44:f8:d4:55
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NDBCMjExMC8GA1UEBRMoMDM5Mjg0MjdEMkY1M0M4RkJBOTdGQ0ZFM0ZDNjUzQTUw
RjE2NTlGRTAeFw0yNjA2MjMwODE3MjZaFw0yNjA2MzAwODE3MjZaMBgxFjAUBgNV
BAMTDTZhM2E0MTE2LTU4MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5BAiYyHCrnwFNrmCb6urs04V0usovK7JXhC8E6VV86VNNvSn24TJhZtRTK0Ej
/tcsfp3ht2kb9cmgKuqYr9CkqzIyFkR1A/kX93/hijuqWqZLcw5XW+GD/6tABnNY
F+q0rY5cXmrrUF5LYX96HXdzPCJN37HAuBWdGp7Si7+vpbuSLtU/OPjZ2fDwPCyK
q23Du+1kSwSkSYOE4SDF5loviyuMaom8jH9LxPZUlFXnqtI/MsKbu8Quodu4eeFc
gvTiHs2SaS5671mth02aVB9XQ7swnWhQK1KnRe/Qs1jV3x+ofE0H3mjXkw1hle1C
dogHu98vD/ATiC1yA07a62RBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFchU34nC
HO7wxMuJBGWDDWGhDw8wHwYDVR0jBBgwFoAUA5KEJ9L1PI+6l/z+P8ZTpQ8WWf4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0MEIyL0RBRDAxRDM0REEz
NjExRjBBOTMzRDI0QzhDRDM2NDFEL0E1S0VKOUwxUEktNmxfei1QOFpUcFE4V1dm
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQTVLRUo5TDFQSS02bF96LVA4WlRwUThXV2Y0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0
MEIyL0RBRDAxRDM0REEzNjExRjBBOTMzRDI0QzhDRDM2NDFEL0E1S0VKOUwxUEkt
Nmxfei1QOFpUcFE4V1dmNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAW1H26bUC2eaED8MgmUyLEyxIHDy+RY3SV32HHhx43feelXFmdCs6HPEpl6X6N
GPD2Tx76xo+nBEaMVbnXZDrHAAw/dA89aQtGmzCmvyE5PDNdUzndskEGAIsDI/of
kX/z/4MNEBjb4AC56YY1QpFBeTkky2At9kvc2ueHj4wQaDqIIjkJzJuFKw1rFhEQ
Ia5lMlGgyGEuy72m9v8Pmqi+DkgrLaX4O0cflGtbbPIVml2ekCMdV4oWbxRwgqSB
EwRj6giMR5td6fCtopj+4Jp4pH2ioY0GafGS76uu3XzB1B+gGXbZspAVnYNBedan
Ow4siJkK4ovVl3wOOdxE+NRV
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:29 2026 by rpki-client