
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
File: m1wSv5mrKIql16PWPDWI906bJtE.mft (raw, json)
Hash identifier: qZExD3zdxtyFV5ukhLoHpe33uQRbMrjoAaPGzIlwVP0=
Subject key identifier: 3F:1B:BB:35:3F:31:65:23:07:1B:CF:28:03:DA:A9:E2:93:A2:4F:95
Authority key identifier: 9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
Certificate issuer: /CN=A91BB246/serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
Manifest number: BA
Signing time: Thu 21 May 2026 07:06:49 +0000
Manifest this update: Thu 21 May 2026 07:06:49 +0000
Manifest next update: Thu 28 May 2026 07:06:49 +0000
Files and hashes: 1: m1wSv5mrKIql16PWPDWI906bJtE.crl (hash: nkUIJL12lxbnO7vy/GVnJW3IyAGAs5hAyCTp1KlaCVc=)
2: 898E9EA83C0E11F093CFD060C4F9AE02.roa (hash: hIbDeET3/by6fmctG3leWRRbgYMUPeaZ9EUswNqsz3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB246, serialNumber=9B5C12BF99AB288AA5D7A3D63C3588F74E9B26D1
Validity
Not Before: May 21 07:06:49 2026 GMT
Not After : May 28 07:06:49 2026 GMT
Subject: CN=6a0eaf09-79c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:a6:5b:da:07:98:b9:ce:76:6c:fd:65:77:
b9:0b:65:4e:32:f8:cf:8b:45:44:a0:0d:c6:8f:b3:
98:b7:1b:3d:ab:dc:eb:c6:53:ff:9f:c0:09:7a:aa:
c0:e2:20:a6:e3:d0:ac:f5:c1:c6:5f:77:70:30:5d:
58:8a:7a:88:2c:e8:e8:35:7c:e5:85:bc:86:d7:aa:
39:b4:ab:71:e5:87:17:2d:8c:56:7b:a2:57:f6:0a:
70:46:10:8c:b0:c0:5e:2a:e5:56:c5:19:6a:c3:ee:
92:05:97:3e:73:b1:9b:23:cf:9b:42:5b:0d:70:97:
41:94:db:db:19:4c:b8:f8:f3:48:87:49:62:be:ea:
67:08:38:20:02:cc:e8:2a:e1:ed:74:82:ee:60:b6:
f8:a8:3a:2f:bc:86:e4:5e:de:e1:c2:82:e7:4c:a5:
20:f5:6e:8e:b2:f8:0e:2b:f7:56:74:2c:14:86:7d:
ee:e3:60:ae:27:4b:9a:30:80:84:67:d0:c0:8d:a2:
d5:a2:3e:27:3c:da:f0:3b:78:95:8f:82:32:17:52:
dc:a7:3f:7f:7f:85:16:e1:77:46:40:ef:b5:eb:e3:
54:f7:d1:02:4e:e0:43:13:54:cd:c2:4b:f2:8e:28:
f6:f1:d5:dc:16:df:00:33:6c:3a:c5:8f:dd:50:36:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:BB:35:3F:31:65:23:07:1B:CF:28:03:DA:A9:E2:93:A2:4F:95
X509v3 Authority Key Identifier:
keyid:9B:5C:12:BF:99:AB:28:8A:A5:D7:A3:D6:3C:35:88:F7:4E:9B:26:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1wSv5mrKIql16PWPDWI906bJtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/FA0003803C0D11F096CCDB5FC4F9AE02/m1wSv5mrKIql16PWPDWI906bJtE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e4:fa:cf:86:cc:d7:1b:7d:5c:f4:14:e0:05:a0:0d:1a:7f:
45:53:f3:4f:78:b8:1b:d8:b3:36:04:3d:11:4d:d5:54:08:d8:
b6:da:b8:19:bf:67:d4:fe:8c:e8:69:72:e3:d5:0a:6b:49:6e:
b0:8e:92:1b:06:a1:2f:1a:72:83:eb:fc:44:a2:6d:f0:d2:bb:
e6:7d:bd:c7:f3:38:44:79:37:30:fd:2a:50:30:d5:cd:e3:7b:
40:e9:7f:52:32:64:6a:aa:ef:e5:a2:b5:49:02:4c:b0:66:10:
d2:3d:c2:87:20:db:73:2d:3c:5b:aa:a9:c1:67:63:e2:89:84:
32:86:ca:3b:84:77:45:93:af:49:eb:66:a0:c1:28:50:bc:ef:
bf:c2:9d:e2:8a:99:3c:7b:80:fd:f8:c5:5c:21:3d:30:ce:c4:
62:ad:eb:41:a9:a6:f8:5b:23:97:41:2a:ce:20:28:ec:c1:96:
8f:35:94:57:71:5f:3a:e7:94:94:3c:fa:26:20:02:8d:e2:bf:
10:20:96:73:c0:e5:4b:99:e2:f2:bc:c6:80:35:6f:7c:1a:27:
81:d2:6e:48:63:b9:37:ff:8a:bb:b5:b1:5b:a4:d0:bb:d2:76:
cc:d6:46:ad:c2:cf:17:80:78:f5:4c:00:e0:09:c7:3c:5b:39:
c4:6e:ce:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIyNDYxMTAvBgNVBAUTKDlCNUMxMkJGOTlBQjI4OEFBNUQ3QTNENjNDMzU4OEY3
NEU5QjI2RDEwHhcNMjYwNTIxMDcwNjQ5WhcNMjYwNTI4MDcwNjQ5WjAYMRYwFAYD
VQQDEw02YTBlYWYwOS03OWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRqmW9oHmLnOdmz9ZXe5C2VOMvjPi0VEoA3Gj7OYtxs9q9zrxlP/n8AJeqrA
4iCm49Cs9cHGX3dwMF1YinqILOjoNXzlhbyG16o5tKtx5YcXLYxWe6JX9gpwRhCM
sMBeKuVWxRlqw+6SBZc+c7GbI8+bQlsNcJdBlNvbGUy4+PNIh0livupnCDggAszo
KuHtdILuYLb4qDovvIbkXt7hwoLnTKUg9W6OsvgOK/dWdCwUhn3u42CuJ0uaMICE
Z9DAjaLVoj4nPNrwO3iVj4IyF1Lcpz9/f4UW4XdGQO+16+NU99ECTuBDE1TNwkvy
jij28dXcFt8AM2w6xY/dUDZhRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8buzU/
MWUjBxvPKAPaqeKTok+VMB8GA1UdIwQYMBaAFJtcEr+ZqyiKpdej1jw1iPdOmybR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjI0Ni9GQTAwMDM4MDND
MEQxMUYwOTZDQ0RCNUZDNEY5QUUwMi9tMXdTdjVtcktJcWwxNlBXUERXSTkwNmJK
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL20xd1N2NW1yS0lxbDE2UFdQRFdJOTA2Ykp0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjI0Ni9GQTAwMDM4MDNDMEQxMUYwOTZDQ0RCNUZDNEY5QUUwMi9tMXdTdjVtcktJ
cWwxNlBXUERXSTkwNmJKdEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAseT6z4bM1xt9XPQU4AWgDRp/RVPzT3i4G9izNgQ9EU3VVAjYttq4Gb9n1P6M
6Gly49UKa0lusI6SGwahLxpyg+v8RKJt8NK75n29x/M4RHk3MP0qUDDVzeN7QOl/
UjJkaqrv5aK1SQJMsGYQ0j3ChyDbcy08W6qpwWdj4omEMobKO4R3RZOvSetmoMEo
ULzvv8Kd4oqZPHuA/fjFXCE9MM7EYq3rQamm+Fsjl0EqziAo7MGWjzWUV3FfOueU
lDz6JiACjeK/ECCWc8DlS5ni8rzGgDVvfBongdJuSGO5N/+Ku7WxW6TQu9J2zNZG
rcLPF4B49UwA4AnHPFs5xG7OLA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:37 2026 by rpki-client