
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File: dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier: htNwqSbCiKWiFeXHpGwQOiQy3bNirJXYPO8pL9NbaIo=
Subject key identifier: 27:12:81:53:BA:85:BF:87:AF:EE:50:13:27:D2:F4:89:C0:EF:46:60
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer: /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number: 90
Signing time: Thu 21 May 2026 07:34:51 +0000
Manifest this update: Thu 21 May 2026 07:34:50 +0000
Manifest next update: Thu 28 May 2026 07:34:50 +0000
Files and hashes: 1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: tBUdslQ6/f3ZD9E6Fv/9GLapwJm9GTuIIITODlP7AMI=)
2: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Validity
Not Before: May 21 07:34:50 2026 GMT
Not After : May 28 07:34:50 2026 GMT
Subject: CN=6a0eb59a-a732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:66:0d:29:8d:d6:b4:50:aa:1c:26:87:2c:
5e:95:63:32:30:e6:d8:cc:a6:1c:53:a1:5c:1e:d8:
42:91:ba:07:89:a1:65:81:1f:f5:db:4d:75:d8:e5:
40:88:39:f5:92:85:2b:4b:39:df:5a:cc:27:9a:4c:
6c:2d:00:28:92:fa:bd:c0:ed:d8:b9:ba:3c:01:a2:
28:6b:c6:df:36:cf:12:d4:a7:ca:36:2c:9f:1a:f6:
49:2e:20:49:09:9a:66:ff:07:25:aa:ab:26:7f:c6:
d4:78:5e:89:87:ef:12:e0:91:e7:fa:8e:9e:a5:38:
35:ee:04:95:08:1e:e8:72:16:5f:6a:fe:05:74:e1:
13:c7:d6:fd:bc:c2:6d:ec:c0:3d:fe:09:47:9b:49:
2d:42:4e:0a:ef:95:8a:6e:43:ba:79:b4:9c:8d:af:
5f:6a:92:7e:a3:95:77:d1:d9:74:d4:04:1c:1f:ff:
5b:1f:a2:d9:ad:c9:f8:70:6c:da:3d:a6:78:e2:b7:
08:79:cc:60:23:fd:ea:a2:74:99:2d:3d:4e:1c:e1:
c2:92:4d:aa:d2:c5:5b:73:aa:d7:6d:b6:93:ca:bf:
fd:f8:ad:01:5d:e6:6a:3e:2a:c6:09:57:2e:d0:4e:
1f:96:f9:7f:e5:b0:56:82:66:c8:6a:60:48:14:4d:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:81:53:BA:85:BF:87:AF:EE:50:13:27:D2:F4:89:C0:EF:46:60
X509v3 Authority Key Identifier:
keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:41:37:07:7a:e1:91:ad:9b:6b:ed:ce:2a:43:44:ea:d2:be:
13:b2:e5:26:aa:8d:ed:ec:20:6e:8a:c3:6f:60:6d:e7:05:ff:
83:73:0e:2b:83:f3:35:32:88:69:a8:09:ab:0f:33:08:ab:e1:
4c:fa:79:80:18:ab:9e:5a:f0:53:00:93:83:0c:97:ea:d3:54:
9e:09:e0:e9:82:94:63:c0:ac:d6:16:b9:92:ad:e8:33:36:2d:
9f:63:06:2e:6d:61:6d:f1:aa:3b:88:8e:93:d2:81:ca:6d:0d:
6c:f9:72:76:17:1b:f8:1c:97:1b:4a:d2:b2:6e:84:10:df:b1:
f7:51:3c:36:c7:48:ae:9c:89:ee:5d:61:5a:f6:c1:fc:56:bb:
0f:74:91:5a:02:af:45:25:1e:95:03:ce:ba:a0:85:d7:8d:12:
ff:cb:27:c0:71:93:26:69:e5:bb:2c:93:f8:82:83:e8:76:25:
2a:bd:ae:0e:51:6d:56:c8:f4:7a:8b:24:da:b2:59:ff:aa:48:
d1:44:8f:37:72:2d:a3:04:37:1b:2a:9e:13:a3:24:37:a0:2e:
a3:06:fb:f0:66:00:e5:40:32:1a:ad:49:16:8a:4f:dd:b7:e5:
c2:f1:3a:72:72:f8:35:5d:82:61:c1:dd:3d:8c:63:50:1b:cb:
b6:42:a0:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2NEYxMTAvBgNVBAUTKDc0NTNEODgxM0JDOEVGNzI5MEIxMTAyMzIzNTg4OTRD
NzdDNERCMzcwHhcNMjYwNTIxMDczNDUwWhcNMjYwNTI4MDczNDUwWjAYMRYwFAYD
VQQDEw02YTBlYjU5YS1hNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4lJmDSmN1rRQqhwmhyxelWMyMObYzKYcU6FcHthCkboHiaFlgR/120112OVA
iDn1koUrSznfWswnmkxsLQAokvq9wO3Yubo8AaIoa8bfNs8S1KfKNiyfGvZJLiBJ
CZpm/wclqqsmf8bUeF6Jh+8S4JHn+o6epTg17gSVCB7ochZfav4FdOETx9b9vMJt
7MA9/glHm0ktQk4K75WKbkO6ebScja9fapJ+o5V30dl01AQcH/9bH6LZrcn4cGza
PaZ44rcIecxgI/3qonSZLT1OHOHCkk2q0sVbc6rXbbaTyr/9+K0BXeZqPirGCVcu
0E4flvl/5bBWgmbIamBIFE2J9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcSgVO6
hb+Hr+5QEyfS9InA70ZgMB8GA1UdIwQYMBaAFHRT2IE7yO9ykLEQIyNYiUx3xNs3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0Ri8zNjBDQTE3QTc5
OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STczS1FzUkFqSTFpSlRIZkUy
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzY0Ri8zNjBDQTE3QTc5OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STcz
S1FzUkFqSTFpSlRIZkUyemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqEE3B3rhka2ba+3OKkNE6tK+E7LlJqqN7ewgborDb2Bt5wX/g3MOK4PzNTKI
aagJqw8zCKvhTPp5gBirnlrwUwCTgwyX6tNUngng6YKUY8Cs1ha5kq3oMzYtn2MG
Lm1hbfGqO4iOk9KBym0NbPlydhcb+ByXG0rSsm6EEN+x91E8NsdIrpyJ7l1hWvbB
/Fa7D3SRWgKvRSUelQPOuqCF140S/8snwHGTJmnluyyT+IKD6HYlKr2uDlFtVsj0
eosk2rJZ/6pI0USPN3ItowQ3GyqeE6MkN6Auowb78GYA5UAyGq1JFopP3bflwvE6
cnL4NV2CYcHdPYxjUBvLtkKgCQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:50 2026 by rpki-client