
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: MEB/JxOs8+AOWR90WKieRi3W4D5AOEtIn9V+Coy2/1M=
Subject key identifier: 9A:5B:35:4F:C3:85:3D:21:C9:45:A6:87:64:2E:24:BE:DF:10:80:7D
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 14A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 1432
Signing time: Thu 12 Mar 2026 16:46:30 +0000
Manifest this update: Thu 12 Mar 2026 16:46:30 +0000
Manifest next update: Thu 19 Mar 2026 16:46:30 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: Eyb9PhzMRvMV3AUNGTn0YnYvxa0yxD0bN9MCeWdbGmw=)
2: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: qFYywIbpjRFT5ByV5zfgerp4DpadK1bWKX1LRe0ll+Y=)
3: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=)
4: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: wFgqxtjBGSnNz0V3JbbMZbJffl0S6xGyyA4P8cQ+F5Q=)
5: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=)
6: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wx0Bxj5s6AtaxYxKTNAOFbXAlN9uVO+TgC5goivQpV0=)
7: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E=)
8: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: XTo7hzo+YS5Mx8+cYSyBvlAGKzskb8sqYpNZv6UbZw0=)
9: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: RY4kpnbvPpjFeHSCdD9BLyLv0qAmm+duLbNyMu+5+gA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5282 (0x14a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Mar 12 16:46:30 2026 GMT
Not After : Mar 19 16:46:30 2026 GMT
Subject: CN=69b2ede6-52c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:32:3e:6a:a0:75:de:65:f0:17:45:87:1e:
fd:ba:b4:d7:0d:5d:5a:83:d6:ab:b2:5f:c0:83:11:
0d:10:26:c8:04:92:c7:9e:0c:89:da:a0:e1:f5:4e:
6d:43:b3:06:59:e7:a5:40:62:c2:a4:1b:83:d1:8f:
b4:55:5a:8f:d0:d8:b2:72:73:5a:d8:e6:97:26:68:
4a:8a:ea:38:ed:f6:99:a3:fc:7a:67:c7:17:e4:87:
a1:a5:c6:c3:c6:65:1e:d4:1a:ad:45:fe:69:4b:5f:
69:1f:35:37:dd:76:b8:a7:c3:dc:76:66:09:e5:2a:
9b:9a:e8:35:64:9e:73:f6:13:6d:77:da:a7:cd:a0:
af:af:ad:41:25:d0:c4:9b:ce:bb:f9:b8:1c:f4:4a:
2a:b1:bb:b6:5d:ee:85:f6:9e:e1:03:06:85:27:94:
6d:98:89:fd:f5:d7:f1:43:8b:fe:e1:d1:ab:95:89:
42:9d:90:d8:1d:7f:b4:af:44:1e:28:4e:86:97:cf:
8a:92:92:a5:64:7f:4b:b5:a3:77:d5:ef:64:94:08:
b3:14:f1:c1:99:30:98:83:7a:b4:79:f7:97:ce:3b:
91:49:4f:c9:e0:66:75:2b:95:d3:d5:01:a7:e1:7e:
12:e5:57:4b:f8:9c:41:d8:80:39:86:5b:12:b4:51:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:35:4F:C3:85:3D:21:C9:45:A6:87:64:2E:24:BE:DF:10:80:7D
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1e:90:32:4f:aa:a8:69:43:be:d5:95:2a:7c:f4:d6:ed:2a:
73:81:43:60:96:66:0c:1a:e3:99:c0:06:24:4e:4b:d4:f0:05:
f8:e9:4d:b4:02:c8:20:be:77:1a:03:5e:96:f7:3e:c2:f3:72:
a2:5f:e1:48:61:66:2f:10:79:f3:06:af:bb:67:d4:5d:d7:e7:
51:b4:65:ad:aa:f1:fa:46:4a:7d:23:2a:93:17:93:72:f5:9c:
28:c0:99:05:ec:4d:25:d6:fa:bc:01:a8:bb:d5:78:96:94:13:
ac:13:07:e6:fc:80:1c:b8:44:d3:ba:49:27:ec:dc:92:c2:85:
7e:3d:44:d4:94:21:68:9f:4b:12:8d:f5:fd:34:b3:71:de:ab:
6b:22:ba:11:d3:07:31:18:5e:0b:04:bb:31:b7:5f:da:62:50:
4e:47:7b:30:97:fe:1d:30:7a:a1:90:69:74:d9:5e:07:1b:b6:
06:ac:bb:e3:3e:48:4d:02:70:54:9c:5a:2e:76:7e:0f:99:44:
fd:c5:29:36:72:87:77:5c:1d:1b:fc:33:70:97:1b:6b:30:d0:
e3:6f:bb:d8:56:80:d3:54:23:5e:47:89:67:48:4b:71:6a:87:
b2:8f:20:98:a0:d3:3d:0e:b3:f5:c1:06:2f:5d:6f:c5:97:b1:
97:0b:a6:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2
MTg0MUMzOUEwHhcNMjYwMzEyMTY0NjMwWhcNMjYwMzE5MTY0NjMwWjAYMRYwFAYD
VQQDEw02OWIyZWRlNi01MmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnyIyPmqgdd5l8BdFhx79urTXDV1ag9arsl/AgxENECbIBJLHngyJ2qDh9U5t
Q7MGWeelQGLCpBuD0Y+0VVqP0NiycnNa2OaXJmhKiuo47faZo/x6Z8cX5IehpcbD
xmUe1BqtRf5pS19pHzU33Xa4p8PcdmYJ5Sqbmug1ZJ5z9hNtd9qnzaCvr61BJdDE
m867+bgc9Eoqsbu2Xe6F9p7hAwaFJ5RtmIn99dfxQ4v+4dGrlYlCnZDYHX+0r0Qe
KE6Gl8+KkpKlZH9LtaN31e9klAizFPHBmTCYg3q0efeXzjuRSU/J4GZ1K5XT1QGn
4X4S5VdL+JxB2IA5hlsStFFNLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpbNU/D
hT0hyUWmh2QuJL7fEIB9MB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB
RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp
NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoR6QMk+qqGlDvtWVKnz01u0qc4FDYJZmDBrjmcAGJE5L1PAF+OlNtALIIL53
GgNelvc+wvNyol/hSGFmLxB58wavu2fUXdfnUbRlrarx+kZKfSMqkxeTcvWcKMCZ
BexNJdb6vAGou9V4lpQTrBMH5vyAHLhE07pJJ+zcksKFfj1E1JQhaJ9LEo31/TSz
cd6rayK6EdMHMRheCwS7Mbdf2mJQTkd7MJf+HTB6oZBpdNleBxu2Bqy74z5ITQJw
VJxaLnZ+D5lE/cUpNnKHd1wdG/wzcJcbazDQ42+72FaA01QjXkeJZ0hLcWqHso8g
mKDTPQ6z9cEGL11vxZexlwumtw==
-----END CERTIFICATE-----
Generated at Sat Mar 14 02:49:16 2026 by rpki-client