
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json)
Hash identifier: rB1/1ETxaHhN//ML4pWkbE7ZgsCXFW1S7t7xZKNfjCc=
Subject key identifier: 31:A7:31:88:1D:55:3B:44:74:C2:7F:05:30:2A:D1:D7:01:C4:83:32
Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Certificate serial: 3572
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
Manifest number: 3559
Signing time: Wed 10 Jun 2026 15:15:28 +0000
Manifest this update: Wed 10 Jun 2026 15:15:28 +0000
Manifest next update: Wed 17 Jun 2026 15:15:28 +0000
Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: X4O2/DFzIH10okiXibrzNxpH95yoXUNT1zjLPWdKYKE=)
2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: qbotwLlAh51+g4Xv22i4fgZHlT9iGbA8driasdN6/0A=)
3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl
rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13682 (0x3572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429
Validity
Not Before: Jun 10 15:15:28 2026 GMT
Not After : Jun 17 15:15:28 2026 GMT
Subject: CN=6a297f90-c7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:55:44:ce:ee:a0:7d:6a:3a:b9:b7:34:22:
3f:cf:ff:c4:06:c9:bf:d2:62:c9:47:17:22:09:ce:
31:32:92:d6:cc:1d:bd:18:88:e3:e2:73:7e:c2:e3:
61:e9:a0:fd:2f:17:5e:2c:d5:2b:20:c8:aa:3c:47:
7c:70:39:0e:4e:4a:3d:40:fd:42:72:77:64:c7:01:
df:19:87:41:ff:2b:cc:77:2c:bf:f8:dc:6f:79:ff:
9e:6e:2d:82:b1:cd:36:47:7e:a9:e4:10:4b:e5:4a:
aa:ad:8b:03:c2:72:37:e8:da:40:8f:a7:cc:cf:52:
db:3b:67:9e:a2:28:e3:7a:29:cc:48:46:20:58:aa:
cb:f7:e6:c1:04:36:68:95:93:f3:9e:d5:0d:f6:b7:
4d:0d:b5:3d:73:be:f6:23:09:19:bd:7a:36:65:e8:
46:a2:41:db:81:c3:da:5b:21:9b:cb:07:bb:8e:71:
80:da:6d:ad:5d:52:b7:65:b3:62:d2:34:e5:63:5b:
a1:4b:ef:f3:ee:c1:b0:af:b3:1f:8d:7f:8f:f1:0a:
23:91:93:dc:35:bf:e2:d7:3f:0c:66:e3:86:e9:05:
17:79:89:02:ac:3b:bd:f3:66:2f:1a:cb:e4:b8:45:
5e:40:29:f8:c1:18:30:44:1f:ce:35:36:92:26:1f:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:31:88:1D:55:3B:44:74:C2:7F:05:30:2A:D1:D7:01:C4:83:32
X509v3 Authority Key Identifier:
keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:8b:2e:0d:69:f2:07:9c:91:38:b3:58:26:8a:25:c2:4f:ce:
2a:4d:d7:cc:22:60:23:96:89:75:da:e2:87:2d:58:d9:b1:75:
88:f2:c5:b8:e7:cf:f2:98:99:77:df:67:89:de:81:73:73:85:
38:9e:e8:e3:a3:ce:f9:4c:8e:ea:b2:62:e9:3f:c5:0c:ad:ae:
6f:8d:68:ca:f4:bb:21:8d:47:0c:45:2d:1d:e4:cf:2c:2e:0a:
c8:f0:4d:48:d8:cf:51:f7:f8:49:ef:c6:db:5e:b1:22:55:e4:
97:ac:a5:27:a9:1a:19:c1:81:4e:7f:53:1f:48:dd:34:5c:13:
1b:27:d7:0c:38:a0:9a:51:c0:99:e1:e8:7a:69:1e:79:7d:53:
15:87:bb:00:f4:25:4a:f7:18:b0:6e:77:01:da:f6:3b:0c:c7:
02:41:60:e2:40:d9:5d:42:68:f5:9c:e1:3f:ee:57:c7:3a:4d:
54:a7:04:43:29:55:42:db:c8:d6:85:7a:7b:80:ae:fc:59:20:
f2:bb:a8:46:93:cd:38:5a:f3:72:a7:c5:44:ab:a0:15:92:09:
19:61:31:dd:24:1d:82:36:2b:e7:ec:64:4e:c9:94:9b:2b:4f:
ad:1d:9c:3d:6a:8b:e4:96:03:e7:ec:38:86:d2:a2:93:a3:c6:
bf:03:c0:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0
RjlCQzY0MjkwHhcNMjYwNjEwMTUxNTI4WhcNMjYwNjE3MTUxNTI4WjAYMRYwFAYD
VQQDEw02YTI5N2Y5MC1jN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApUpVRM7uoH1qOrm3NCI/z//EBsm/0mLJRxciCc4xMpLWzB29GIjj4nN+wuNh
6aD9LxdeLNUrIMiqPEd8cDkOTko9QP1CcndkxwHfGYdB/yvMdyy/+Nxvef+ebi2C
sc02R36p5BBL5UqqrYsDwnI36NpAj6fMz1LbO2eeoijjeinMSEYgWKrL9+bBBDZo
lZPzntUN9rdNDbU9c772IwkZvXo2ZehGokHbgcPaWyGbywe7jnGA2m2tXVK3ZbNi
0jTlY1uhS+/z7sGwr7MfjX+P8QojkZPcNb/i1z8MZuOG6QUXeYkCrDu982YvGsvk
uEVeQCn4wRgwRB/ONTaSJh+4mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGnMYgd
VTtEdMJ/BTAq0dcBxIMyMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE
QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0
TTN4ZXVaaEw0dHhQbThaQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYosuDWnyB5yROLNYJoolwk/OKk3XzCJgI5aJddrihy1Y2bF1iPLFuOfP8piZ
d99nid6Bc3OFOJ7o46PO+UyO6rJi6T/FDK2ub41oyvS7IY1HDEUtHeTPLC4KyPBN
SNjPUff4Se/G216xIlXkl6ylJ6kaGcGBTn9TH0jdNFwTGyfXDDigmlHAmeHoemke
eX1TFYe7APQlSvcYsG53Adr2OwzHAkFg4kDZXUJo9ZzhP+5XxzpNVKcEQylVQtvI
1oV6e4Cu/Fkg8ruoRpPNOFrzcqfFRKugFZIJGWEx3SQdgjYr5+xkTsmUmytPrR2c
PWqL5JYD5+w4htKik6PGvwPAgA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 15:53:25 2026 by rpki-client