
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
File: T0h-_rfHeWiBVy2X1iVPot21qHw.mft (raw, json)
Hash identifier: 9L0i5fMdR+N3Nre80pl4NlDg70rXmunG3luonehGoiM=
Subject key identifier: 96:28:8B:33:F2:73:3E:FE:AA:93:79:98:63:00:AF:B6:58:3F:17:6A
Authority key identifier: 4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C
Certificate issuer: /CN=A91C32D9/serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
Manifest number: 38
Signing time: Fri 15 May 2026 08:43:13 +0000
Manifest this update: Fri 15 May 2026 08:43:13 +0000
Manifest next update: Fri 22 May 2026 08:43:13 +0000
Files and hashes: 1: T0h-_rfHeWiBVy2X1iVPot21qHw.crl (hash: SfoDtdTQ8zt4ifoW6unYJOlCmdhXIYFABrVx1uB7lnc=)
2: 9DD3FFC6001111F18C67D2A9406F56BC.roa (hash: l4S9gMbXi+gUDu4apCdlLMULJuB61B4wV3lZ30Od2K0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl
rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 08:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C32D9, serialNumber=4F487EFEB7C7796881572D97D6254FA2DDB5A87C
Validity
Not Before: May 15 08:43:13 2026 GMT
Not After : May 22 08:43:13 2026 GMT
Subject: CN=6a06dca1-ed60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:04:93:11:44:53:8d:0f:b6:5b:35:7f:c5:
2c:97:ad:f2:88:6d:33:29:09:98:c6:d6:2c:18:24:
09:67:65:95:e1:b7:ef:5f:6a:a4:1c:27:96:f8:1e:
eb:fe:b3:4c:72:69:03:30:3b:8c:3e:d2:7b:9b:4f:
c3:91:33:0b:fa:4a:51:a1:d0:25:dd:04:5c:4d:c1:
8b:f0:43:c0:f3:ca:22:f8:0b:b6:dd:96:d5:cd:4b:
fb:1d:60:5c:45:be:6e:fe:74:cc:4f:0f:9b:b1:47:
ef:56:d6:22:fe:45:5b:a3:30:84:bd:5c:04:61:f0:
f5:42:c4:69:50:ae:88:f2:ee:22:c8:3d:4c:37:32:
8f:c1:3d:e9:a9:e0:1c:37:56:3d:6e:39:3e:68:8d:
59:fe:ad:57:25:47:31:e1:4a:52:13:2f:fa:7a:b4:
8c:29:ad:ef:ce:7b:8f:4e:ae:d5:51:0a:00:e7:53:
fc:81:8c:e7:9d:0b:51:65:68:db:a1:e3:c2:4d:c6:
37:62:81:d7:1a:37:e6:d8:26:f7:66:03:5c:3e:ca:
56:52:66:f0:a0:fc:f7:ef:4d:d2:1b:bd:7a:12:e5:
02:56:36:d2:f5:c8:d5:d2:d9:78:86:85:ed:5e:87:
da:a9:18:be:f0:76:99:68:6a:a5:75:05:c6:7e:d4:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:28:8B:33:F2:73:3E:FE:AA:93:79:98:63:00:AF:B6:58:3F:17:6A
X509v3 Authority Key Identifier:
keyid:4F:48:7E:FE:B7:C7:79:68:81:57:2D:97:D6:25:4F:A2:DD:B5:A8:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T0h-_rfHeWiBVy2X1iVPot21qHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C32D9/64DF132C001111F1AB27ED80406F56BC/T0h-_rfHeWiBVy2X1iVPot21qHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:e5:6f:06:f3:41:5b:da:67:5e:9c:e4:4b:b4:0b:67:f6:47:
4d:da:5c:55:d6:b8:eb:01:f8:71:55:f5:97:ad:fd:30:c1:86:
5c:0a:22:7b:3a:35:74:f2:ae:30:13:95:e6:4f:ed:79:7f:c2:
6b:79:a5:a3:a0:f5:95:16:74:b6:35:67:a4:14:f2:bc:0f:31:
f8:33:5f:7e:5c:7b:d7:bd:f9:5e:30:9d:5c:94:c3:12:e2:a9:
4d:56:54:6e:98:e3:ba:3c:9c:b3:9d:99:2c:b0:8b:71:de:d5:
94:ad:88:42:28:11:59:09:41:4d:81:d0:4b:d2:58:0c:62:e1:
1b:87:c0:6f:82:a4:46:48:af:74:77:f9:c9:2b:9c:2d:4a:a9:
6f:61:19:73:d8:ed:1d:c2:d4:5d:52:c1:31:cb:8c:ae:cc:26:
c3:f3:4f:fa:2a:8a:f3:72:df:af:0d:86:73:16:fd:00:59:6f:
4a:cc:e0:28:de:13:df:97:c2:c0:28:b9:e2:55:87:38:a1:1c:
84:dc:3b:32:bb:72:ab:80:ab:a0:ec:23:6b:06:0a:c1:87:f4:
a3:74:2b:7b:94:35:f2:8c:fc:c6:96:77:c2:a7:1c:71:1a:64:
7e:e9:45:f1:71:ec:97:a2:59:cf:46:c6:13:96:5e:21:04:e9:
1e:b6:fd:d7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
MzJEOTExMC8GA1UEBRMoNEY0ODdFRkVCN0M3Nzk2ODgxNTcyRDk3RDYyNTRGQTJE
REI1QTg3QzAeFw0yNjA1MTUwODQzMTNaFw0yNjA1MjIwODQzMTNaMBgxFjAUBgNV
BAMTDTZhMDZkY2ExLWVkNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHMgSTEURTjQ+2WzV/xSyXrfKIbTMpCZjG1iwYJAlnZZXht+9faqQcJ5b4Huv+
s0xyaQMwO4w+0nubT8ORMwv6SlGh0CXdBFxNwYvwQ8DzyiL4C7bdltXNS/sdYFxF
vm7+dMxPD5uxR+9W1iL+RVujMIS9XARh8PVCxGlQrojy7iLIPUw3Mo/BPemp4Bw3
Vj1uOT5ojVn+rVclRzHhSlITL/p6tIwpre/Oe49OrtVRCgDnU/yBjOedC1FlaNuh
48JNxjdigdcaN+bYJvdmA1w+ylZSZvCg/PfvTdIbvXoS5QJWNtL1yNXS2XiGhe1e
h9qpGL7wdploaqV1BcZ+1GInAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUliiLM/Jz
Pv6qk3mYYwCvtlg/F2owHwYDVR0jBBgwFoAUT0h+/rfHeWiBVy2X1iVPot21qHww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzMkQ5LzY0REYxMzJDMDAx
MTExRjFBQjI3RUQ4MDQwNkY1NkJDL1QwaC1fcmZIZVdpQlZ5MlgxaVZQb3QyMXFI
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVDBoLV9yZkhlV2lCVnkyWDFpVlBvdDIxcUh3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz
MkQ5LzY0REYxMzJDMDAxMTExRjFBQjI3RUQ4MDQwNkY1NkJDL1QwaC1fcmZIZVdp
QlZ5MlgxaVZQb3QyMXFIdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB05W8G80Fb2mdenORLtAtn9kdN2lxV1rjrAfhxVfWXrf0wwYZcCiJ7OjV08q4w
E5XmT+15f8JreaWjoPWVFnS2NWekFPK8DzH4M19+XHvXvfleMJ1clMMS4qlNVlRu
mOO6PJyznZkssItx3tWUrYhCKBFZCUFNgdBL0lgMYuEbh8BvgqRGSK90d/nJK5wt
SqlvYRlz2O0dwtRdUsExy4yuzCbD80/6Korzct+vDYZzFv0AWW9KzOAo3hPfl8LA
KLniVYc4oRyE3Dsyu3KrgKug7CNrBgrBh/SjdCt7lDXyjPzGlnfCpxxxGmR+6UXx
ceyXolnPRsYTll4hBOketv3X
-----END CERTIFICATE-----
Generated at Sun May 17 03:33:51 2026 by rpki-client