
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
File: MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json)
Hash identifier: avpOFqoWsJTdBKOYA6vTsCRp9WAbcZsS1qvItJF1aaE=
Subject key identifier: 95:DD:CB:ED:63:04:DF:ED:4C:F8:44:57:90:B4:95:B1:2E:E5:75:A4
Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E
Certificate issuer: /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
Manifest number: BD
Signing time: Sun 05 Apr 2026 06:23:11 +0000
Manifest this update: Sun 05 Apr 2026 06:23:11 +0000
Manifest next update: Sun 12 Apr 2026 06:23:11 +0000
Files and hashes: 1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: 1fCOBoOPYvoDYlKnqshuU/wkXqcSILcf8nQZDK4p9Jo=)
2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: yRpg8YzN41NYB9rsIYgkG05og6BR0pcJnbn3a4gO0DU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl
rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E
Validity
Not Before: Apr 5 06:23:11 2026 GMT
Not After : Apr 12 06:23:11 2026 GMT
Subject: CN=69d1ffcf-f5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:e9:58:6f:c3:6d:19:ea:3c:6f:72:9f:8f:
96:1c:2b:77:c2:f0:cc:60:95:9a:12:3c:75:8b:c7:
a9:58:90:7c:90:ea:c5:7d:ce:40:a4:ae:18:86:66:
45:6a:e1:e0:05:ae:a3:e7:11:a4:bf:46:eb:40:c6:
ac:6d:76:d4:29:4f:c3:b8:f9:0f:dc:2e:6c:08:83:
e2:e5:0a:28:51:56:ae:dc:34:3c:a9:8a:3f:fc:da:
a2:4c:9b:60:f7:e6:40:69:71:26:89:5d:2c:a5:e2:
95:b2:dd:fd:e4:e6:02:40:dd:b4:16:4e:33:b4:80:
89:c0:0e:a5:30:4a:5b:a4:2e:c3:cd:1d:a5:45:69:
d8:fd:27:f5:c0:bd:12:2c:df:d9:98:63:72:c5:fb:
ba:13:23:e2:c2:6a:96:76:7d:3c:0d:a8:d4:12:86:
77:d6:12:26:1f:9a:42:d7:58:69:6e:17:58:0b:b8:
b5:51:1e:25:12:53:38:1f:94:b9:f6:4a:8e:da:42:
13:85:fc:c9:6d:e0:6d:1b:3f:0b:2a:05:92:06:76:
a4:1c:e3:ed:db:ea:35:72:cf:0d:1f:37:de:cf:92:
70:76:e9:09:68:9f:ce:93:98:1b:19:08:59:3d:6c:
20:00:55:aa:db:26:73:b0:f6:ad:74:fc:6a:61:d3:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DD:CB:ED:63:04:DF:ED:4C:F8:44:57:90:B4:95:B1:2E:E5:75:A4
X509v3 Authority Key Identifier:
keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:32:1b:7e:94:47:bc:ad:75:14:e1:31:54:cd:8d:fb:8b:76:
0a:c0:aa:3f:50:b4:e8:41:ce:56:6a:8d:15:b7:cb:c3:ef:a9:
3a:cb:4d:e5:7d:81:c7:2d:59:45:11:59:27:dd:99:b0:62:7f:
23:49:59:0d:4e:9b:57:36:04:9b:9c:3a:28:1e:ea:ec:66:bc:
92:89:37:4c:15:48:ce:9e:8a:bf:c6:c9:7b:1a:f6:0a:60:88:
be:f0:d1:fa:92:c9:db:9e:aa:d5:5a:d2:7f:85:79:17:c3:4f:
6c:54:5a:5f:73:e1:52:b8:db:43:74:ca:b9:3f:4c:4c:ac:3d:
ac:6f:77:b8:61:59:d9:2a:9d:48:4c:b2:07:26:81:23:e7:aa:
00:7c:6a:20:47:60:ec:39:c0:7f:82:6c:ce:45:b1:46:b9:28:
14:11:dd:17:bd:95:3b:31:b4:8c:71:74:b9:07:81:8f:8b:09:
2b:4c:58:7f:6b:e6:df:03:6f:9a:e9:ca:2d:ff:8b:8e:ce:a5:
c5:64:b0:be:f1:10:92:ea:6e:56:0f:aa:e4:63:53:d2:2a:a8:
a5:68:aa:88:cd:05:04:e9:9c:77:bc:8f:a3:c8:72:72:7f:af:
ae:88:64:28:c9:82:90:87:eb:cc:11:78:64:09:89:74:f3:30:
29:69:a5:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FFQ0UxMTAvBgNVBAUTKDMwNEIwMkEyNTY2QTE2M0FEQUNFMUZBNTIxQTMwQTdF
NjI2QUMxMUUwHhcNMjYwNDA1MDYyMzExWhcNMjYwNDEyMDYyMzExWjAYMRYwFAYD
VQQDEw02OWQxZmZjZi1mNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApk3pWG/DbRnqPG9yn4+WHCt3wvDMYJWaEjx1i8epWJB8kOrFfc5ApK4YhmZF
auHgBa6j5xGkv0brQMasbXbUKU/DuPkP3C5sCIPi5QooUVau3DQ8qYo//NqiTJtg
9+ZAaXEmiV0speKVst395OYCQN20Fk4ztICJwA6lMEpbpC7DzR2lRWnY/Sf1wL0S
LN/ZmGNyxfu6EyPiwmqWdn08DajUEoZ31hImH5pC11hpbhdYC7i1UR4lElM4H5S5
9kqO2kIThfzJbeBtGz8LKgWSBnakHOPt2+o1cs8NHzfez5JwdukJaJ/Ok5gbGQhZ
PWwgAFWq2yZzsPatdPxqYdNsmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXdy+1j
BN/tTPhEV5C0lbEu5XWkMB8GA1UdIwQYMBaAFDBLAqJWahY62s4fpSGjCn5iasEe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUVDRS8zREY0REM5MjEz
NEExMUYwQTY5Njg0ODdDNEY5QUUwMi9NRXNDb2xacUZqcmF6aC1sSWFNS2ZtSnF3
UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01Fc0NvbFpxRmpyYXpoLWxJYU1LZm1KcXdSNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUVDRS8zREY0REM5MjEzNEExMUYwQTY5Njg0ODdDNEY5QUUwMi9NRXNDb2xacUZq
cmF6aC1sSWFNS2ZtSnF3UjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGzIbfpRHvK11FOExVM2N+4t2CsCqP1C06EHOVmqNFbfLw++pOstN5X2Bxy1Z
RRFZJ92ZsGJ/I0lZDU6bVzYEm5w6KB7q7Ga8kok3TBVIzp6Kv8bJexr2CmCIvvDR
+pLJ256q1VrSf4V5F8NPbFRaX3PhUrjbQ3TKuT9MTKw9rG93uGFZ2SqdSEyyByaB
I+eqAHxqIEdg7DnAf4JszkWxRrkoFBHdF72VOzG0jHF0uQeBj4sJK0xYf2vm3wNv
munKLf+Ljs6lxWSwvvEQkupuVg+q5GNT0iqopWiqiM0FBOmcd7yPo8hycn+vrohk
KMmCkIfrzBF4ZAmJdPMwKWmlAQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:40 2026 by rpki-client