
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json)
Hash identifier: qQvCFgAbEZN74toH1xkLKF9vbWWDqN7gPXmz+26N6ZE=
Subject key identifier: 46:41:57:5B:B5:4A:CC:78:1C:CC:08:27:C9:4A:D7:8E:DF:24:22:9A
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
Manifest number: 0147
Signing time: Sun 05 Apr 2026 04:42:20 +0000
Manifest this update: Sun 05 Apr 2026 04:42:20 +0000
Manifest next update: Sun 12 Apr 2026 04:42:20 +0000
Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: Ft4G/IIFpFrileFVro2Q6ZksY78KrbX9OdGSmf6xPZw=)
2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: RzM5XYHpAe7uWEPFy0Uicf76LJbJuN++zhp1wy8rKjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Validity
Not Before: Apr 5 04:42:20 2026 GMT
Not After : Apr 12 04:42:20 2026 GMT
Subject: CN=69d1e82c-36d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:44:96:aa:bb:ef:3c:5b:03:ef:4a:bc:36:
73:02:2f:38:e4:05:b0:62:97:06:b2:52:ee:0a:d2:
86:9a:5d:c9:34:90:84:e4:f2:f3:4c:69:f8:6d:22:
da:70:ec:c5:69:58:77:3b:2d:49:32:0c:f0:e1:bf:
dc:13:9d:f0:e5:24:bf:04:6b:4b:44:8e:e6:aa:c6:
1d:9d:9f:f9:25:86:10:ff:52:36:af:a2:13:ff:ed:
8f:61:d2:93:d8:34:29:bb:ba:a1:02:79:3f:50:c0:
bf:9e:b8:4b:6f:9b:10:ad:a3:41:63:c2:2f:89:75:
1e:ba:96:3b:d2:61:34:37:7b:f5:f8:c2:a6:e9:4f:
28:bb:30:a0:f8:77:6a:5b:62:34:77:8f:9f:39:87:
d2:e0:c8:05:90:5d:41:b7:5e:73:4d:fe:25:d6:5d:
82:01:a4:51:a6:dc:9a:7f:f2:5f:f0:3e:d7:06:4b:
16:ca:4c:59:eb:51:9c:61:31:0e:66:bd:69:cc:b2:
eb:9b:5f:91:d6:c7:3f:de:bb:36:27:1e:08:c5:a2:
ac:4b:33:fc:a4:8c:67:c8:92:2e:c1:5d:f5:bd:f3:
94:ff:18:83:3c:c8:9f:58:af:4a:16:b2:26:3e:bd:
bb:8e:fe:1f:89:5e:3d:77:fc:99:f2:a1:53:f4:71:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:41:57:5B:B5:4A:CC:78:1C:CC:08:27:C9:4A:D7:8E:DF:24:22:9A
X509v3 Authority Key Identifier:
keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:b5:7d:4e:fa:39:d6:db:fb:c1:50:7c:be:eb:82:c0:3e:5a:
c9:ff:03:9f:58:7e:80:45:47:a2:31:9c:65:2a:46:33:6e:2c:
7c:18:65:e1:de:f8:10:79:75:9c:9e:62:b8:0d:a9:5b:44:69:
d5:f2:fd:7b:ca:9c:dc:90:61:79:87:62:fa:3d:7c:62:f3:4d:
92:be:91:c8:9e:91:de:43:86:55:93:69:bf:1d:3c:c1:c6:d7:
3c:f2:35:46:34:3c:8e:6d:37:bd:1a:12:e0:75:13:e2:df:0d:
d2:27:3e:2a:61:57:35:53:db:08:9a:e6:89:44:4c:10:13:db:
bf:5c:dc:74:76:1d:b2:12:d0:32:25:38:d7:35:f4:5d:b2:51:
2c:e1:4f:06:3a:da:68:cc:17:06:91:1f:cf:76:a5:8b:36:7c:
25:7c:ad:8d:37:1d:7a:ea:c9:0e:fc:11:1c:32:3b:be:e2:de:
83:b2:7c:87:dd:b8:cd:01:20:bb:bd:75:d7:a8:0b:ee:e5:11:
fd:b0:26:6b:cf:9b:46:ce:f6:5a:26:9c:ac:99:55:b1:21:b0:
c1:10:9a:8a:c6:2f:d7:e9:80:c4:84:5f:73:e1:50:41:95:66:
c1:de:c0:31:68:61:86:32:a5:07:aa:5a:c4:e6:75:64:d8:63:
e2:61:2c:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG
OUQ1MEQ4MjcwHhcNMjYwNDA1MDQ0MjIwWhcNMjYwNDEyMDQ0MjIwWjAYMRYwFAYD
VQQDEw02OWQxZTgyYy0zNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZ9Elqq77zxbA+9KvDZzAi845AWwYpcGslLuCtKGml3JNJCE5PLzTGn4bSLa
cOzFaVh3Oy1JMgzw4b/cE53w5SS/BGtLRI7mqsYdnZ/5JYYQ/1I2r6IT/+2PYdKT
2DQpu7qhAnk/UMC/nrhLb5sQraNBY8IviXUeupY70mE0N3v1+MKm6U8ouzCg+Hdq
W2I0d4+fOYfS4MgFkF1Bt15zTf4l1l2CAaRRptyaf/Jf8D7XBksWykxZ61GcYTEO
Zr1pzLLrm1+R1sc/3rs2Jx4IxaKsSzP8pIxnyJIuwV31vfOU/xiDPMifWK9KFrIm
Pr27jv4fiV49d/yZ8qFT9HFkuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZBV1u1
Ssx4HMwIJ8lK147fJCKaMB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1
QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1
T0FkSEVjUWtqVW41MVEyQ2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE7V9Tvo51tv7wVB8vuuCwD5ayf8Dn1h+gEVHojGcZSpGM24sfBhl4d74EHl1
nJ5iuA2pW0Rp1fL9e8qc3JBheYdi+j18YvNNkr6RyJ6R3kOGVZNpvx08wcbXPPI1
RjQ8jm03vRoS4HUT4t8N0ic+KmFXNVPbCJrmiURMEBPbv1zcdHYdshLQMiU41zX0
XbJRLOFPBjraaMwXBpEfz3alizZ8JXytjTcdeurJDvwRHDI7vuLeg7J8h924zQEg
u71116gL7uUR/bAma8+bRs72WiacrJlVsSGwwRCaisYv1+mAxIRfc+FQQZVmwd7A
MWhhhjKlB6paxOZ1ZNhj4mEs5Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 16:35:40 2026 by rpki-client