
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
File: mT30slnW8G6m6DO22jLrJ_SWtOk.mft (raw, json)
Hash identifier: +xuY7oNVBSXM/ZYVLVQtCSyJomIFcCQhbZGwovUWY64=
Subject key identifier: DE:6F:B5:7B:CC:60:FC:F0:0F:EB:54:17:90:54:50:AA:92:D6:9E:90
Authority key identifier: 99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9
Certificate issuer: /CN=A91D08D8/serialNumber=993DF4B259D6F06EA6E833B6DA32EB27F496B4E9
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
Manifest number: 22
Signing time: Thu 21 May 2026 08:58:12 +0000
Manifest this update: Thu 21 May 2026 08:58:11 +0000
Manifest next update: Thu 28 May 2026 08:58:11 +0000
Files and hashes: 1: mT30slnW8G6m6DO22jLrJ_SWtOk.crl (hash: 1mAYSJx6/Ez6PxR0q+2BvfuAqmMFMCQXScapcQu0uWQ=)
2: 60258848232F11F1A5D005B1A3833773.roa (hash: Nihi/qwVLuSv2EdjQJXKm6V9kEbeM4dBc82siJFhY2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.crl
rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D08D8, serialNumber=993DF4B259D6F06EA6E833B6DA32EB27F496B4E9
Validity
Not Before: May 21 08:58:11 2026 GMT
Not After : May 28 08:58:11 2026 GMT
Subject: CN=6a0ec924-a77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:0f:c4:25:1a:f6:1f:10:2c:40:92:5a:a0:
a7:c2:26:1c:9f:f6:4d:bd:a2:f0:b6:76:9e:9c:a0:
37:01:e9:9a:53:b5:58:3d:34:92:29:7f:a0:91:f6:
46:af:19:1d:a2:a0:3e:c3:c1:09:64:2d:d9:09:6b:
eb:a5:75:92:68:2b:1c:ea:a0:ea:8f:87:c7:61:5b:
3a:dc:98:f8:3e:b8:6b:c8:41:8f:71:7b:1e:0b:5e:
cd:54:e1:82:92:2e:3c:5b:c0:22:93:59:94:a4:83:
2c:a9:28:0d:d5:30:c2:86:95:97:9e:d5:1d:51:b5:
e4:8f:e4:48:e7:7f:e6:80:55:dd:3a:b2:12:8d:8c:
e7:a9:7c:2b:1b:7e:ee:36:fa:14:b2:21:62:57:30:
16:a6:b2:6f:8a:2c:f6:e4:c2:0e:d2:71:18:ba:57:
ba:47:28:89:b3:18:ff:af:17:74:e7:76:3e:3c:a5:
88:cf:d5:05:8b:56:5f:0a:97:15:26:80:04:f4:59:
3c:3b:0c:7b:bb:28:ae:02:e7:e6:41:e0:55:bd:52:
8f:fb:2a:66:4d:bd:76:d0:0e:26:74:31:c3:e3:73:
44:d5:9b:e8:59:ac:82:89:83:44:5a:c6:d6:9d:e9:
d6:25:6d:1c:01:38:79:d0:6a:e8:d7:e5:f0:7b:69:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:B5:7B:CC:60:FC:F0:0F:EB:54:17:90:54:50:AA:92:D6:9E:90
X509v3 Authority Key Identifier:
keyid:99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7b:28:f9:c8:e5:82:c7:d9:66:4f:11:6e:b2:1f:6a:0a:e2:
ce:8c:9b:2a:59:b5:ab:c0:f0:7d:f3:58:28:ef:ff:cc:2c:23:
05:9d:56:5f:3e:00:51:86:8d:5f:d5:c7:b4:f6:17:8f:a3:a2:
49:19:f4:ca:d7:e7:b3:7f:86:88:30:d4:75:3e:f0:4a:96:bd:
ad:cf:a7:bc:b8:df:a4:ca:82:3f:cd:3e:92:1e:5e:59:28:c7:
e9:d2:a3:27:00:c2:28:66:cc:e0:19:3a:01:ef:95:e0:72:f0:
42:e0:19:85:e2:89:9c:00:00:50:ba:25:0d:bd:44:dc:ae:3f:
6e:65:b9:bb:2e:2b:13:db:85:d6:91:4e:d4:a0:cd:ea:6e:e4:
41:f8:79:43:fb:82:8b:a5:a8:49:01:ad:e0:bd:60:a5:7c:00:
2f:bf:6e:7c:d9:a0:1e:03:5b:ce:5a:8b:1c:08:dd:67:51:86:
01:88:e4:9d:92:05:47:93:14:d5:ec:43:0a:c3:5a:f1:81:27:
d2:6c:74:e4:18:bf:31:c0:e2:6f:7b:85:94:cb:8e:56:b5:e1:
d9:67:2a:3c:bd:cf:98:eb:03:1a:21:b9:28:3b:6e:1c:60:f4:
d6:b8:53:8c:fb:e8:39:13:9e:06:05:a2:76:24:73:66:0c:4a:
16:c2:01:dc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MDhEODExMC8GA1UEBRMoOTkzREY0QjI1OUQ2RjA2RUE2RTgzM0I2REEzMkVCMjdG
NDk2QjRFOTAeFw0yNjA1MjEwODU4MTFaFw0yNjA1MjgwODU4MTFaMBgxFjAUBgNV
BAMTDTZhMGVjOTI0LWE3N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNgA/EJRr2HxAsQJJaoKfCJhyf9k29ovC2dp6coDcB6ZpTtVg9NJIpf6CR9kav
GR2ioD7DwQlkLdkJa+uldZJoKxzqoOqPh8dhWzrcmPg+uGvIQY9xex4LXs1U4YKS
LjxbwCKTWZSkgyypKA3VMMKGlZee1R1RteSP5Ejnf+aAVd06shKNjOepfCsbfu42
+hSyIWJXMBamsm+KLPbkwg7ScRi6V7pHKImzGP+vF3Tndj48pYjP1QWLVl8KlxUm
gAT0WTw7DHu7KK4C5+ZB4FW9Uo/7KmZNvXbQDiZ0McPjc0TVm+hZrIKJg0Raxtad
6dYlbRwBOHnQaujX5fB7aSpfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3m+1e8xg
/PAP61QXkFRQqpLWnpAwHwYDVR0jBBgwFoAUmT30slnW8G6m6DO22jLrJ/SWtOkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOEQ4L0NBQ0NBQzAwMjMy
RDExRjE5OTIzREE3N0EzODMzNzczL21UMzBzbG5XOEc2bTZETzIyakxySl9TV3RP
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbVQzMHNsblc4RzZtNkRPMjJqTHJKX1NXdE9rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw
OEQ4L0NBQ0NBQzAwMjMyRDExRjE5OTIzREE3N0EzODMzNzczL21UMzBzbG5XOEc2
bTZETzIyakxySl9TV3RPay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCdeyj5yOWCx9lmTxFush9qCuLOjJsqWbWrwPB981go7//MLCMFnVZfPgBRho1f
1ce09hePo6JJGfTK1+ezf4aIMNR1PvBKlr2tz6e8uN+kyoI/zT6SHl5ZKMfp0qMn
AMIoZszgGToB75XgcvBC4BmF4omcAABQuiUNvUTcrj9uZbm7LisT24XWkU7UoM3q
buRB+HlD+4KLpahJAa3gvWClfAAvv2582aAeA1vOWoscCN1nUYYBiOSdkgVHkxTV
7EMKw1rxgSfSbHTkGL8xwOJve4WUy45WteHZZyo8vc+Y6wMaIbkoO24cYPTWuFOM
++g5E54GBaJ2JHNmDEoWwgHc
-----END CERTIFICATE-----
Generated at Thu May 21 12:20:50 2026 by rpki-client