
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json)
Hash identifier: Yqp9FRY+bf8tnYiR5UPKHvCT134fblrfaV0Oz59cFio=
Subject key identifier: B5:8F:D8:15:B9:18:C4:34:F5:2B:FD:B7:73:43:07:84:9B:A0:C7:EF
Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Certificate serial: 0BEB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
Manifest number: 0BDB
Signing time: Tue 18 Aug 2026 19:16:46 +0000
Manifest this update: Tue 18 Aug 2026 19:16:45 +0000
Manifest next update: Tue 25 Aug 2026 19:16:45 +0000
Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: C3uQCSedmiQIECpmcQSNhUkIZEOR9fjPMzYNY3876R4=)
2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: TOj5s+aNQC9Z5ZqVlC2yt7q1plWezfus1BZx0sUNSs8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Validity
Not Before: Aug 18 19:16:45 2026 GMT
Not After : Aug 25 19:16:45 2026 GMT
Subject: CN=6a84af9e-638b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:31:90:2d:23:71:0d:e6:1d:28:e2:84:d2:
bd:c1:88:e2:aa:c1:c4:90:8c:4c:db:68:d5:c7:32:
a5:39:75:4d:ba:44:22:e4:3e:48:02:c8:83:88:1f:
29:40:4f:6e:be:7c:ed:79:36:4b:ea:dc:ec:ad:36:
12:ae:30:8f:cd:56:35:32:5c:f1:f4:f0:61:20:d9:
65:21:ed:d8:08:76:51:af:88:89:1c:d8:79:29:54:
6b:df:df:ee:7b:a5:77:68:2e:85:3a:05:87:44:86:
2d:d8:c2:8c:24:8f:c6:a5:ac:17:a9:8d:df:1a:80:
88:5b:70:b1:06:6b:7f:6b:23:b3:7a:df:a4:43:71:
f8:b2:ce:57:34:9b:ac:9e:8b:f7:87:69:73:10:96:
d3:60:3f:a9:3a:51:51:61:23:2a:6c:30:69:8d:86:
33:62:46:ec:2b:47:60:30:2e:62:a1:cf:27:c2:bd:
25:7d:a6:60:d3:bb:35:8d:41:b8:1a:ef:5c:3b:fc:
c7:c0:4f:06:bc:2e:51:f2:9b:3f:a7:88:e7:d3:03:
d9:eb:e9:75:d8:30:df:f9:45:e7:13:8d:12:85:a7:
93:f3:97:3c:38:ba:b6:3c:d5:8a:fd:b1:67:5d:f1:
7e:1e:d1:cf:2d:17:bd:e9:04:dc:04:9e:f4:77:b3:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8F:D8:15:B9:18:C4:34:F5:2B:FD:B7:73:43:07:84:9B:A0:C7:EF
X509v3 Authority Key Identifier:
keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:8d:7d:e1:3c:14:37:8a:9b:11:34:cb:7e:a9:b7:ea:c6:b6:
f9:f1:a7:66:6f:ff:88:41:54:2a:ac:12:a1:61:59:b4:8b:06:
37:b5:df:a0:6e:5c:05:7c:e4:76:28:b5:03:45:92:5c:25:c7:
ac:dd:cb:b3:0e:fa:f0:a7:9d:33:a8:d3:9f:d3:2f:66:fd:17:
59:3a:0d:6c:a3:f7:b6:7d:4c:18:f8:59:f2:cd:4f:c5:d5:09:
97:a3:c3:17:a4:23:85:0b:72:f5:53:cc:dd:a9:52:8f:aa:7a:
5c:f1:19:a8:52:36:13:d6:40:29:41:31:1f:e9:c6:26:42:f1:
fa:26:86:98:85:12:fc:e5:bc:95:9a:76:ee:9f:a9:18:dd:d9:
e0:8b:74:68:c9:a6:af:4e:e2:2b:10:e1:5c:35:d8:3e:bd:69:
12:40:eb:37:05:5a:fa:87:35:c9:01:2b:87:7a:f2:95:b2:45:
9e:67:a9:36:3c:d2:09:60:06:8f:f2:b3:ac:b9:dc:b2:93:63:
85:67:36:c9:ef:63:7f:9b:f3:8d:51:b6:8c:41:32:f2:7e:7e:
38:0a:65:65:42:a9:7f:87:05:15:d3:51:3d:a1:d6:99:a1:85:
55:86:a5:43:1e:ef:ab:65:01:a6:d6:ea:57:24:a2:84:bf:37:
ef:8f:b1:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB
NDdDQjQ0REQwHhcNMjYwODE4MTkxNjQ1WhcNMjYwODI1MTkxNjQ1WjAYMRYwFAYD
VQQDEw02YTg0YWY5ZS02MzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAreAxkC0jcQ3mHSjihNK9wYjiqsHEkIxM22jVxzKlOXVNukQi5D5IAsiDiB8p
QE9uvnzteTZL6tzsrTYSrjCPzVY1Mlzx9PBhINllIe3YCHZRr4iJHNh5KVRr39/u
e6V3aC6FOgWHRIYt2MKMJI/GpawXqY3fGoCIW3CxBmt/ayOzet+kQ3H4ss5XNJus
nov3h2lzEJbTYD+pOlFRYSMqbDBpjYYzYkbsK0dgMC5ioc8nwr0lfaZg07s1jUG4
Gu9cO/zHwE8GvC5R8ps/p4jn0wPZ6+l12DDf+UXnE40ShaeT85c8OLq2PNWK/bFn
XfF+HtHPLRe96QTcBJ70d7Mf3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWP2BW5
GMQ09Sv9t3NDB4SboMfvMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3
NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS
TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk
Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARo194TwUN4qbETTLfqm36sa2+fGnZm//iEFUKqwSoWFZtIsGN7XfoG5cBXzk
dii1A0WSXCXHrN3Lsw768KedM6jTn9MvZv0XWToNbKP3tn1MGPhZ8s1PxdUJl6PD
F6QjhQty9VPM3alSj6p6XPEZqFI2E9ZAKUExH+nGJkLx+iaGmIUS/OW8lZp27p+p
GN3Z4It0aMmmr07iKxDhXDXYPr1pEkDrNwVa+oc1yQErh3rylbJFnmepNjzSCWAG
j/KzrLncspNjhWc2ye9jf5vzjVG2jEEy8n5+OAplZUKpf4cFFdNRPaHWmaGFVYal
Qx7vq2UBptbqVySihL8374+xkw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:00 2026 by rpki-client