
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
File: 1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json)
Hash identifier: RFQ+FlJ2Q+olbMBpNZUO69UQFW9sx0KRtnHAsuNIMmA=
Subject key identifier: EC:6C:00:97:25:C2:4F:6D:B2:F7:A3:A8:61:79:10:F8:D4:F2:A5:A6
Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8
Certificate issuer: /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
Manifest number: 0141
Signing time: Sun 05 Apr 2026 04:44:23 +0000
Manifest this update: Sun 05 Apr 2026 04:44:22 +0000
Manifest next update: Sun 12 Apr 2026 04:44:22 +0000
Files and hashes: 1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: k2ITMBDDefuG7B/RmFrFXTEMuhiujxm5wxPB+2NXrt0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl
rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
Validity
Not Before: Apr 5 04:44:22 2026 GMT
Not After : Apr 12 04:44:22 2026 GMT
Subject: CN=69d1e8a6-e20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:8a:54:be:56:f3:52:8b:95:1b:2c:99:b5:
c8:0e:0a:5d:9d:ef:71:3e:16:71:b2:28:84:72:c6:
1a:f3:1d:f6:c2:4f:bd:fb:a7:ad:fa:da:1f:2c:70:
0d:64:49:dd:c2:a3:56:3d:75:57:6a:f0:d8:17:5c:
a9:f2:48:68:ce:c2:7e:66:fc:39:ee:b4:19:c2:38:
c1:bb:e2:17:0f:82:37:99:65:a5:61:48:13:ba:29:
31:3a:1b:38:13:e6:a2:52:cd:0c:67:5a:6a:d8:94:
ed:3b:1d:34:a8:c3:ec:23:97:2c:40:6d:81:97:1c:
de:a1:18:9a:f8:b0:4b:e9:00:df:e8:0b:fa:6e:ae:
e0:61:86:de:e6:7f:81:36:c9:0e:fc:b0:ae:2f:f0:
ce:0d:28:36:a3:3f:f5:eb:11:d7:87:4b:ff:cc:ce:
1c:55:be:fb:b2:3d:e3:69:d3:62:9e:d9:de:19:1a:
85:65:5e:1a:e9:c3:72:22:de:05:9f:19:08:37:f0:
0f:3c:e7:99:99:63:eb:90:55:25:57:4a:e4:29:4e:
ae:7c:1b:ff:32:86:84:d3:54:22:aa:bc:17:a4:62:
77:aa:d9:92:2e:d2:ff:ec:19:73:18:61:cd:9d:16:
79:0f:45:d7:bc:06:26:b0:75:f3:d6:e9:54:89:53:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:00:97:25:C2:4F:6D:B2:F7:A3:A8:61:79:10:F8:D4:F2:A5:A6
X509v3 Authority Key Identifier:
keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:97:38:6e:4c:ad:51:3c:de:10:fd:d3:d9:c1:fe:fa:23:da:
39:8b:6e:f3:1e:0c:a7:f3:ef:8b:55:37:9d:86:43:60:5a:f6:
6c:c3:54:15:9c:2f:38:49:6f:bd:3a:82:d3:5d:c3:bd:d3:d7:
09:e6:0b:91:8e:c1:28:83:a3:58:ca:26:bf:cf:38:bb:74:58:
31:a8:7a:95:c4:7b:d8:bd:ed:51:95:5f:e0:16:9d:7a:b7:c8:
50:5c:00:d8:94:ef:7f:2f:f7:09:f6:cc:ff:d0:8d:94:53:c7:
a6:b4:ec:8f:27:83:86:ad:ba:57:52:c7:f3:70:ff:8d:e5:2e:
84:ce:e7:01:bc:ce:29:a4:82:a8:54:98:b2:23:c9:65:c0:52:
e5:81:46:0c:32:5f:7a:b6:f5:b9:8c:5a:34:b5:7b:64:d0:f1:
bd:ef:dd:b6:34:e8:41:06:19:8e:d1:38:fe:97:0d:f5:a5:0e:
7a:87:15:5c:f2:ac:49:ca:be:3e:fe:2d:4e:53:fd:de:83:10:
fd:c3:48:3e:21:d2:5c:38:9d:f3:b4:a3:10:da:f3:7d:fd:c0:
cb:94:d3:ee:5d:5f:22:e2:2f:40:68:ef:66:07:74:b5:cd:d8:
04:79:ea:26:c9:8c:91:07:86:be:d0:4f:7d:1a:2a:4e:29:42:
c6:76:d9:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw
NjFEQzU4RjgwHhcNMjYwNDA1MDQ0NDIyWhcNMjYwNDEyMDQ0NDIyWjAYMRYwFAYD
VQQDEw02OWQxZThhNi1lMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1KKVL5W81KLlRssmbXIDgpdne9xPhZxsiiEcsYa8x32wk+9+6et+tofLHAN
ZEndwqNWPXVXavDYF1yp8khozsJ+Zvw57rQZwjjBu+IXD4I3mWWlYUgTuikxOhs4
E+aiUs0MZ1pq2JTtOx00qMPsI5csQG2BlxzeoRia+LBL6QDf6Av6bq7gYYbe5n+B
NskO/LCuL/DODSg2oz/16xHXh0v/zM4cVb77sj3jadNintneGRqFZV4a6cNyIt4F
nxkIN/APPOeZmWPrkFUlV0rkKU6ufBv/MoaE01QiqrwXpGJ3qtmSLtL/7BlzGGHN
nRZ5D0XXvAYmsHXz1ulUiVOM4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxsAJcl
wk9tsvejqGF5EPjU8qWmMB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3
REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R
VjgxT2c3NC10WDhHSGNXUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS5c4bkytUTzeEP3T2cH++iPaOYtu8x4Mp/Pvi1U3nYZDYFr2bMNUFZwvOElv
vTqC013DvdPXCeYLkY7BKIOjWMomv884u3RYMah6lcR72L3tUZVf4BaderfIUFwA
2JTvfy/3CfbM/9CNlFPHprTsjyeDhq26V1LH83D/jeUuhM7nAbzOKaSCqFSYsiPJ
ZcBS5YFGDDJferb1uYxaNLV7ZNDxve/dtjToQQYZjtE4/pcN9aUOeocVXPKsScq+
Pv4tTlP93oMQ/cNIPiHSXDid87SjENrzff3Ay5TT7l1fIuIvQGjvZgd0tc3YBHnq
JsmMkQeGvtBPfRoqTilCxnbZSg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:20 2026 by rpki-client