
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File: fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier: R7JPpbrfW0zOSlEjBNhSqnEfCaAr+J3ldA+NM5LSF7o=
Subject key identifier: 37:CC:59:8C:72:A3:16:B9:45:3B:FA:A1:F6:DA:AA:D6:96:07:E3:E3
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer: /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial: 09A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number: 0997
Signing time: Thu 04 Jun 2026 20:02:01 +0000
Manifest this update: Thu 04 Jun 2026 20:02:00 +0000
Manifest next update: Thu 11 Jun 2026 20:02:00 +0000
Files and hashes: 1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: +0AdPYJP2m1gOz8O25MkD7fnSZiNZQievPbkNV3UJNk=)
2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 20:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464 (0x9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Validity
Not Before: Jun 4 20:02:00 2026 GMT
Not After : Jun 11 20:02:00 2026 GMT
Subject: CN=6a21d9b9-6af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:ef:df:db:92:08:7c:f6:5b:bf:d4:d5:a7:
4e:2a:4d:ba:79:a4:a5:88:b6:18:cb:f1:fe:9b:aa:
2e:a5:4b:8a:7e:3f:8d:aa:d8:3f:aa:08:44:f2:c5:
26:01:bd:24:aa:e4:d2:b2:3d:88:8a:85:4a:66:9e:
96:41:83:2c:f3:14:00:eb:a0:be:01:db:b8:7e:af:
fc:e1:a5:d3:09:66:e1:b1:6e:2f:fe:8b:4a:c2:55:
58:7b:0e:23:a8:8a:83:44:82:7e:f2:63:6a:ab:8a:
08:ed:86:2a:70:5d:f4:98:e5:d1:db:b7:5a:f3:2c:
ba:f3:79:c8:e2:af:d5:ed:32:47:2e:fa:59:d1:3d:
1c:61:22:38:0a:65:fd:eb:e8:b0:e5:07:cb:3d:d3:
83:61:81:98:5c:47:e5:f5:c3:27:7d:cf:a5:03:43:
38:ef:e5:a9:cd:69:fd:4e:3a:40:e1:4e:e0:6d:e4:
f4:b6:a9:e4:a1:d2:3c:67:dd:6b:19:8f:53:bb:46:
72:d8:32:98:9a:fa:a2:51:61:62:f4:d5:50:5b:04:
cd:81:64:5a:9b:d6:9b:53:5d:c1:2d:e2:26:64:74:
9e:01:ac:77:27:4d:e2:da:f4:d2:55:29:9d:59:e6:
19:8d:70:6a:86:d7:40:de:05:f1:14:68:eb:c9:45:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CC:59:8C:72:A3:16:B9:45:3B:FA:A1:F6:DA:AA:D6:96:07:E3:E3
X509v3 Authority Key Identifier:
keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:dc:b1:05:33:67:03:2a:f7:b3:33:ec:40:88:7f:05:a8:aa:
e2:5f:d6:16:6d:88:e7:a0:cd:95:32:26:ec:7a:a4:d1:21:d3:
b4:60:d1:70:f3:29:e9:8b:f3:3b:c4:b5:3d:68:92:c5:7c:97:
ab:e3:6c:09:58:17:bc:2b:8b:36:16:1b:20:b6:e9:51:70:a6:
3c:8f:76:a5:66:dd:fe:fc:28:29:1e:ca:11:4e:58:18:69:88:
06:ef:41:1e:a4:c6:0b:48:f4:7f:c3:c4:8f:4b:af:4c:4b:73:
37:33:8f:b2:61:27:a9:0a:3b:33:fa:af:d4:cf:b1:f8:93:5e:
7d:07:6b:3d:5a:51:a3:76:5a:5a:1d:45:43:e5:7a:ee:f6:57:
f3:6a:ec:3e:1e:af:94:a6:15:b8:22:8d:0e:aa:e0:a3:96:c3:
05:5b:8f:a4:05:06:b1:dc:84:b0:5f:30:a1:a6:d7:fb:4a:b2:
b2:7f:32:68:aa:29:a4:cf:5b:d9:8e:e9:76:80:a7:85:20:fe:
f1:63:21:44:0f:ab:31:49:46:fb:fe:87:bb:63:aa:f6:af:dd:
3d:dd:a5:52:0d:1e:e5:6d:09:35:38:83:70:8d:82:34:7d:f6:
98:3f:19:29:d0:c3:d5:12:24:fd:82:aa:c3:d9:75:b1:2c:53:
92:88:3c:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVFMjMxMTAvBgNVBAUTKDdFRjJFQzMzMUJENjU0M0QzMkRCOTgwQzUwNjI2QzA0
MDdDQTg5ODIwHhcNMjYwNjA0MjAwMjAwWhcNMjYwNjExMjAwMjAwWjAYMRYwFAYD
VQQDEw02YTIxZDliOS02YWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+Lv39uSCHz2W7/U1adOKk26eaSliLYYy/H+m6oupUuKfj+Nqtg/qghE8sUm
Ab0kquTSsj2IioVKZp6WQYMs8xQA66C+Adu4fq/84aXTCWbhsW4v/otKwlVYew4j
qIqDRIJ+8mNqq4oI7YYqcF30mOXR27da8yy683nI4q/V7TJHLvpZ0T0cYSI4CmX9
6+iw5QfLPdODYYGYXEfl9cMnfc+lA0M47+WpzWn9TjpA4U7gbeT0tqnkodI8Z91r
GY9Tu0Zy2DKYmvqiUWFi9NVQWwTNgWRam9abU13BLeImZHSeAax3J03i2vTSVSmd
WeYZjXBqhtdA3gXxFGjryUVwaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfMWYxy
oxa5RTv6ofbaqtaWB+PjMB8GA1UdIwQYMBaAFH7y7DMb1lQ9MtuYDFBibAQHyomC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUUyMy84NjJBODNDQUIw
NzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZEMHkyNWdNVUdKc0JBZktp
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z2THNNeHZXVkQweTI1Z01VR0pzQkFmS2lZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUUyMy84NjJBODNDQUIwNzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZE
MHkyNWdNVUdKc0JBZktpWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMNyxBTNnAyr3szPsQIh/Baiq4l/WFm2I56DNlTIm7Hqk0SHTtGDRcPMp6Yvz
O8S1PWiSxXyXq+NsCVgXvCuLNhYbILbpUXCmPI92pWbd/vwoKR7KEU5YGGmIBu9B
HqTGC0j0f8PEj0uvTEtzNzOPsmEnqQo7M/qv1M+x+JNefQdrPVpRo3ZaWh1FQ+V6
7vZX82rsPh6vlKYVuCKNDqrgo5bDBVuPpAUGsdyEsF8woabX+0qysn8yaKoppM9b
2Y7pdoCnhSD+8WMhRA+rMUlG+/6Hu2Oq9q/dPd2lUg0e5W0JNTiDcI2CNH32mD8Z
KdDD1RIk/YKqw9l1sSxTkog8RQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 17:21:53 2026 by rpki-client