
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json)
Hash identifier: NwITAk96eDzSa7NeN6YVsCdHJucEKUggSMCMiJyZBis=
Subject key identifier: B8:40:59:BF:0B:27:0A:E0:88:07:3E:3B:AD:C5:6B:BD:26:7F:E8:4D
Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B
Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
Manifest number: 0105
Signing time: Tue 02 Jun 2026 14:36:50 +0000
Manifest this update: Tue 02 Jun 2026 14:36:49 +0000
Manifest next update: Tue 09 Jun 2026 14:36:49 +0000
Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: 8MpDXHUgGrQNg7Lmo8PdLSMTFbZQqkW0NiX8LZZo1SE=)
2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: CNoBDdWKHlS5zMcPnKORydFQCwgOqUzsqQv9svT1ja4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl
rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 14:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B
Validity
Not Before: Jun 2 14:36:49 2026 GMT
Not After : Jun 9 14:36:49 2026 GMT
Subject: CN=6a1eea82-1a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:10:66:35:10:25:4f:9f:e2:f7:a9:19:46:
60:59:70:e4:7b:6c:ea:30:d5:5b:77:81:67:44:29:
05:eb:57:81:ca:4b:96:4b:cc:a8:96:67:ac:f6:1b:
03:74:84:cf:d8:ec:50:0e:42:64:64:f0:96:3d:91:
38:74:75:b7:70:89:fd:f9:cc:75:12:7c:55:1b:76:
2f:41:68:a5:d8:f3:ff:05:4d:43:a8:07:b6:cb:61:
b7:48:dc:b9:88:ab:e1:b9:f8:0c:45:53:f4:58:28:
20:18:fa:af:35:d0:46:26:fc:af:26:e7:af:ab:15:
1c:aa:56:8f:70:a9:55:fc:0b:75:7b:03:05:31:d1:
28:c0:66:5b:fa:b7:7b:73:b8:0a:8f:b3:8d:59:11:
98:0c:84:39:11:c2:e3:29:93:9f:ed:c1:3a:46:a7:
6e:06:f1:03:44:bc:bd:43:53:13:c3:f3:a4:74:cc:
b9:f9:f1:4a:4f:27:91:77:27:4d:8e:00:d3:0f:05:
bf:82:de:0f:3a:b2:03:26:f3:fb:f4:e9:b2:07:80:
b2:d1:12:0a:36:3d:e6:3e:74:04:79:f2:a0:cd:9f:
f0:a1:64:db:2b:ae:b2:8b:e7:72:92:22:9f:95:88:
56:22:31:4b:67:b5:19:25:89:83:b3:e6:6d:1d:f5:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:59:BF:0B:27:0A:E0:88:07:3E:3B:AD:C5:6B:BD:26:7F:E8:4D
X509v3 Authority Key Identifier:
keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e3:a5:1d:b1:2e:0d:be:1e:de:99:94:88:da:01:55:3f:f2:
e5:ff:fb:68:ad:b3:71:62:28:9c:10:68:81:9d:cf:df:a3:6c:
41:64:c4:d9:a4:33:e3:01:a3:3e:33:d3:3b:5c:ef:82:fc:cf:
d4:fa:a5:f1:5d:89:c2:9f:8f:88:f0:e3:82:f3:11:f4:0c:2e:
e9:38:59:00:b2:04:a8:ff:6b:19:11:48:0c:8a:ac:69:b9:3e:
0b:44:bb:96:46:4d:b6:7f:ab:76:88:6c:00:c6:d9:96:1e:75:
69:6c:fe:d9:19:8a:65:a9:83:ed:26:d6:f7:6d:01:fc:cc:97:
5b:f3:dd:18:60:e3:c2:55:04:aa:de:35:e3:29:78:a3:ad:29:
3a:57:36:b4:03:02:2d:14:b4:58:c5:6e:37:a6:0a:52:cc:8b:
70:f4:1f:7b:65:09:c4:5b:60:68:0d:17:be:11:c6:47:0b:25:
3d:33:52:b8:05:cd:f1:db:d9:14:a1:74:77:23:0c:cd:cf:d5:
e6:17:6a:61:be:4a:a5:a0:7d:a5:99:f2:0d:83:83:d6:dd:f2:
01:6e:82:b2:32:7c:b3:a6:c7:9e:0f:56:f7:85:47:1b:27:f6:
22:9a:1a:ac:f9:77:20:4c:79:c1:a7:9c:a7:5c:9a:0a:19:97:
aa:ee:aa:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE4OTgxMTAvBgNVBAUTKEZERTc0Q0QxNjU2RDRFQ0FGMkIwRTZCQkMzMTM1RDRF
Qjg0MDc4MkIwHhcNMjYwNjAyMTQzNjQ5WhcNMjYwNjA5MTQzNjQ5WjAYMRYwFAYD
VQQDEw02YTFlZWE4Mi0xYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5wQZjUQJU+f4vepGUZgWXDke2zqMNVbd4FnRCkF61eBykuWS8yolmes9hsD
dITP2OxQDkJkZPCWPZE4dHW3cIn9+cx1EnxVG3YvQWil2PP/BU1DqAe2y2G3SNy5
iKvhufgMRVP0WCggGPqvNdBGJvyvJuevqxUcqlaPcKlV/At1ewMFMdEowGZb+rd7
c7gKj7ONWRGYDIQ5EcLjKZOf7cE6RqduBvEDRLy9Q1MTw/OkdMy5+fFKTyeRdydN
jgDTDwW/gt4POrIDJvP79OmyB4Cy0RIKNj3mPnQEefKgzZ/woWTbK66yi+dykiKf
lYhWIjFLZ7UZJYmDs+ZtHfUJPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhAWb8L
JwrgiAc+O63Fa70mf+hNMB8GA1UdIwQYMBaAFP3nTNFlbU7K8rDmu8MTXU64QHgr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC80MDdBMjVFQUQ4
N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRzcnlzT2E3d3hOZFRyaEFl
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTg5OC80MDdBMjVFQUQ4N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRz
cnlzT2E3d3hOZFRyaEFlQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK+OlHbEuDb4e3pmUiNoBVT/y5f/7aK2zcWIonBBogZ3P36NsQWTE2aQz4wGj
PjPTO1zvgvzP1Pql8V2Jwp+PiPDjgvMR9Awu6ThZALIEqP9rGRFIDIqsabk+C0S7
lkZNtn+rdohsAMbZlh51aWz+2RmKZamD7SbW920B/MyXW/PdGGDjwlUEqt414yl4
o60pOlc2tAMCLRS0WMVuN6YKUsyLcPQfe2UJxFtgaA0XvhHGRwslPTNSuAXN8dvZ
FKF0dyMMzc/V5hdqYb5KpaB9pZnyDYOD1t3yAW6CsjJ8s6bHng9W94VHGyf2Ipoa
rPl3IEx5waecp1yaChmXqu6q9g==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:02 2026 by rpki-client