
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json)
Hash identifier: qEWAv2+WobAWAs5L1VLbCj6z21gRLlWV+g1+ShMJfos=
Subject key identifier: A8:91:69:F9:A4:88:71:A7:A5:9A:4C:6A:47:DD:37:A2:92:E3:70:BE
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial: 040A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
Manifest number: 03FA
Signing time: Tue 07 Apr 2026 00:13:24 +0000
Manifest this update: Tue 07 Apr 2026 00:13:24 +0000
Manifest next update: Tue 14 Apr 2026 00:13:24 +0000
Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: Z9EUuimmZSRa+vGSL+I0e7ZMQ9HjDAGlIBQ83XZrFeg=)
2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: M18r22Dfi6nMP8Zm1Hu9fqPiSXgEwNJEQtY8GIZmgdA=)
3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: FKnTP9sIRlwzNOVjIzWeUAaLIjQhiB2MOeVMrVthOl0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 00:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Validity
Not Before: Apr 7 00:13:24 2026 GMT
Not After : Apr 14 00:13:24 2026 GMT
Subject: CN=69d44c24-889e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:a6:80:70:a2:17:12:52:0d:fe:60:1e:07:
a2:2a:af:00:a4:f9:b2:8c:76:d0:72:96:55:14:7b:
7b:26:a9:a8:36:ba:be:2d:f8:1b:6b:bb:ad:3b:07:
4a:dc:31:fa:46:e8:9a:a3:05:31:5f:92:7b:7e:0a:
34:e0:aa:ad:65:f9:a2:f6:27:c2:e4:be:04:c9:c3:
42:dd:ec:78:a0:ae:b8:be:cf:87:95:b4:ab:12:9d:
60:52:20:3c:4f:d0:80:8b:55:84:7f:6e:79:46:82:
3c:56:49:bc:8c:59:b0:57:03:59:07:a4:c8:c6:04:
12:de:29:df:bf:24:12:ea:e2:31:62:2b:20:b3:f8:
a1:50:4a:1e:56:61:4f:91:e3:e7:b1:13:54:df:a5:
43:5b:e2:02:ce:57:de:52:cc:8c:65:2e:1b:a6:a7:
01:9b:74:e3:38:b5:4d:8e:f3:e9:9d:46:fe:a5:d6:
87:d7:c9:40:64:a5:a7:a2:67:2b:3f:4a:73:fd:9d:
b0:1f:4c:7c:18:56:67:e4:9f:30:39:85:b5:6b:c3:
c5:dd:c2:53:48:3c:d0:76:c9:29:7d:ce:1b:df:7f:
21:05:4a:f2:e3:a8:5e:83:3b:39:54:53:51:e2:59:
23:e1:cc:63:fe:67:ec:05:2c:32:02:46:63:08:36:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:91:69:F9:A4:88:71:A7:A5:9A:4C:6A:47:DD:37:A2:92:E3:70:BE
X509v3 Authority Key Identifier:
keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:88:02:a5:c7:d0:40:24:f5:05:16:a6:56:f7:8a:c5:16:91:
ba:74:b7:f5:45:3b:f4:cf:23:46:64:84:65:f6:0b:9f:a5:98:
65:8a:bd:be:24:86:42:83:da:93:82:db:04:84:9b:18:75:31:
a3:1e:3d:4e:94:f8:6c:ff:88:59:97:ae:03:8e:63:46:2f:dc:
8f:f1:35:a8:44:48:36:09:72:e1:a8:96:bd:ad:fd:a6:55:09:
96:5c:99:ed:5b:07:c4:ef:30:1d:a1:16:fd:f9:78:67:c9:a5:
9a:f6:81:95:f4:89:10:42:82:27:0c:b4:01:87:dd:fb:45:08:
ae:a7:c7:55:e6:0e:12:fb:6d:d2:75:89:cc:b7:b0:b0:66:84:
4d:d8:8d:e5:1f:75:b5:af:63:1f:9e:3b:59:58:22:fb:ce:ef:
e1:60:2c:ff:24:a0:a5:08:b9:0a:50:29:8f:97:9e:51:73:28:
da:fc:00:4d:05:30:16:42:66:cf:ca:d8:6e:99:32:f5:d6:d1:
3b:ef:9f:90:12:9d:a4:19:5a:cc:36:c3:14:b8:15:a2:62:2c:
23:f2:98:ba:b8:7c:37:40:65:b6:07:ff:ad:45:75:75:1f:63:
10:ba:a2:3b:36:dd:fa:0a:ec:aa:10:de:b8:ab:e5:a6:9f:29:
e7:cf:55:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4
Mjc5ODE0QTkwHhcNMjYwNDA3MDAxMzI0WhcNMjYwNDE0MDAxMzI0WjAYMRYwFAYD
VQQDEw02OWQ0NGMyNC04ODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA17SmgHCiFxJSDf5gHgeiKq8ApPmyjHbQcpZVFHt7JqmoNrq+Lfgba7utOwdK
3DH6RuiaowUxX5J7fgo04KqtZfmi9ifC5L4EycNC3ex4oK64vs+HlbSrEp1gUiA8
T9CAi1WEf255RoI8Vkm8jFmwVwNZB6TIxgQS3infvyQS6uIxYisgs/ihUEoeVmFP
kePnsRNU36VDW+ICzlfeUsyMZS4bpqcBm3TjOLVNjvPpnUb+pdaH18lAZKWnomcr
P0pz/Z2wH0x8GFZn5J8wOYW1a8PF3cJTSDzQdskpfc4b338hBUry46hegzs5VFNR
4lkj4cxj/mfsBSwyAkZjCDaqnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKiRafmk
iHGnpZpMakfdN6KS43C+MB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2
NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO
SUoyMFBjYUEtM2lDZVlGS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABIgCpcfQQCT1BRamVveKxRaRunS39UU79M8jRmSEZfYLn6WYZYq9viSGQoPa
k4LbBISbGHUxox49TpT4bP+IWZeuA45jRi/cj/E1qERINgly4aiWva39plUJllyZ
7VsHxO8wHaEW/fl4Z8mlmvaBlfSJEEKCJwy0AYfd+0UIrqfHVeYOEvtt0nWJzLew
sGaETdiN5R91ta9jH547WVgi+87v4WAs/ySgpQi5ClApj5eeUXMo2vwATQUwFkJm
z8rYbpky9dbRO++fkBKdpBlazDbDFLgVomIsI/KYurh8N0Bltgf/rUV1dR9jELqi
Ozbd+grsqhDeuKvlpp8p589VkQ==
-----END CERTIFICATE-----
Generated at Wed Apr 8 20:19:58 2026 by rpki-client