
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json)
Hash identifier: PH6DSV7SWwA9I60EH2/Vvd0SSpwVbZzDfmgzbgjykis=
Subject key identifier: 1C:5A:69:CD:D2:6C:B8:9A:21:8B:95:6D:96:D0:DB:41:DB:A3:12:09
Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Certificate serial: 15F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
Manifest number: 15E1
Signing time: Wed 20 May 2026 16:43:57 +0000
Manifest this update: Wed 20 May 2026 16:43:57 +0000
Manifest next update: Wed 27 May 2026 16:43:57 +0000
Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: jtwEY7ibPLVNfIfCVZb9Jn+u4Y+eLg1PsorxG+8b5b0=)
2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: EPqw16UZs4OnmCADVn6Ufam9TmNvvzwwy0aV8LX+wk0=)
3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: TAyyXoTPcbbK7G+yCCqdnjIbOPrO1+rGTob4cAtBF5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5618 (0x15f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Validity
Not Before: May 20 16:43:57 2026 GMT
Not After : May 27 16:43:57 2026 GMT
Subject: CN=6a0de4cd-84b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:d3:80:b3:7a:d9:ce:ec:e6:f0:fa:aa:ed:
20:a9:9f:ed:45:c8:d1:03:23:13:67:10:cc:a9:86:
f9:2f:1e:59:5b:f3:14:f0:d7:78:35:3d:6c:9f:c5:
a9:8c:c2:99:4e:0f:64:aa:21:d8:3b:e3:72:e0:a0:
7a:20:c2:4e:45:df:25:13:87:c5:91:f1:12:a6:d3:
ea:02:f6:e5:04:9f:9c:ed:c4:cc:f9:5f:0e:a1:dd:
0c:79:d0:c5:7b:78:ea:1e:b1:0f:2d:c6:10:8a:7b:
e7:38:ac:e5:62:e0:78:91:44:a8:ea:0d:79:e5:ac:
6e:85:41:6d:87:d6:ae:a9:6a:fd:1e:7c:db:81:9f:
eb:24:74:dc:a0:5d:43:a7:7d:59:ec:62:a3:10:2e:
b0:da:c3:b5:e0:44:49:3e:ac:d2:2a:03:b2:fb:0a:
a9:64:13:0a:85:5b:c2:33:07:5d:85:f9:a0:40:71:
30:fb:e5:f7:cb:49:d1:08:0f:1d:cb:0e:20:20:3b:
6e:d7:01:a0:ab:72:f2:84:3d:8f:41:f5:71:66:08:
c1:99:de:89:1c:95:21:2f:c8:33:23:58:90:f1:dc:
f7:c8:0d:b1:8e:7f:2c:04:cb:da:dc:1a:b1:9e:b4:
7f:ea:ff:5f:ab:62:51:f6:ed:d9:f2:6a:3a:19:e7:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5A:69:CD:D2:6C:B8:9A:21:8B:95:6D:96:D0:DB:41:DB:A3:12:09
X509v3 Authority Key Identifier:
keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:19:fb:19:ce:22:5e:33:aa:e7:e3:36:05:b0:78:3c:ba:7f:
30:18:52:07:7b:ba:92:3b:dc:1d:ef:bd:05:94:da:7e:39:a1:
8f:fd:f8:e1:01:51:7e:2e:23:f4:05:a8:76:85:17:e1:04:a3:
7f:54:ca:98:fa:5e:07:65:0f:94:02:4e:ac:86:1c:80:7d:ba:
f3:28:4d:52:34:f5:2f:4e:1c:f2:fb:e7:37:e8:96:60:1e:88:
44:65:fb:78:2d:32:37:f9:d7:a8:85:e2:fe:32:e1:14:4f:83:
48:b8:4b:2a:2d:38:a2:f2:47:bd:31:ae:7f:3f:f9:8c:b9:2b:
6b:6f:c2:89:99:38:90:2e:e3:6c:50:1c:d5:ab:2e:a4:43:b1:
ab:67:30:21:7a:69:a1:2e:3d:4e:74:d6:a5:5e:0b:1d:5b:d9:
dd:99:fd:5b:d9:4f:85:74:ed:73:e6:0d:94:a0:4b:1e:9d:26:
ca:48:60:c0:4e:ba:b8:c4:0f:84:c4:59:96:11:e7:78:e2:05:
9d:81:d1:2b:49:75:9b:ab:5d:b8:a8:b3:8f:3a:14:a7:ce:75:
72:c2:f1:59:3c:e2:af:62:b8:6e:a2:bf:82:c8:cc:2b:49:98:
7d:5e:bf:92:9f:f0:30:a5:da:74:14:1e:1f:b7:db:3b:09:a8:
1a:e2:d3:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw
RkE4MjI0NjQwHhcNMjYwNTIwMTY0MzU3WhcNMjYwNTI3MTY0MzU3WjAYMRYwFAYD
VQQDEw02YTBkZTRjZC04NGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIvTgLN62c7s5vD6qu0gqZ/tRcjRAyMTZxDMqYb5Lx5ZW/MU8Nd4NT1sn8Wp
jMKZTg9kqiHYO+Ny4KB6IMJORd8lE4fFkfESptPqAvblBJ+c7cTM+V8Ood0MedDF
e3jqHrEPLcYQinvnOKzlYuB4kUSo6g155axuhUFth9auqWr9HnzbgZ/rJHTcoF1D
p31Z7GKjEC6w2sO14ERJPqzSKgOy+wqpZBMKhVvCMwddhfmgQHEw++X3y0nRCA8d
yw4gIDtu1wGgq3LyhD2PQfVxZgjBmd6JHJUhL8gzI1iQ8dz3yA2xjn8sBMva3Bqx
nrR/6v9fq2JR9u3Z8mo6GeciewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxaac3S
bLiaIYuVbZbQ20HboxIJMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3
RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK
R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX
R3o5QW10eXd3VHdQcUNKR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIBn7Gc4iXjOq5+M2BbB4PLp/MBhSB3u6kjvcHe+9BZTafjmhj/344QFRfi4j
9AWodoUX4QSjf1TKmPpeB2UPlAJOrIYcgH268yhNUjT1L04c8vvnN+iWYB6IRGX7
eC0yN/nXqIXi/jLhFE+DSLhLKi04ovJHvTGufz/5jLkra2/CiZk4kC7jbFAc1asu
pEOxq2cwIXppoS49TnTWpV4LHVvZ3Zn9W9lPhXTtc+YNlKBLHp0mykhgwE66uMQP
hMRZlhHneOIFnYHRK0l1m6tduKizjzoUp851csLxWTzir2K4bqK/gsjMK0mYfV6/
kp/wMKXadBQeH7fbOwmoGuLTYA==
-----END CERTIFICATE-----
Generated at Thu May 21 11:16:39 2026 by rpki-client