
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json)
Hash identifier: A0QZlAz7VPwEV6Vs76B+NyL7hy433nNUp01FK78Gsqs=
Subject key identifier: CB:4E:2D:93:A7:D2:0A:5E:E0:37:5C:09:76:E4:76:BC:80:33:42:EA
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial: 1592
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
Manifest number: 157F
Signing time: Tue 02 Jun 2026 15:32:40 +0000
Manifest this update: Tue 02 Jun 2026 15:32:39 +0000
Manifest next update: Tue 09 Jun 2026 15:32:39 +0000
Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: uucKE+BQjHxgABBygo1yMCU0vprl2uooStpAe+KCMhQ=)
2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: u9MFRcdbqfRuHXnWgmZPMWeGTqzUW3xkFzMNAHNNk68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5522 (0x1592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Validity
Not Before: Jun 2 15:32:39 2026 GMT
Not After : Jun 9 15:32:39 2026 GMT
Subject: CN=6a1ef797-4743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:3e:18:a2:ed:a7:0c:81:e7:40:ce:30:c4:
c6:0f:c1:a8:c1:8a:1d:01:87:4d:fa:ad:4e:74:fd:
0f:4d:76:72:f1:4b:1c:b9:ae:f6:7a:ee:e8:ba:09:
90:3c:00:df:43:ce:59:71:83:a2:bc:62:7b:af:41:
7d:c7:d4:2b:3f:14:50:82:6e:ad:d3:96:1b:8c:42:
c0:ae:54:6e:30:de:af:d7:23:7a:20:ad:ea:1b:d4:
b5:12:6d:d0:7c:e9:73:53:98:86:15:0e:ed:70:99:
e5:d3:8a:cb:11:a7:cf:fc:97:28:98:05:47:d0:b8:
bd:1f:52:a5:a1:e7:b1:83:77:7c:ae:16:9f:5c:9b:
0e:b1:1d:78:b5:ae:06:a9:4c:91:15:52:0a:f6:60:
d9:a8:97:af:24:65:d4:24:61:f8:13:ec:e5:ff:23:
18:b0:f0:7b:db:8b:0f:52:6c:b9:3f:bd:d2:ee:ae:
7e:36:e2:4b:c1:63:b7:30:7d:4b:45:cc:7c:79:39:
a0:5a:5e:f5:f5:f4:01:6d:75:7c:ce:36:aa:d5:bd:
d2:30:3e:d5:36:6f:fc:1b:21:21:84:b4:4d:04:3e:
ee:3c:8f:30:8a:86:61:91:0b:27:40:d8:63:73:8a:
81:27:cf:40:35:8b:d5:6b:5b:b7:37:3c:3d:c3:c1:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:2D:93:A7:D2:0A:5E:E0:37:5C:09:76:E4:76:BC:80:33:42:EA
X509v3 Authority Key Identifier:
keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:54:39:ca:97:e7:42:84:6f:2a:8d:7a:1d:de:ed:9e:c2:aa:
9d:a9:36:7e:84:e8:94:e8:36:fa:37:6f:db:72:70:96:44:03:
70:34:1d:0e:56:61:2c:8f:cd:14:f0:c4:41:43:b2:5d:a1:bd:
a6:ec:f9:92:46:58:d2:d6:57:a3:b6:20:6b:d7:2c:73:78:e1:
6e:da:7f:74:4b:7e:63:e8:50:1e:f0:8e:df:40:9b:fd:ef:37:
3e:fe:50:2f:31:f9:f5:8c:d1:05:58:da:ee:5f:24:ae:66:1d:
d1:ef:ad:fe:99:af:66:05:90:1d:ac:8f:61:59:d1:3e:e1:c9:
5b:74:46:3f:47:af:24:e1:cb:a0:7e:d8:8f:95:78:79:80:f8:
be:17:2c:d7:1c:59:62:f9:bb:29:ef:4b:be:04:10:97:31:69:
91:dc:f7:8a:5c:c1:23:99:02:d8:67:2e:39:c9:bf:c5:c5:75:
15:5e:a8:96:5e:f8:a1:af:94:73:3a:d1:04:08:7f:f7:e3:ad:
40:da:63:5d:95:91:37:eb:97:01:77:52:f7:b8:19:c9:1b:a3:
04:8c:73:a1:0c:d4:20:17:6e:15:e3:3d:4b:1d:1e:a2:3a:aa:
b6:2a:81:c4:3c:0a:f1:49:a0:5b:e0:66:b6:9e:f6:02:74:e3:
b0:db:92:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0
RTY5OURERjQwHhcNMjYwNjAyMTUzMjM5WhcNMjYwNjA5MTUzMjM5WjAYMRYwFAYD
VQQDEw02YTFlZjc5Ny00NzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmVs+GKLtpwyB50DOMMTGD8GowYodAYdN+q1OdP0PTXZy8Uscua72eu7ougmQ
PADfQ85ZcYOivGJ7r0F9x9QrPxRQgm6t05YbjELArlRuMN6v1yN6IK3qG9S1Em3Q
fOlzU5iGFQ7tcJnl04rLEafP/JcomAVH0Li9H1Kloeexg3d8rhafXJsOsR14ta4G
qUyRFVIK9mDZqJevJGXUJGH4E+zl/yMYsPB724sPUmy5P73S7q5+NuJLwWO3MH1L
Rcx8eTmgWl719fQBbXV8zjaq1b3SMD7VNm/8GyEhhLRNBD7uPI8wioZhkQsnQNhj
c4qBJ89ANYvVa1u3Nzw9w8GiKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtOLZOn
0gpe4DdcCXbkdryAM0LqMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD
QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H
N3EwR0liZ2o3UTlPYVozZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhVQ5ypfnQoRvKo16Hd7tnsKqnak2foTolOg2+jdv23JwlkQDcDQdDlZhLI/N
FPDEQUOyXaG9puz5kkZY0tZXo7Yga9csc3jhbtp/dEt+Y+hQHvCO30Cb/e83Pv5Q
LzH59YzRBVja7l8krmYd0e+t/pmvZgWQHayPYVnRPuHJW3RGP0evJOHLoH7Yj5V4
eYD4vhcs1xxZYvm7Ke9LvgQQlzFpkdz3ilzBI5kC2GcuOcm/xcV1FV6oll74oa+U
czrRBAh/9+OtQNpjXZWRN+uXAXdS97gZyRujBIxzoQzUIBduFeM9Sx0eojqqtiqB
xDwK8UmgW+Bmtp72AnTjsNuSwA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:02 2026 by rpki-client