
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json)
Hash identifier: Fk1P7teNdmIT4vR4+K1v0FEdgccosK0JwJipm5LJ0Qk=
Subject key identifier: 74:38:D2:17:EE:E5:9D:8F:AF:1F:2F:3F:9A:40:12:11:78:4E:AC:A2
Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Certificate serial: 0216
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
Manifest number: 020D
Signing time: Mon 27 Apr 2026 02:51:50 +0000
Manifest this update: Mon 27 Apr 2026 02:51:49 +0000
Manifest next update: Mon 04 May 2026 02:51:49 +0000
Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: +uROl9DdCKuDccrUdZ6SHl6BmphB+QUJ8fB3YgIEKKc=)
2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: yd8nZQYXpuBuXMJow036oPSXKDSenHOrq9DNYBNpxgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 02:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00
Validity
Not Before: Apr 27 02:51:49 2026 GMT
Not After : May 4 02:51:49 2026 GMT
Subject: CN=69eecf46-2368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:ef:57:a6:26:bd:2a:fc:f1:13:83:bb:35:
8b:96:7f:cb:2d:cb:90:97:0b:4b:be:76:54:fe:db:
57:49:e9:93:d7:93:03:f4:44:a0:11:18:b0:9f:73:
71:e3:7f:55:44:99:cc:42:34:06:c6:7d:36:56:64:
68:c4:5a:ed:23:6c:1b:bc:dd:ac:de:9f:5d:c8:26:
1d:5c:6a:f9:d0:5c:2a:4b:cb:c8:fa:3c:5e:7f:7e:
f3:02:9a:a2:d6:1e:4a:1b:4c:82:fd:fc:4d:0c:a6:
85:ba:64:f6:d0:ab:2e:47:e3:6b:01:90:49:2f:a1:
25:15:59:92:a9:79:ce:61:14:5b:79:70:0b:ed:fa:
fe:b3:8e:77:67:d1:36:e8:a6:5e:2d:4c:be:50:dd:
06:f7:70:06:5f:72:65:44:63:fa:39:93:ab:6c:7b:
39:b2:a7:89:0c:df:31:90:2b:85:ce:8c:11:90:e1:
33:0d:3a:4c:8f:ba:61:0d:50:b5:d7:db:5c:26:10:
0b:d7:81:83:8b:f4:bf:fb:6c:87:e4:b9:26:44:f8:
b4:51:dc:e4:39:31:f2:d5:8e:ba:bc:16:4b:00:ba:
b5:b0:ad:e5:53:a2:df:53:65:6f:34:af:b9:26:28:
c4:6e:4f:52:55:64:71:38:44:61:6d:cb:e9:bd:87:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:D2:17:EE:E5:9D:8F:AF:1F:2F:3F:9A:40:12:11:78:4E:AC:A2
X509v3 Authority Key Identifier:
keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e9:28:b3:d7:a2:f0:7f:3e:9d:19:26:c1:2b:08:cc:3b:16:
bc:7e:a5:a8:9b:66:19:ca:9c:7f:bb:7b:8a:e2:cd:25:a7:ca:
67:30:58:65:7f:8b:ed:ad:de:6e:5b:35:3e:4f:40:9d:9e:07:
7d:17:fb:f8:22:70:9d:36:00:0f:8d:5e:7f:9e:dd:05:84:6c:
9b:d5:0a:7c:d6:11:63:23:d3:60:50:7e:c6:6a:bd:f8:01:32:
71:07:1a:07:bb:f6:51:9a:6f:bb:c7:69:b6:8e:7e:5e:4a:87:
54:37:8f:3b:27:0e:3f:b8:f3:10:2c:38:4e:21:89:40:6d:68:
62:74:28:f8:74:8b:f5:22:2e:c6:da:89:c9:dd:6c:b0:11:b2:
fb:9d:25:7d:82:89:ce:4f:e2:a4:d2:cd:9f:eb:fc:2d:f5:bf:
d6:00:8b:6b:1c:aa:0b:b9:d8:73:64:f3:86:04:8b:74:0c:93:
b4:ea:09:bb:4a:00:e1:6d:1a:a2:c4:0f:65:ad:cf:d5:74:cc:
2a:d5:55:ec:a2:38:9f:26:05:8a:51:b4:8c:ca:b1:a9:e4:74:
81:c1:e6:5f:fa:ba:74:4b:01:e9:6f:15:b1:2b:20:47:ce:ae:
22:d9:38:0c:1d:c6:d9:4c:30:3d:08:42:04:7d:82:c2:c3:8d:
ad:08:8c:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2
QUFDN0JCMDAwHhcNMjYwNDI3MDI1MTQ5WhcNMjYwNTA0MDI1MTQ5WjAYMRYwFAYD
VQQDEw02OWVlY2Y0Ni0yMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/bvV6YmvSr88RODuzWLln/LLcuQlwtLvnZU/ttXSemT15MD9ESgERiwn3Nx
439VRJnMQjQGxn02VmRoxFrtI2wbvN2s3p9dyCYdXGr50FwqS8vI+jxef37zApqi
1h5KG0yC/fxNDKaFumT20KsuR+NrAZBJL6ElFVmSqXnOYRRbeXAL7fr+s453Z9E2
6KZeLUy+UN0G93AGX3JlRGP6OZOrbHs5sqeJDN8xkCuFzowRkOEzDTpMj7phDVC1
19tcJhAL14GDi/S/+2yH5LkmRPi0UdzkOTHy1Y66vBZLALq1sK3lU6LfU2VvNK+5
JijEbk9SVWRxOERhbcvpvYdnuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQ40hfu
5Z2Prx8vP5pAEhF4TqyiMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB
QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw
TXYyZ0hBdjZZbTlxckh1d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnOkos9ei8H8+nRkmwSsIzDsWvH6lqJtmGcqcf7t7iuLNJafKZzBYZX+L7a3e
bls1Pk9AnZ4HfRf7+CJwnTYAD41ef57dBYRsm9UKfNYRYyPTYFB+xmq9+AEycQca
B7v2UZpvu8dpto5+XkqHVDePOycOP7jzECw4TiGJQG1oYnQo+HSL9SIuxtqJyd1s
sBGy+50lfYKJzk/ipNLNn+v8LfW/1gCLaxyqC7nYc2TzhgSLdAyTtOoJu0oA4W0a
osQPZa3P1XTMKtVV7KI4nyYFilG0jMqxqeR0gcHmX/q6dEsB6W8VsSsgR86uItk4
DB3G2UwwPQhCBH2CwsONrQiMag==
-----END CERTIFICATE-----
Generated at Wed Apr 29 00:00:58 2026 by rpki-client