
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft
File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json)
Hash identifier: pk6OI5kprGNJCF9S1gVvCnstuLngxmmIZrgqG377daI=
Subject key identifier: DD:34:0C:35:B0:00:D3:D0:5D:6C:B5:05:E6:5E:EA:B9:1F:58:F1:E7
Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05
Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905
Certificate serial: 0B4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft
Manifest number: 0B3B
Signing time: Wed 20 May 2026 19:17:56 +0000
Manifest this update: Wed 20 May 2026 19:17:55 +0000
Manifest next update: Wed 27 May 2026 19:17:55 +0000
Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: xGGuH603zMXP78ZQa/Rk0g+sDGekk5L/yhvioXIsnUo=)
2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: 6y3yay/h++NSGBBxz/Y8FI7mavyuaqujeGQxUN1PwJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl
rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2892 (0xb4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905
Validity
Not Before: May 20 19:17:55 2026 GMT
Not After : May 27 19:17:55 2026 GMT
Subject: CN=6a0e08e3-0615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d8:a2:40:31:76:65:93:af:ba:50:9f:ed:95:
aa:ae:9b:79:5b:5f:6f:07:29:9e:a6:48:d6:9b:b5:
a4:ea:d5:d7:cf:b3:9f:0d:02:e0:2b:9b:6c:a2:0b:
0a:c2:e3:a2:f0:bc:cf:ff:84:8e:44:c2:76:d7:c2:
34:6a:11:e6:21:f3:aa:47:e5:81:6e:b7:ba:27:92:
ae:04:cb:0a:55:09:72:eb:23:67:d8:5b:ef:fc:aa:
74:77:d3:c8:fc:ce:75:ef:47:4c:51:d9:85:7c:96:
b4:7d:71:d6:44:20:3b:05:f6:8c:87:e3:0a:1f:f9:
85:a4:d2:b3:0d:db:88:0e:c2:d5:1c:03:37:b6:e6:
b5:70:1a:4e:19:e9:50:e5:15:27:95:af:b1:71:11:
41:e8:62:64:11:40:d1:2d:5b:63:41:23:4b:fe:c5:
4d:e1:1f:13:ff:c8:ad:43:e4:44:dc:70:7b:5c:f1:
df:d7:55:38:77:52:78:3c:30:00:f7:fd:3e:52:a0:
0b:1f:59:36:61:7f:54:a0:33:91:fb:51:4b:f2:c6:
f8:dd:24:8e:3b:c6:0d:0b:32:38:ca:6c:df:86:c1:
49:c0:6b:c6:a5:26:ca:bc:96:3e:15:d0:bb:d7:df:
de:cf:ae:8b:19:74:e8:c8:9f:cc:34:b5:97:9b:22:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:0C:35:B0:00:D3:D0:5D:6C:B5:05:E6:5E:EA:B9:1F:58:F1:E7
X509v3 Authority Key Identifier:
keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:aa:5e:43:ef:19:f9:c7:fa:93:6a:66:0d:59:3c:e4:e4:2c:
47:8c:cc:d0:0f:b3:a6:b3:26:ee:2c:43:46:0a:63:7b:0c:de:
a9:99:33:8f:51:5b:f0:04:6e:1b:9a:47:03:0d:72:75:30:88:
8f:d9:ec:8f:84:60:62:fc:fa:10:f8:ad:8e:34:ba:7c:db:4a:
23:b7:91:cc:4f:d3:b1:a5:b9:38:3c:d7:1d:08:0b:d4:2b:34:
de:ae:54:1d:9f:c5:bf:e9:60:b4:77:61:33:44:8d:aa:01:73:
3f:a8:68:c8:fc:82:eb:1d:fd:1b:ca:87:96:c2:d6:3a:55:ba:
31:72:93:23:ed:dd:f1:b5:d3:7b:3d:cd:4c:0d:54:7e:ac:5f:
5a:44:80:3a:06:f6:71:59:86:df:fe:e4:93:59:6a:48:05:d2:
74:f7:07:27:c4:76:3b:94:7c:5c:a6:b3:20:6e:03:43:fa:85:
19:0b:ec:f4:e1:44:21:57:7f:10:92:f6:1f:8d:dc:a9:42:7e:
34:c7:2a:9a:84:a1:72:77:00:71:47:e7:81:67:d5:5f:48:0a:
a3:42:83:80:13:6b:9d:02:a2:a5:bf:95:24:66:e4:cd:26:bd:
79:14:2d:07:a7:4e:cd:c6:63:46:12:db:eb:6d:fd:6f:1f:c3:
66:33:fa:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB
ODgwQzE5MDUwHhcNMjYwNTIwMTkxNzU1WhcNMjYwNTI3MTkxNzU1WjAYMRYwFAYD
VQQDEw02YTBlMDhlMy0wNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5NiiQDF2ZZOvulCf7ZWqrpt5W19vBymepkjWm7Wk6tXXz7OfDQLgK5tsogsK
wuOi8LzP/4SORMJ218I0ahHmIfOqR+WBbre6J5KuBMsKVQly6yNn2Fvv/Kp0d9PI
/M5170dMUdmFfJa0fXHWRCA7BfaMh+MKH/mFpNKzDduIDsLVHAM3tua1cBpOGelQ
5RUnla+xcRFB6GJkEUDRLVtjQSNL/sVN4R8T/8itQ+RE3HB7XPHf11U4d1J4PDAA
9/0+UqALH1k2YX9UoDOR+1FL8sb43SSOO8YNCzI4ymzfhsFJwGvGpSbKvJY+FdC7
19/ez66LGXToyJ/MNLWXmyIUBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN00DDWw
ANPQXWy1BeZe6rkfWPHnMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw
NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l
RHJBOU1TbHVPZnVvZ01HUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlapeQ+8Z+cf6k2pmDVk85OQsR4zM0A+zprMm7ixDRgpjewzeqZkzj1Fb8ARu
G5pHAw1ydTCIj9nsj4RgYvz6EPitjjS6fNtKI7eRzE/TsaW5ODzXHQgL1Cs03q5U
HZ/Fv+lgtHdhM0SNqgFzP6hoyPyC6x39G8qHlsLWOlW6MXKTI+3d8bXTez3NTA1U
fqxfWkSAOgb2cVmG3/7kk1lqSAXSdPcHJ8R2O5R8XKazIG4DQ/qFGQvs9OFEIVd/
EJL2H43cqUJ+NMcqmoShcncAcUfngWfVX0gKo0KDgBNrnQKipb+VJGbkzSa9eRQt
B6dOzcZjRhLb6239bx/DZjP6lg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:27:39 2026 by rpki-client