
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
File: F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json)
Hash identifier: yjMil69chhW3t5fehCBdcs05ItEJ+iuZnyikDaJcKKc=
Subject key identifier: 43:7C:6B:AD:0D:F2:F2:1A:9D:DB:83:5B:4B:2D:7E:F5:D9:E8:5E:DB
Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
Certificate issuer: /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
Manifest number: 0154
Signing time: Tue 23 Jun 2026 05:23:39 +0000
Manifest this update: Tue 23 Jun 2026 05:23:39 +0000
Manifest next update: Tue 30 Jun 2026 05:23:39 +0000
Files and hashes: 1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: MHhQtDHB6fQdkebLgMTMbrGNatpXzQRnjoYEc/RL54s=)
2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: Sy6cRszkN1joBse3YSNJ6ZAfwoikvcSiyyXdPrmFTpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Validity
Not Before: Jun 23 05:23:39 2026 GMT
Not After : Jun 30 05:23:39 2026 GMT
Subject: CN=6a3a185b-2a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:b1:ac:99:8e:7f:0a:65:2d:9c:eb:fc:f1:
9b:a5:db:45:a3:76:1f:42:df:7f:ac:27:cf:2d:5a:
73:bc:84:bc:48:71:e5:ec:47:67:35:3f:85:84:f9:
c1:e8:77:0b:04:3b:e6:cd:cb:a1:22:a8:1a:e8:02:
65:b2:66:d4:93:e9:4a:f1:bc:40:83:20:bb:96:31:
45:5f:2f:f7:ab:d4:e3:88:34:85:e3:5d:96:dd:56:
40:25:b1:37:2c:25:41:1e:ac:b8:d4:ed:ca:ba:94:
fb:69:67:3f:50:4e:f0:77:3d:6f:5d:54:14:63:d3:
b3:99:34:b1:e6:1b:7c:bc:7c:23:a5:50:e0:46:27:
44:4a:64:c5:8f:50:2d:a0:5e:4c:d9:3b:d9:38:97:
32:d7:61:32:7f:f3:79:0f:71:cb:f5:52:6e:00:f7:
f1:94:87:ca:f8:07:a2:2d:f9:3f:22:73:74:79:f6:
84:a5:84:a0:ff:b5:b6:ba:8d:ff:7d:3e:0a:55:29:
11:3e:0f:60:76:37:57:c3:36:e9:1c:14:4c:03:ac:
33:54:7f:6d:27:dd:d6:94:b0:d8:c4:df:c8:fe:2f:
22:fd:c3:2d:b7:dc:8e:62:a1:9a:39:a8:0e:19:61:
49:47:e5:39:db:d0:e1:b4:39:b1:38:21:76:2f:60:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7C:6B:AD:0D:F2:F2:1A:9D:DB:83:5B:4B:2D:7E:F5:D9:E8:5E:DB
X509v3 Authority Key Identifier:
keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a6:ce:02:d0:34:36:48:16:2b:9c:21:78:dd:9b:0e:8d:14:
36:22:c5:04:26:bb:23:8c:ec:9c:3a:27:87:74:93:76:55:08:
7c:28:0c:0a:32:b4:9d:08:4b:3f:4f:37:2f:d5:a9:25:da:e9:
1d:f0:d9:8d:f6:ab:4a:76:73:24:78:55:1c:4a:06:4c:05:56:
4e:6d:ff:75:02:54:7f:83:7e:73:9f:26:14:db:3f:8e:e5:a7:
42:b8:f8:0f:6b:9f:6c:26:07:f6:ba:c1:cb:00:fa:7a:4f:cc:
fa:65:94:58:38:06:14:4d:65:b1:ca:b4:5b:ad:79:27:33:24:
53:45:46:2f:e2:85:90:ed:0e:16:c8:d7:46:66:2b:47:0d:5a:
ed:19:46:a5:41:84:c1:eb:b1:bd:1c:00:1d:9f:9f:01:8f:0a:
10:47:cd:cd:98:e1:20:ef:ce:93:9c:b2:c9:2d:56:d9:84:0a:
85:d7:53:97:5f:1c:99:e8:96:e8:53:a7:c0:9e:60:74:65:5c:
1c:f0:0c:95:bb:fb:99:4f:e1:71:17:95:47:91:ad:c0:f1:91:
b9:ee:d1:e4:94:e3:b0:55:17:af:1f:44:c2:d7:35:de:ca:5a:
b5:87:c2:91:aa:f5:9a:45:1b:2f:c6:41:17:fe:0a:f4:a3:de:
03:34:d3:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5RDkxMTAvBgNVBAUTKDE3NUQ0MjAyMkJGNTBCRDZDMjBGMzBCMUM1QUQ4Qzk0
RTA4NUJDNEUwHhcNMjYwNjIzMDUyMzM5WhcNMjYwNjMwMDUyMzM5WjAYMRYwFAYD
VQQDEw02YTNhMTg1Yi0yYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2p2xrJmOfwplLZzr/PGbpdtFo3YfQt9/rCfPLVpzvIS8SHHl7EdnNT+FhPnB
6HcLBDvmzcuhIqga6AJlsmbUk+lK8bxAgyC7ljFFXy/3q9TjiDSF412W3VZAJbE3
LCVBHqy41O3KupT7aWc/UE7wdz1vXVQUY9OzmTSx5ht8vHwjpVDgRidESmTFj1At
oF5M2TvZOJcy12Eyf/N5D3HL9VJuAPfxlIfK+AeiLfk/InN0efaEpYSg/7W2uo3/
fT4KVSkRPg9gdjdXwzbpHBRMA6wzVH9tJ93WlLDYxN/I/i8i/cMtt9yOYqGaOagO
GWFJR+U529DhtDmxOCF2L2DzzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEN8a60N
8vIanduDW0stfvXZ6F7bMB8GA1UdIwQYMBaAFBddQgIr9QvWwg8wscWtjJTghbxO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9FQUJGRUJGMjZG
NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5YkNEekN4eGEyTWxPQ0Z2
RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0YxMUNBaXYxQzliQ0R6Q3h4YTJNbE9DRnZFNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODlEOS9FQUJGRUJGMjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5
YkNEekN4eGEyTWxPQ0Z2RTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiqbOAtA0NkgWK5wheN2bDo0UNiLFBCa7I4zsnDonh3STdlUIfCgMCjK0nQhL
P083L9WpJdrpHfDZjfarSnZzJHhVHEoGTAVWTm3/dQJUf4N+c58mFNs/juWnQrj4
D2ufbCYH9rrBywD6ek/M+mWUWDgGFE1lscq0W615JzMkU0VGL+KFkO0OFsjXRmYr
Rw1a7RlGpUGEweuxvRwAHZ+fAY8KEEfNzZjhIO/Ok5yyyS1W2YQKhddTl18cmeiW
6FOnwJ5gdGVcHPAMlbv7mU/hcReVR5GtwPGRue7R5JTjsFUXrx9Ewtc13spatYfC
kar1mkUbL8ZBF/4K9KPeAzTT4g==
-----END CERTIFICATE-----
Generated at Wed Jun 24 15:06:42 2026 by rpki-client