
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
File: 0RpQ1ePqDchJb47JVhvb5mrHnUw.mft (raw, json)
Hash identifier: R4uPrQDknzgASuBIhXxck4DwYUof10TNuoqOvPetkXU=
Subject key identifier: 6E:61:5F:2C:06:DC:D4:3A:99:BB:9D:28:33:CC:A6:99:06:EA:D7:24
Authority key identifier: D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C
Certificate issuer: /CN=A91FE67F/serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
Manifest number: 1A
Signing time: Tue 19 May 2026 08:50:33 +0000
Manifest this update: Tue 19 May 2026 08:50:33 +0000
Manifest next update: Tue 26 May 2026 08:50:33 +0000
Files and hashes: 1: 0RpQ1ePqDchJb47JVhvb5mrHnUw.crl (hash: t7g9PuQ6GpspCqEVAXsPV4OADBxixOALfCvV+C7VJS4=)
2: 7D1805702E4211F18DDF32E693833773.roa (hash: eAvktFFlPMI5ncO/3br/ixgJ8aaCullrYEFRoA4e5b0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl
rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE67F, serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
Validity
Not Before: May 19 08:50:33 2026 GMT
Not After : May 26 08:50:33 2026 GMT
Subject: CN=6a0c2459-e55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:a8:63:80:a8:27:81:7a:01:1f:51:f3:89:
42:d8:c2:d6:1c:27:3a:7f:6e:dc:01:4d:bc:82:5d:
09:17:90:10:c1:ea:34:ac:4f:36:0b:67:10:f8:6b:
69:87:28:5b:32:cc:c7:98:85:e7:cf:72:b8:fc:99:
24:f8:69:ec:9a:e6:da:40:a8:8e:70:36:81:84:9e:
b7:a8:2f:55:90:35:ca:08:37:a8:f5:f5:a6:89:57:
6e:38:7a:09:f4:dd:6e:cb:9f:0c:ee:99:ed:58:42:
1f:40:8a:6d:50:d8:56:2d:34:e3:e9:47:eb:8b:ee:
5c:86:8e:fc:2c:32:65:f9:11:f1:ac:04:fc:b7:cd:
88:ac:e7:01:82:6c:a6:9e:d3:5c:bd:f6:03:29:72:
8c:1d:53:e5:5b:fd:5e:15:6c:ac:fd:8c:73:5c:12:
d6:5d:56:e5:94:c7:a2:8f:01:18:61:61:b0:46:c4:
80:c7:f6:91:93:93:70:8e:08:97:f5:3e:53:0e:e6:
06:cc:7b:04:be:a2:1a:e5:25:95:76:70:35:34:97:
23:ce:e9:60:b5:4e:11:31:31:4c:d9:00:f6:ae:51:
38:5a:83:ef:0f:36:02:b8:8a:75:c6:6e:ad:49:e5:
4e:bf:84:84:3d:dd:69:b2:85:92:50:a4:66:61:ca:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:61:5F:2C:06:DC:D4:3A:99:BB:9D:28:33:CC:A6:99:06:EA:D7:24
X509v3 Authority Key Identifier:
keyid:D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f6:60:62:d3:41:29:51:a8:82:42:3c:62:69:e2:fe:6b:38:
39:19:de:06:59:39:6b:9d:ed:db:44:2a:b6:5b:7e:1d:13:6f:
7f:ec:a5:3d:e5:9d:1e:29:de:10:71:01:17:7c:a4:03:0a:21:
ce:6a:b3:f8:5e:76:14:1b:7d:ec:56:e7:68:97:0a:94:a8:77:
c9:09:d2:67:e3:30:44:90:05:43:5f:7c:10:fc:e2:f9:5b:8d:
1a:19:2c:05:67:8d:dd:97:30:73:86:f4:30:b9:0f:61:b4:aa:
de:8e:32:5b:30:87:73:75:ad:9f:92:2d:bc:96:07:8c:5c:04:
fe:21:ce:37:d5:32:eb:9d:30:06:e4:0b:97:e2:a2:e9:9d:d2:
31:56:ef:94:35:a1:18:b5:bc:5e:32:4a:00:a1:02:0d:b8:31:
a5:a2:8a:e3:5c:92:51:03:e1:6e:9c:7c:ad:8b:f7:24:ad:f7:
a7:f5:00:ab:75:ec:04:88:09:97:61:f6:2a:50:f6:b6:5a:45:
41:c4:7e:7c:07:46:de:bf:91:1e:c4:48:94:0e:7d:65:8a:bd:
35:ee:83:d8:7f:c7:4c:61:37:1a:5c:a8:20:4c:a4:5d:63:07:
5d:10:1e:77:ea:bd:25:4e:6c:49:22:f8:56:41:78:70:ef:e5:
8b:5b:d1:10
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RTY3RjExMC8GA1UEBRMoRDExQTUwRDVFM0VBMERDODQ5NkY4RUM5NTYxQkRCRTY2
QUM3OUQ0QzAeFw0yNjA1MTkwODUwMzNaFw0yNjA1MjYwODUwMzNaMBgxFjAUBgNV
BAMTDTZhMGMyNDU5LWU1NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgZKhjgKgngXoBH1HziULYwtYcJzp/btwBTbyCXQkXkBDB6jSsTzYLZxD4a2mH
KFsyzMeYhefPcrj8mST4aeya5tpAqI5wNoGEnreoL1WQNcoIN6j19aaJV244egn0
3W7Lnwzume1YQh9Aim1Q2FYtNOPpR+uL7lyGjvwsMmX5EfGsBPy3zYis5wGCbKae
01y99gMpcowdU+Vb/V4VbKz9jHNcEtZdVuWUx6KPARhhYbBGxIDH9pGTk3COCJf1
PlMO5gbMewS+ohrlJZV2cDU0lyPO6WC1ThExMUzZAPauUThag+8PNgK4inXGbq1J
5U6/hIQ93WmyhZJQpGZhykiXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbmFfLAbc
1DqZu50oM8ymmQbq1yQwHwYDVR0jBBgwFoAU0RpQ1ePqDchJb47JVhvb5mrHnUww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNjdGLzc4NTFGRTM0MkU0
MTExRjE4MzVFODkzNzkzODMzNzczLzBScFExZVBxRGNoSmI0N0pWaHZiNW1ySG5V
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMFJwUTFlUHFEY2hKYjQ3SlZodmI1bXJIblV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF
NjdGLzc4NTFGRTM0MkU0MTExRjE4MzVFODkzNzkzODMzNzczLzBScFExZVBxRGNo
SmI0N0pWaHZiNW1ySG5Vdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC99mBi00EpUaiCQjxiaeL+azg5Gd4GWTlrne3bRCq2W34dE29/7KU95Z0eKd4Q
cQEXfKQDCiHOarP4XnYUG33sVudolwqUqHfJCdJn4zBEkAVDX3wQ/OL5W40aGSwF
Z43dlzBzhvQwuQ9htKrejjJbMIdzda2fki28lgeMXAT+Ic431TLrnTAG5AuX4qLp
ndIxVu+UNaEYtbxeMkoAoQINuDGloorjXJJRA+FunHyti/ckrfen9QCrdewEiAmX
YfYqUPa2WkVBxH58B0bev5EexEiUDn1lir017oPYf8dMYTcaXKggTKRdYwddEB53
6r0lTmxJIvhWQXhw7+WLW9EQ
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:50 2026 by rpki-client