
$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json)
Hash identifier: P3WMSOy3krHanzY+6rSGikDjz7mrAFUrVfaOK945wgA=
Subject key identifier: FA:1A:A2:11:F9:40:A6:A1:07:6E:DE:14:75:4E:86:8E:6A:5F:7D:2F
Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Certificate serial: 0CC9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
Manifest number: 0CBB
Signing time: Fri 12 Jun 2026 18:30:07 +0000
Manifest this update: Fri 12 Jun 2026 18:30:07 +0000
Manifest next update: Fri 19 Jun 2026 18:30:07 +0000
Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: elF/fRy2Qc8V35M79P+U/xE29BljiEOi390+Pk1H2tY=)
2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: S7vABV4LANs4s/qDbVNaE7a/E/6cf6qzp42fekgpXlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3273 (0xcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F
Validity
Not Before: Jun 12 18:30:07 2026 GMT
Not After : Jun 19 18:30:07 2026 GMT
Subject: CN=6a2c502f-b2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:82:f9:62:3d:e4:c6:aa:3f:a5:9d:2b:30:
17:6d:ad:58:09:d2:6e:45:2e:11:34:40:0f:b2:bd:
c3:d2:29:21:ff:77:a8:da:3d:f8:59:63:77:0e:05:
1b:4d:25:c3:55:54:cb:94:84:55:50:c9:6a:a0:ff:
fe:5a:36:a6:c5:0e:76:d7:00:41:a6:77:20:5a:74:
94:01:08:7a:ea:ba:de:1d:19:b0:7f:0d:77:e5:6c:
37:39:42:87:fb:e4:25:fd:24:86:78:2a:13:92:40:
9e:64:37:14:ab:3d:12:5d:e8:c5:5a:6b:31:dd:47:
b8:a9:57:b5:d0:b2:8c:e5:12:78:eb:26:bd:ed:ae:
ae:0e:9b:3c:e1:40:0c:3c:df:a7:80:76:a2:f3:f1:
67:20:aa:b0:7a:55:56:6d:70:66:f2:f6:22:8f:63:
c7:1c:87:9b:b5:62:35:66:5e:fa:bc:5e:2e:9e:f1:
f7:1f:16:65:0d:1a:d3:33:08:d3:96:6a:b7:eb:ec:
9f:f7:c5:2a:3a:53:08:e7:b0:d4:87:4f:7c:44:3f:
c4:a8:cb:e4:f9:3e:a2:0b:7a:63:f2:c2:7a:ad:4c:
4c:83:84:8f:2b:e4:a6:f0:b6:2f:57:94:16:3b:ab:
8b:66:7b:86:5f:90:12:23:ff:67:18:cb:7a:d6:49:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:A2:11:F9:40:A6:A1:07:6E:DE:14:75:4E:86:8E:6A:5F:7D:2F
X509v3 Authority Key Identifier:
keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8a:9a:a0:bd:42:a0:4b:ff:52:30:33:60:04:d8:23:d7:1a:
2e:08:81:39:ad:b6:1e:22:87:ed:fb:38:e5:29:3d:f7:1e:df:
4d:10:f1:b3:07:7e:79:03:78:b5:a0:5e:21:d1:5b:48:ce:f4:
49:91:e3:3a:51:8e:d7:ea:e1:d9:ce:34:b3:9a:38:d5:3b:be:
31:ff:f7:86:f1:cc:13:f3:3d:a7:5b:5f:46:58:eb:2d:60:89:
38:2c:26:5e:c9:1c:70:93:ef:61:49:23:d1:f7:36:41:a2:3b:
34:36:ff:29:10:42:b6:ad:51:d1:8b:48:c6:7d:1a:f7:14:e6:
b8:96:7a:8b:42:77:48:d9:e9:b1:bb:7e:7a:77:4d:84:4c:a2:
7c:be:70:9e:37:22:9e:59:fe:e0:a2:55:58:1d:46:a8:b7:c7:
01:00:1b:23:f3:d1:f3:28:5d:41:94:f5:6a:8f:03:55:05:c0:
2c:e0:9e:de:7d:5e:6c:0b:80:2c:36:53:f6:5f:49:81:c4:3b:
d2:74:78:9e:4c:d0:5b:2f:e6:01:2d:54:7a:04:e9:7f:49:0a:
73:ad:d9:77:54:c0:ad:fa:35:6f:45:e6:9f:3b:bc:70:26:16:
ca:bc:80:e3:ec:fa:54:86:7f:51:8b:6b:3b:bc:7a:64:f2:ed:
8e:95:e4:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3
MkUzREI0MUYwHhcNMjYwNjEyMTgzMDA3WhcNMjYwNjE5MTgzMDA3WjAYMRYwFAYD
VQQDEw02YTJjNTAyZi1iMmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2maC+WI95MaqP6WdKzAXba1YCdJuRS4RNEAPsr3D0ikh/3eo2j34WWN3DgUb
TSXDVVTLlIRVUMlqoP/+WjamxQ521wBBpncgWnSUAQh66rreHRmwfw135Ww3OUKH
++Ql/SSGeCoTkkCeZDcUqz0SXejFWmsx3Ue4qVe10LKM5RJ46ya97a6uDps84UAM
PN+ngHai8/FnIKqwelVWbXBm8vYij2PHHIebtWI1Zl76vF4unvH3HxZlDRrTMwjT
lmq36+yf98UqOlMI57DUh098RD/EqMvk+T6iC3pj8sJ6rUxMg4SPK+Sm8LYvV5QW
O6uLZnuGX5ASI/9nGMt61kkvKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoaohH5
QKahB27eFHVOho5qX30vMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0
QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF
TE80S2ZnRkFLZjl5NDl0QjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATYqaoL1CoEv/UjAzYATYI9caLgiBOa22HiKH7fs45Sk99x7fTRDxswd+eQN4
taBeIdFbSM70SZHjOlGO1+rh2c40s5o41Tu+Mf/3hvHME/M9p1tfRljrLWCJOCwm
XskccJPvYUkj0fc2QaI7NDb/KRBCtq1R0YtIxn0a9xTmuJZ6i0J3SNnpsbt+endN
hEyifL5wnjcinln+4KJVWB1GqLfHAQAbI/PR8yhdQZT1ao8DVQXALOCe3n1ebAuA
LDZT9l9JgcQ70nR4nkzQWy/mAS1UegTpf0kKc63Zd1TArfo1b0Xmnzu8cCYWyryA
4+z6VIZ/UYtrO7x6ZPLtjpXk6w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:23 2026 by rpki-client