
$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json)
Hash identifier: nsq0jX4FZQnZlRKbjtUto38epuJ7f62cP2eGmxIvIOk=
Subject key identifier: 40:20:3F:94:61:84:D5:9E:4F:05:55:D5:1B:C0:DA:7E:00:58:E2:34
Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Certificate serial: 0A7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
Manifest number: 0A6B
Signing time: Fri 12 Jun 2026 19:40:00 +0000
Manifest this update: Fri 12 Jun 2026 19:40:00 +0000
Manifest next update: Fri 19 Jun 2026 19:40:00 +0000
Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: 5MXJ0qIjJaON7V4741cKcCwFRpjVdetDNGiYxuk3vJc=)
2: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: 5L+qG7S9tkiI9oResfgYtFZwd1jvISkOSfCq4CpLueQ=)
3: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: ayMh+xPpKV4MDa+xi4w8R4KTWxdFNv6TJ0EMYBEcXjk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2687 (0xa7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Validity
Not Before: Jun 12 19:40:00 2026 GMT
Not After : Jun 19 19:40:00 2026 GMT
Subject: CN=6a2c6090-5f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:41:b3:95:0f:db:f2:fe:d5:e1:5f:9c:a2:bb:
56:3b:7d:f1:af:20:69:d6:49:f3:88:8a:cb:a4:f9:
03:7f:55:15:68:f5:06:1e:13:21:1e:61:52:52:56:
a6:ed:1a:95:96:c7:ec:8c:2b:c4:ba:f7:2a:42:59:
04:f8:ef:88:80:54:40:03:db:82:d0:8e:5a:23:be:
92:45:be:24:64:2e:1b:91:c3:69:91:94:87:08:c7:
b5:cf:47:a0:f1:b3:48:aa:fd:c9:7f:06:1d:66:98:
85:ff:b3:fa:c4:01:09:f2:14:65:aa:51:d9:96:63:
6d:10:42:06:12:e0:e7:b6:c9:47:bd:3d:bd:0b:2d:
be:4b:62:30:c0:34:c4:f3:c0:31:66:a2:82:10:da:
bd:c4:9f:bd:4b:ad:18:b1:f8:f3:6f:ad:54:ca:0a:
ca:35:08:37:9a:e0:42:09:bd:de:0e:07:ad:87:6f:
76:4e:54:71:28:ca:7d:51:82:03:dc:d8:48:65:7d:
2f:bb:3f:cd:3e:a6:8d:fa:ce:27:0a:e7:9e:ad:d6:
ac:f5:a7:2c:7d:4e:9a:4f:c1:55:60:e8:cd:5e:88:
17:88:0f:3f:b5:0f:27:66:8c:e4:02:76:71:9c:c7:
97:a6:b2:df:12:e3:23:f0:61:d1:49:10:aa:d5:e4:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:20:3F:94:61:84:D5:9E:4F:05:55:D5:1B:C0:DA:7E:00:58:E2:34
X509v3 Authority Key Identifier:
keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:01:c9:a1:e7:d1:25:ab:ee:f2:f2:85:0e:0d:19:6a:5b:1f:
81:64:4c:f9:39:3a:fa:1a:ca:d0:94:88:09:7e:dd:d7:08:71:
d2:70:ab:26:84:9a:b0:60:6b:2d:cc:cb:94:73:5b:70:8d:e5:
bb:ae:4e:f4:b9:a9:8a:cc:eb:bf:83:f1:51:df:10:69:87:74:
36:3d:e5:43:48:3f:b6:b9:c2:11:40:ee:c7:cd:ad:0a:d1:fe:
f8:8b:64:95:4d:0c:8d:f5:0e:33:a8:97:30:2b:48:23:1b:bd:
ab:2a:32:59:66:37:06:b5:1c:f2:ac:59:76:9e:8d:e6:57:97:
17:a6:23:05:6b:7d:45:d0:c8:92:de:0a:8b:7f:b1:96:8d:e1:
a1:62:d3:79:54:f5:46:30:3b:53:ae:b6:54:cb:f6:09:53:10:
c9:23:60:53:fe:b2:3a:13:3f:14:7d:e6:91:d4:84:5f:ed:c4:
e6:45:81:db:b1:2f:07:c7:d3:c9:2d:b8:d7:78:da:b2:06:e9:
53:04:9b:0c:dd:8e:54:22:d6:c8:b4:06:67:43:03:9a:1f:04:
3c:d6:3e:02:85:96:b3:3e:b0:46:77:91:0b:22:ec:30:1e:a9:
b1:30:9c:90:5f:2b:0b:1c:97:be:25:90:bf:63:cf:5f:54:7f:
94:58:ef:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0
RjdBQzQ2MzkwHhcNMjYwNjEyMTk0MDAwWhcNMjYwNjE5MTk0MDAwWjAYMRYwFAYD
VQQDEw02YTJjNjA5MC01ZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8kGzlQ/b8v7V4V+cortWO33xryBp1knziIrLpPkDf1UVaPUGHhMhHmFSUlam
7RqVlsfsjCvEuvcqQlkE+O+IgFRAA9uC0I5aI76SRb4kZC4bkcNpkZSHCMe1z0eg
8bNIqv3JfwYdZpiF/7P6xAEJ8hRlqlHZlmNtEEIGEuDntslHvT29Cy2+S2IwwDTE
88AxZqKCENq9xJ+9S60Ysfjzb61UygrKNQg3muBCCb3eDgeth292TlRxKMp9UYID
3NhIZX0vuz/NPqaN+s4nCueerdas9acsfU6aT8FVYOjNXogXiA8/tQ8nZozkAnZx
nMeXprLfEuMj8GHRSRCq1eT5jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAgP5Rh
hNWeTwVV1RvA2n4AWOI0MB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5
MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ
TFpYNFJIcW51YnRQZXNSamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3AHJoefRJavu8vKFDg0ZalsfgWRM+Tk6+hrK0JSICX7d1whx0nCrJoSasGBr
LczLlHNbcI3lu65O9Lmpiszrv4PxUd8QaYd0Nj3lQ0g/trnCEUDux82tCtH++Itk
lU0MjfUOM6iXMCtIIxu9qyoyWWY3BrUc8qxZdp6N5leXF6YjBWt9RdDIkt4Ki3+x
lo3hoWLTeVT1RjA7U662VMv2CVMQySNgU/6yOhM/FH3mkdSEX+3E5kWB27EvB8fT
yS2413jasgbpUwSbDN2OVCLWyLQGZ0MDmh8EPNY+AoWWsz6wRneRCyLsMB6psTCc
kF8rCxyXviWQv2PPX1R/lFjvrg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:42 2026 by rpki-client