
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json)
Hash identifier: ZCxGO5WsTPaHql1VCD0isYrj8mpnAtrs9j5HLPR/Kec=
Subject key identifier: FE:1C:BB:A3:AC:46:B2:9F:81:00:14:EE:A4:AB:18:13:6D:03:73:85
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 0513
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
Manifest number: 04D5
Signing time: Fri 12 Jun 2026 23:51:50 +0000
Manifest this update: Fri 12 Jun 2026 23:51:50 +0000
Manifest next update: Fri 19 Jun 2026 23:51:50 +0000
Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: ztF+ncdOtivJbEan7J9jnMGK5O7OzC2pEuRjnBgPHQg=)
2: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=)
3: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=)
4: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=)
5: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=)
6: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=)
7: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1299 (0x513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Jun 12 23:51:50 2026 GMT
Not After : Jun 19 23:51:50 2026 GMT
Subject: CN=6a2c9b96-6f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:d5:0a:37:4e:9a:a7:34:c4:1d:03:bc:56:
dc:9b:ed:87:47:2b:ab:b0:4e:23:76:a5:3a:45:42:
8f:60:fd:52:31:08:76:93:ef:ef:81:b2:b1:f3:39:
98:81:1c:1b:3a:67:78:f3:ad:e0:21:8e:f7:f9:ac:
80:54:d5:eb:61:48:23:e0:a5:c6:63:6d:f9:22:81:
7f:7d:63:ae:5e:09:b0:b8:19:ea:b3:4e:6d:f0:44:
b1:0b:da:45:7a:6b:37:85:7b:e3:f5:67:23:d3:b6:
5a:8c:3a:34:b1:7c:ed:30:cb:c6:52:72:d9:5a:e8:
ad:bf:82:dd:29:3b:df:43:8d:52:59:af:67:ac:ef:
a8:c5:c1:c1:ba:49:eb:cc:77:fe:c7:e9:b6:7e:6d:
a7:c5:eb:32:14:0d:55:d7:77:b8:28:2c:f0:76:95:
33:c9:96:88:96:3e:cc:36:75:31:5c:1c:55:f4:aa:
f7:8c:f1:c3:59:fe:55:42:8b:4f:0c:a1:16:1a:83:
95:ec:88:3d:59:89:2f:97:7d:5e:c0:95:2b:ea:26:
46:e8:7c:1b:39:9a:d7:6e:61:f9:82:0a:68:7e:4a:
4d:8f:06:09:33:c8:9e:2c:52:de:6d:ed:f8:d8:c9:
a0:74:a8:54:8b:0d:f5:85:15:5e:6f:02:12:9d:15:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1C:BB:A3:AC:46:B2:9F:81:00:14:EE:A4:AB:18:13:6D:03:73:85
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2c:a1:9a:6a:02:d4:5f:9e:eb:5f:66:3f:b2:78:cc:30:1e:
be:13:d9:89:20:0d:bf:75:18:e0:21:b0:be:a5:f8:f2:c7:e5:
d7:c1:ce:ce:4b:fc:2e:72:16:f0:bb:db:a4:21:60:22:23:db:
1e:0c:02:83:2f:eb:f2:5d:fb:41:52:4d:3e:59:9f:bb:b8:f0:
84:54:f6:f6:dd:fc:db:31:02:78:47:93:b0:7b:90:ed:e3:c7:
ec:96:65:69:37:89:a5:1e:25:89:59:a8:c7:9f:8e:71:e2:ad:
98:8c:1a:91:6c:e5:cb:5e:ef:c1:48:7c:e1:4a:65:ba:62:dd:
5c:ad:d1:af:c8:92:74:be:62:bd:d9:f0:1a:3e:39:ee:92:27:
71:10:f4:93:5f:e6:76:70:a1:cd:eb:88:b1:c0:79:2b:62:0a:
05:09:94:c7:49:84:1b:91:11:7c:fa:89:b4:49:b9:d9:5b:3e:
ec:a7:39:51:9f:67:2f:cc:29:b6:5f:b0:3d:a4:c7:7c:0f:f1:
7d:47:1b:3f:53:9f:4e:55:f5:e0:ef:75:99:83:86:30:14:4f:
71:21:42:2f:d7:81:05:19:55:96:2b:58:54:45:14:02:2a:bb:
0d:96:25:d1:99:d5:18:83:8f:ec:44:db:2b:85:2c:c7:37:8c:
5c:28:a1:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2
NERBNTBCMkEwHhcNMjYwNjEyMjM1MTUwWhcNMjYwNjE5MjM1MTUwWjAYMRYwFAYD
VQQDEw02YTJjOWI5Ni02ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+zVCjdOmqc0xB0DvFbcm+2HRyursE4jdqU6RUKPYP1SMQh2k+/vgbKx8zmY
gRwbOmd4863gIY73+ayAVNXrYUgj4KXGY235IoF/fWOuXgmwuBnqs05t8ESxC9pF
ems3hXvj9Wcj07ZajDo0sXztMMvGUnLZWuitv4LdKTvfQ41SWa9nrO+oxcHBuknr
zHf+x+m2fm2nxesyFA1V13e4KCzwdpUzyZaIlj7MNnUxXBxV9Kr3jPHDWf5VQotP
DKEWGoOV7Ig9WYkvl31ewJUr6iZG6HwbOZrXbmH5ggpofkpNjwYJM8ieLFLebe34
2MmgdKhUiw31hRVebwISnRXVIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4cu6Os
RrKfgQAU7qSrGBNtA3OFMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx
MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB
amY3dFJfRkVmalJrMmxDeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsSyhmmoC1F+e619mP7J4zDAevhPZiSANv3UY4CGwvqX48sfl18HOzkv8LnIW
8LvbpCFgIiPbHgwCgy/r8l37QVJNPlmfu7jwhFT29t382zECeEeTsHuQ7ePH7JZl
aTeJpR4liVmox5+OceKtmIwakWzly17vwUh84UplumLdXK3Rr8iSdL5ivdnwGj45
7pIncRD0k1/mdnChzeuIscB5K2IKBQmUx0mEG5ERfPqJtEm52Vs+7Kc5UZ9nL8wp
tl+wPaTHfA/xfUcbP1OfTlX14O91mYOGMBRPcSFCL9eBBRlVlitYVEUUAiq7DZYl
0ZnVGIOP7ETbK4UsxzeMXCihOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:35:17 2026 by rpki-client