
$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier: naJvNMZTw4qU0jkhQNTXo/KUZKAR8R/kAen0EeX6asA=
Subject key identifier: 8B:7C:46:C6:13:D8:DC:BA:AB:84:95:28:DC:CA:41:9C:18:B8:CA:E3
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial: 012C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number: 0123
Signing time: Fri 17 Apr 2026 05:29:03 +0000
Manifest this update: Fri 17 Apr 2026 05:29:02 +0000
Manifest next update: Fri 24 Apr 2026 05:29:02 +0000
Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: oIU6ItPt3AMhxFXo0OaGJzHwhKBKwiyS8ef8k13BoMo=)
2: 989991AAF7BB11F09FD41D305A6F56BC.roa (hash: pOKR6RPYJCBDx9yeAb7+cdRrRVEgnYySsODYRKurE9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Validity
Not Before: Apr 17 05:29:02 2026 GMT
Not After : Apr 24 05:29:02 2026 GMT
Subject: CN=69e1c51f-6d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:3e:69:99:c9:9f:13:c1:6d:49:af:9c:48:
13:d8:fa:14:08:cc:94:35:46:61:2f:d6:f9:66:f7:
02:69:8f:64:d0:66:7e:95:0c:34:2e:92:7f:22:f6:
37:fe:17:1c:87:d9:a8:23:7c:da:13:dc:aa:53:30:
1a:0c:00:75:69:23:59:2d:0c:dc:d3:b0:81:38:9a:
bb:f9:d9:d4:d5:2a:02:66:60:87:37:21:9e:8e:3f:
14:92:ed:3c:59:f3:9e:55:c3:ad:1b:67:f2:56:07:
b3:a3:9d:d4:51:b4:cb:ac:c1:07:c8:19:e6:e6:07:
ef:10:28:07:8d:e0:32:ef:fe:7e:da:5f:18:50:13:
5d:bb:de:c9:5d:46:28:1e:51:6f:46:57:02:f1:cf:
a8:cc:9a:26:29:7e:7e:de:7e:8d:c8:56:8d:74:11:
1e:50:b2:c1:23:68:7f:0a:e0:8d:78:14:ad:75:82:
ea:a2:27:e2:60:a9:c7:69:13:a7:04:c2:9a:99:6f:
72:da:61:7e:ba:07:ae:d0:a6:0b:0f:94:4a:40:02:
d8:41:11:6d:66:72:1a:d8:f8:96:65:c9:4b:f9:96:
39:51:55:03:86:a0:c4:87:ba:b7:5d:bd:b9:77:ad:
fb:4c:cf:04:9b:e1:80:e2:4f:37:5d:75:36:a2:f8:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7C:46:C6:13:D8:DC:BA:AB:84:95:28:DC:CA:41:9C:18:B8:CA:E3
X509v3 Authority Key Identifier:
keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:46:7e:d9:e9:aa:66:11:54:56:f9:6b:05:95:e8:df:51:7d:
01:85:f4:47:30:fc:11:a9:78:0a:ab:cb:30:cb:99:0f:b0:29:
c0:15:53:52:be:f0:3b:b6:a1:65:b6:90:8b:88:cb:45:a0:6f:
7b:29:0a:dd:9d:d8:fb:ec:06:c5:0b:85:68:75:5f:c7:91:e4:
41:f3:55:3e:6b:8e:04:fc:48:c8:4e:23:3e:26:4a:ac:30:92:
03:c5:4f:a2:ed:f9:29:57:47:96:10:86:76:4f:be:a4:76:b2:
a0:44:70:16:a2:6b:d4:72:17:d1:dc:aa:c9:d7:41:6b:16:bb:
dc:e1:49:a6:57:78:e3:8f:cb:df:88:f0:f7:1d:c0:5a:6d:61:
19:36:22:23:54:22:c7:11:1e:79:26:6e:61:de:83:4d:e0:41:
52:a1:4c:1d:4b:07:b8:5f:e4:29:af:c4:77:2d:57:c3:90:4e:
38:6a:45:08:29:b4:fd:3d:ba:c0:d5:5b:e8:1e:07:2f:42:46:
c4:c5:7c:a6:ae:5d:39:d8:4c:4f:0a:d5:95:f4:5a:51:22:d3:
24:8f:14:fe:3c:28:b0:11:fc:fa:24:52:66:e8:79:d2:16:45:
bb:ca:3a:69:6e:b3:b7:a7:06:31:89:5f:e0:d0:41:e3:00:4e:
88:b0:7a:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3QzUxMTAvBgNVBAUTKDU3NUE2RUQzMEMzNzNBRDQzNEQxNUE2NjVEREEyRTc2
NEVDODlBQ0EwHhcNMjYwNDE3MDUyOTAyWhcNMjYwNDI0MDUyOTAyWjAYMRYwFAYD
VQQDEw02OWUxYzUxZi02ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2o+aZnJnxPBbUmvnEgT2PoUCMyUNUZhL9b5ZvcCaY9k0GZ+lQw0LpJ/IvY3
/hcch9moI3zaE9yqUzAaDAB1aSNZLQzc07CBOJq7+dnU1SoCZmCHNyGejj8Uku08
WfOeVcOtG2fyVgezo53UUbTLrMEHyBnm5gfvECgHjeAy7/5+2l8YUBNdu97JXUYo
HlFvRlcC8c+ozJomKX5+3n6NyFaNdBEeULLBI2h/CuCNeBStdYLqoifiYKnHaROn
BMKamW9y2mF+ugeu0KYLD5RKQALYQRFtZnIa2PiWZclL+ZY5UVUDhqDEh7q3Xb25
d637TM8Em+GA4k83XXU2ovgoIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIt8RsYT
2Ny6q4SVKNzKQZwYuMrjMB8GA1UdIwQYMBaAFFdabtMMNzrUNNFaZl3aLnZOyJrK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EMDY1QUJCNDhB
RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9WMXB1MHd3M090UTAwVnBtWGRvdWRrN0lt
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1YxcHUwd3czT3RRMDBWcG1YZG91ZGs3SW1zby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjdDNS9EMDY1QUJCNDhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9WMXB1MHd3M090
UTAwVnBtWGRvdWRrN0ltc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANEZ+2emqZhFUVvlrBZXo31F9AYX0RzD8Eal4CqvLMMuZD7ApwBVTUr7wO7ah
ZbaQi4jLRaBveykK3Z3Y++wGxQuFaHVfx5HkQfNVPmuOBPxIyE4jPiZKrDCSA8VP
ou35KVdHlhCGdk++pHayoERwFqJr1HIX0dyqyddBaxa73OFJpld444/L34jw9x3A
Wm1hGTYiI1QixxEeeSZuYd6DTeBBUqFMHUsHuF/kKa/Edy1Xw5BOOGpFCCm0/T26
wNVb6B4HL0JGxMV8pq5dOdhMTwrVlfRaUSLTJI8U/jwosBH8+iRSZuh50hZFu8o6
aW6zt6cGMYlf4NBB4wBOiLB6Fg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:24 2026 by rpki-client