
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
File: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft (raw, json)
Hash identifier: sI22lrfjMZjZDFfg1uUpzLfnlOlIWxCAVW4cmUvUKKQ=
Subject key identifier: 0E:38:91:B6:B8:9E:60:5C:54:97:4E:E8:BF:F4:9D:E5:0D:CB:FB:76
Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Certificate issuer: /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Certificate serial: 26D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
Manifest number: 26BF
Signing time: Fri 12 Jun 2026 15:39:35 +0000
Manifest this update: Fri 12 Jun 2026 15:39:34 +0000
Manifest next update: Fri 19 Jun 2026 15:39:34 +0000
Files and hashes: 1: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl (hash: d8g0U6ikXB1RfkJLsNhNEIanVZW9ZdBIXjkr6BLLWPs=)
2: 764601EE6A7A11EFAF10EC37C4F9AE02.roa (hash: CJtNext5PGiHGHfRvis01icRrUClz7gxR8gb7K0FV7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9941 (0x26d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5030, serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Validity
Not Before: Jun 12 15:39:34 2026 GMT
Not After : Jun 19 15:39:34 2026 GMT
Subject: CN=6a2c2837-0cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:f0:18:cc:bb:22:74:2a:fb:02:52:c2:8b:
83:4c:b5:49:23:54:a3:63:79:2e:60:cf:7c:a3:ab:
e3:e4:11:ff:26:9c:77:be:7d:27:90:e5:b2:46:40:
fb:04:d6:c6:b5:f2:38:89:61:97:0b:f3:41:c5:b0:
61:79:06:d7:4f:6e:5b:01:52:af:3a:6f:08:c5:d6:
89:50:0b:95:70:74:54:85:5d:2b:9b:d8:06:97:77:
a2:fb:3a:93:07:47:c4:02:e0:83:0a:b4:d7:75:c6:
d6:6c:a0:af:65:cd:28:aa:11:f4:04:07:ee:6c:74:
16:f6:11:16:ae:eb:a8:c9:89:df:a5:3a:ec:34:c7:
d0:98:97:72:0a:10:23:3e:e6:a2:6f:cc:b1:00:50:
33:c1:8d:1c:89:07:0b:3e:50:8c:a9:3c:e7:ff:8b:
62:8b:b1:78:44:8c:b9:06:ba:1a:e6:fd:1f:3c:72:
72:59:9b:73:f4:6c:89:b4:c5:a2:9a:3d:c5:e9:e2:
fa:1c:ad:41:89:1a:4f:4e:98:41:25:af:a8:dc:d5:
22:55:83:12:02:6c:38:02:2a:b4:26:f5:3a:a2:5c:
e9:57:23:0a:58:0c:cf:3a:07:59:53:6a:7f:a9:ad:
2e:a9:56:4f:5a:08:8b:7d:86:34:34:7e:54:bf:24:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:38:91:B6:B8:9E:60:5C:54:97:4E:E8:BF:F4:9D:E5:0D:CB:FB:76
X509v3 Authority Key Identifier:
keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:78:db:4f:1c:9b:56:4c:06:dc:c9:e6:b1:a8:ec:28:8f:
7a:a5:07:89:4f:c1:ed:5f:80:ca:4d:57:d5:1f:ac:f3:b4:df:
1c:2b:b7:6e:e6:24:35:9d:ff:1e:ac:54:0d:0c:bc:cd:d6:f4:
04:0b:f6:3f:b2:fe:ea:8b:f4:55:88:42:b2:42:5a:65:de:0c:
6b:e9:5c:2f:b9:4f:3d:dc:85:fa:e6:78:3a:c1:72:cb:c5:68:
b3:91:3e:ea:05:44:64:37:e7:62:3c:af:e3:56:a0:56:d7:1d:
6c:e9:90:1b:cb:7c:f9:a6:fd:44:3f:0f:66:62:70:98:61:13:
a8:eb:37:dd:a3:db:37:d4:e5:d0:e0:62:03:fc:be:fe:29:ab:
2c:7f:4f:c0:c6:97:41:7f:93:75:73:73:50:4b:f2:43:5a:ae:
04:83:fb:c7:4a:99:38:1e:9d:9c:88:f7:eb:01:0e:54:dc:70:
ea:65:4f:a6:5c:b1:74:01:94:29:0c:ed:f9:e4:97:75:83:62:
16:02:57:c7:06:31:91:0f:7f:13:97:9a:1e:e3:f5:62:dc:c6:
8a:d4:10:52:79:70:e1:2f:81:67:8c:37:68:cf:5e:e1:af:1c:
ad:36:b2:12:8d:18:09:12:24:2e:33:11:a4:db:30:b4:3d:91:
3a:df:98:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUwMzAxMTAvBgNVBAUTKDg3NjlCOTUyRjlDODAwNjc1NzkyOUYwNjk5N0NERTVC
MUU0NDhGMTQwHhcNMjYwNjEyMTUzOTM0WhcNMjYwNjE5MTUzOTM0WjAYMRYwFAYD
VQQDEw02YTJjMjgzNy0wY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2f7wGMy7InQq+wJSwouDTLVJI1SjY3kuYM98o6vj5BH/Jpx3vn0nkOWyRkD7
BNbGtfI4iWGXC/NBxbBheQbXT25bAVKvOm8IxdaJUAuVcHRUhV0rm9gGl3ei+zqT
B0fEAuCDCrTXdcbWbKCvZc0oqhH0BAfubHQW9hEWruuoyYnfpTrsNMfQmJdyChAj
Puaib8yxAFAzwY0ciQcLPlCMqTzn/4tii7F4RIy5Broa5v0fPHJyWZtz9GyJtMWi
mj3F6eL6HK1BiRpPTphBJa+o3NUiVYMSAmw4Aiq0JvU6olzpVyMKWAzPOgdZU2p/
qa0uqVZPWgiLfYY0NH5UvyQ4QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA44kba4
nmBcVJdO6L/0neUNy/t2MB8GA1UdIwQYMBaAFIdpuVL5yABnV5KfBpl83lseRI8U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTAzMC9DRTZBM0YxMEZE
MkExMUU0Qjc0RkVBNDJDNEY5QUUwMi9oMm01VXZuSUFHZFhrcDhHbVh6ZVd4NUVq
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gybTVVdm5JQUdkWGtwOEdtWHplV3g1RWp4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTAzMC9DRTZBM0YxMEZEMkExMUU0Qjc0RkVBNDJDNEY5QUUwMi9oMm01VXZuSUFH
ZFhrcDhHbVh6ZVd4NUVqeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIbd4208cm1ZMBtzJ5rGo7CiPeqUHiU/B7V+Ayk1X1R+s87TfHCu3buYkNZ3/
HqxUDQy8zdb0BAv2P7L+6ov0VYhCskJaZd4Ma+lcL7lPPdyF+uZ4OsFyy8Vos5E+
6gVEZDfnYjyv41agVtcdbOmQG8t8+ab9RD8PZmJwmGETqOs33aPbN9Tl0OBiA/y+
/imrLH9PwMaXQX+TdXNzUEvyQ1quBIP7x0qZOB6dnIj36wEOVNxw6mVPplyxdAGU
KQzt+eSXdYNiFgJXxwYxkQ9/E5eaHuP1YtzGitQQUnlw4S+BZ4w3aM9e4a8crTay
Eo0YCRIkLjMRpNswtD2ROt+YGw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:28 2026 by rpki-client