
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json)
Hash identifier: GzILJL4/Fj2pfIX1YG4EVumBPnFwU2961ATnQ712ZyE=
Subject key identifier: 0C:AC:61:6A:E0:E9:4D:E1:D4:D7:69:06:B9:8E:A0:D8:6C:5A:DB:CA
Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
Manifest number: 0122
Signing time: Fri 17 Apr 2026 05:22:27 +0000
Manifest this update: Fri 17 Apr 2026 05:22:26 +0000
Manifest next update: Fri 24 Apr 2026 05:22:26 +0000
Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: hYCDtyvzstl4Zq+kPJ7G54Tjqz+jXg/ZlhjjAtf49VI=)
2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: 777ytcJtKRK+U1mjB59992g0IydheNppCEpFNuVRoDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Validity
Not Before: Apr 17 05:22:26 2026 GMT
Not After : Apr 24 05:22:26 2026 GMT
Subject: CN=69e1c392-7dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:78:4f:7e:18:34:ad:5f:8e:94:80:c5:f2:
f2:ca:c5:76:a3:0b:c9:18:1f:35:3e:05:ae:03:0e:
2d:12:f2:9d:8d:53:39:40:eb:01:cf:8f:24:4d:b5:
ed:57:2d:05:aa:b9:64:f7:b2:fa:8d:7d:e0:ee:60:
2e:2c:82:cf:7d:46:46:f6:87:b6:a9:98:6d:45:b1:
f3:a7:1c:62:64:25:a8:13:13:67:91:4b:2e:4e:6f:
22:d7:39:85:92:7e:61:4a:8c:70:64:89:6c:27:36:
ac:ae:a1:9c:e7:65:0d:ad:5f:a6:02:f4:44:b7:3b:
0f:1e:80:0d:b2:1d:d5:70:8e:40:e8:e2:61:ec:f1:
23:22:1f:33:10:66:69:d1:df:28:b8:41:7a:ad:82:
7f:42:bb:cf:be:a0:3a:64:e0:06:ca:92:d5:3f:72:
4f:d8:5d:33:d9:3b:c9:91:59:e4:6f:ac:a9:97:4a:
1a:43:62:33:d4:af:0a:2e:3b:a5:f4:ef:09:a4:b5:
f7:a1:6c:02:36:12:79:e3:85:3e:6e:e7:83:a9:34:
28:46:3d:f0:49:16:18:40:64:cc:c5:bb:24:fa:f8:
58:ab:70:2d:52:1d:ef:09:e6:cd:2e:38:da:7e:2d:
d4:1a:09:11:ec:ba:06:eb:5e:cd:a1:f0:f8:8f:b9:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:61:6A:E0:E9:4D:E1:D4:D7:69:06:B9:8E:A0:D8:6C:5A:DB:CA
X509v3 Authority Key Identifier:
keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:94:77:2d:12:43:05:ba:20:44:b9:09:6c:52:c3:1a:b6:56:
81:3f:b8:06:2a:76:2c:f7:5d:31:e5:ab:6f:bb:da:35:4a:0f:
a0:2e:18:dd:3d:c8:0d:1b:5f:50:0e:be:f8:15:df:cb:d9:ae:
a6:4b:c1:d6:bc:2c:3b:61:5b:87:66:78:c1:40:36:f3:e3:04:
67:ee:16:80:99:01:0c:43:82:b4:8c:80:3d:7c:56:ef:ff:7d:
09:f4:3c:7d:fb:78:59:44:7b:64:9b:8a:50:21:58:3b:eb:30:
64:ae:0a:91:6d:0e:7e:4d:91:c4:c5:fc:ba:0c:6a:ff:47:8c:
6c:1c:fc:0d:93:8f:8b:b3:5d:0b:88:75:88:c8:51:a0:45:22:
92:94:c8:56:54:80:32:d0:00:9c:02:3a:a1:7c:ae:42:2f:cf:
21:2d:a6:fa:c0:b9:fb:17:7c:07:b6:85:63:71:f8:0b:f3:0c:
0a:18:a2:7f:93:e7:23:59:ff:65:04:49:50:aa:da:9a:9e:af:
a4:0e:4d:d7:c1:95:46:48:50:56:b3:2a:f6:54:0c:3c:d0:b0:
c8:4d:fe:02:e5:60:57:0d:05:ec:16:74:e0:a2:b7:5b:24:df:
9d:ae:df:88:04:e0:7f:cd:b4:20:d9:28:59:bd:a0:6b:66:95:
a5:67:45:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDRDUxMTAvBgNVBAUTKEQyNDFGNTcxQ0Q2Mzk3OTYzMERDMUYxNkFENDg5OUQ1
QkVENTY2RTUwHhcNMjYwNDE3MDUyMjI2WhcNMjYwNDI0MDUyMjI2WjAYMRYwFAYD
VQQDEw02OWUxYzM5Mi03ZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmmh4T34YNK1fjpSAxfLyysV2owvJGB81PgWuAw4tEvKdjVM5QOsBz48kTbXt
Vy0Fqrlk97L6jX3g7mAuLILPfUZG9oe2qZhtRbHzpxxiZCWoExNnkUsuTm8i1zmF
kn5hSoxwZIlsJzasrqGc52UNrV+mAvREtzsPHoANsh3VcI5A6OJh7PEjIh8zEGZp
0d8ouEF6rYJ/QrvPvqA6ZOAGypLVP3JP2F0z2TvJkVnkb6ypl0oaQ2Iz1K8KLjul
9O8JpLX3oWwCNhJ544U+bueDqTQoRj3wSRYYQGTMxbsk+vhYq3AtUh3vCebNLjja
fi3UGgkR7LoG617NofD4j7nQxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAysYWrg
6U3h1NdpBrmOoNhsWtvKMB8GA1UdIwQYMBaAFNJB9XHNY5eWMNwfFq1ImdW+1Wbl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83MTk5NUY0RTdG
RUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1WXczQjhXclVpWjFiN1Za
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OUNENS83MTk5NUY0RTdGRUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1
WXczQjhXclVpWjFiN1ZadVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbJR3LRJDBbogRLkJbFLDGrZWgT+4Bip2LPddMeWrb7vaNUoPoC4Y3T3IDRtf
UA6++BXfy9mupkvB1rwsO2Fbh2Z4wUA28+MEZ+4WgJkBDEOCtIyAPXxW7/99CfQ8
fft4WUR7ZJuKUCFYO+swZK4KkW0Ofk2RxMX8ugxq/0eMbBz8DZOPi7NdC4h1iMhR
oEUikpTIVlSAMtAAnAI6oXyuQi/PIS2m+sC5+xd8B7aFY3H4C/MMChiif5PnI1n/
ZQRJUKramp6vpA5N18GVRkhQVrMq9lQMPNCwyE3+AuVgVw0F7BZ04KK3WyTfna7f
iATgf820INkoWb2ga2aVpWdFMg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:57 2026 by rpki-client