
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
File: aMK1iNFoWlh0LYouGIhl2zEQPPc.mft (raw, json)
Hash identifier: 9tggVw98lEw83cgBR71qyRsc7kWyJ7N/SnLk2dvBwWs=
Subject key identifier: 60:BB:38:CB:FF:B2:EA:20:8B:AC:49:63:89:B8:D7:91:0A:F4:C4:F9
Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
Manifest number: 011E
Signing time: Fri 17 Apr 2026 05:31:22 +0000
Manifest this update: Fri 17 Apr 2026 05:31:21 +0000
Manifest next update: Fri 24 Apr 2026 05:31:21 +0000
Files and hashes: 1: aMK1iNFoWlh0LYouGIhl2zEQPPc.crl (hash: kQugoDc+pgR5D3zZvp/9J7q2bfhv1uL3IGShFLBn+Vg=)
2: B2D0D768766011F08F4AF05AC4F9AE02.roa (hash: AFwVZfcUHzwe9j0UrSqlyKnxLzWcBfDiYKBuQr8Nbjs=)
3: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (hash: EUtWxQAE1BFRn9M5BHJ1aea0TybMQyltaStUs+wgA48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7
Validity
Not Before: Apr 17 05:31:21 2026 GMT
Not After : Apr 24 05:31:21 2026 GMT
Subject: CN=69e1c5a9-50a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:03:97:3a:86:51:19:f2:c7:b9:24:51:1e:
f4:22:30:f4:89:f3:35:a9:71:bf:db:a0:77:d2:a4:
b1:89:90:84:b4:f6:92:d5:34:45:b1:a3:84:08:81:
6c:9f:70:87:54:8d:c3:7a:2c:45:d2:10:40:7a:f9:
1c:c3:eb:46:78:9c:99:f3:4d:a8:5e:e3:ab:66:5f:
45:c8:eb:6e:6d:6b:ab:ff:a1:7b:25:10:50:a0:b1:
f2:d4:af:62:61:0b:d5:d1:41:ff:97:b4:3a:45:74:
7e:01:6e:fe:30:71:81:c0:9b:e2:6d:2f:e9:7d:8b:
47:2c:7f:47:64:fa:a1:70:d5:43:89:e8:35:fa:dd:
f7:4a:be:96:0e:31:50:8e:4a:d8:dd:dd:b7:a8:c7:
06:53:76:6b:c5:9c:07:d5:26:a1:3d:c5:20:c1:b5:
b4:12:0d:23:c8:68:df:74:01:b3:49:03:63:8b:43:
dc:6e:86:50:3a:2b:f9:cb:bd:4c:c7:80:65:f6:51:
f5:50:30:d5:67:87:13:c8:73:ff:1e:e0:36:bd:67:
a9:7f:c1:52:92:bb:fa:18:f2:f8:27:3b:80:34:cf:
04:8a:3c:51:f8:13:49:20:15:61:1d:ef:31:b7:f1:
c5:83:75:64:81:e1:e3:bf:92:45:6c:c5:e9:06:e9:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BB:38:CB:FF:B2:EA:20:8B:AC:49:63:89:B8:D7:91:0A:F4:C4:F9
X509v3 Authority Key Identifier:
keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:b4:95:5e:db:38:be:e9:ed:3a:7e:77:1f:cd:75:b9:da:
8b:14:ce:a5:f7:b7:4c:b5:56:ac:23:87:21:ed:ae:d7:38:83:
8e:ac:d3:27:45:da:56:9b:3d:91:8f:2c:5a:45:fc:c4:e1:a2:
67:1b:13:6e:02:1e:8c:25:e8:d7:12:17:75:30:b1:f8:68:b2:
b9:77:f8:66:a0:55:26:71:2d:f6:68:87:26:47:5c:6b:1c:c4:
25:ca:a6:31:bd:7e:d2:aa:01:a6:64:83:9a:20:3b:6f:c6:4b:
54:8a:bb:ac:7c:c4:c1:ca:bc:59:47:ba:86:8e:a5:8d:06:28:
4f:18:a1:3f:3d:dc:5d:72:c1:4d:fd:16:e3:a4:da:a0:fb:bd:
f9:9b:30:e1:cd:ea:0b:45:fd:6c:5c:ec:aa:c4:75:92:91:83:
ea:86:42:5f:a2:3d:dc:53:2c:ed:a0:99:b2:13:26:f0:a8:53:
0b:9d:02:a0:c7:01:13:df:63:20:7d:79:70:64:1b:b5:ee:b5:
e3:c9:1c:a8:e2:08:61:71:f9:c4:00:66:b5:d6:5a:07:7b:ab:
42:8d:15:10:b0:26:44:03:85:4e:fc:13:c0:ef:5c:2c:70:a9:
14:b8:ca:d7:54:35:57:ff:66:49:32:9e:02:18:03:b3:35:a2:
15:85:19:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFEQUYxMTAvBgNVBAUTKDY4QzJCNTg4RDE2ODVBNTg3NDJEOEEyRTE4ODg2NURC
MzExMDNDRjcwHhcNMjYwNDE3MDUzMTIxWhcNMjYwNDI0MDUzMTIxWjAYMRYwFAYD
VQQDEw02OWUxYzVhOS01MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzMsDlzqGURnyx7kkUR70IjD0ifM1qXG/26B30qSxiZCEtPaS1TRFsaOECIFs
n3CHVI3DeixF0hBAevkcw+tGeJyZ802oXuOrZl9FyOtubWur/6F7JRBQoLHy1K9i
YQvV0UH/l7Q6RXR+AW7+MHGBwJvibS/pfYtHLH9HZPqhcNVDieg1+t33Sr6WDjFQ
jkrY3d23qMcGU3ZrxZwH1SahPcUgwbW0Eg0jyGjfdAGzSQNji0PcboZQOiv5y71M
x4Bl9lH1UDDVZ4cTyHP/HuA2vWepf8FSkrv6GPL4JzuANM8EijxR+BNJIBVhHe8x
t/HFg3VkgeHjv5JFbMXpBukH0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGC7OMv/
suogi6xJY4m415EK9MT5MB8GA1UdIwQYMBaAFGjCtYjRaFpYdC2KLhiIZdsxEDz3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQURBRi84NzE1OUM5NjhD
RjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1dsaDBMWW91R0lobDJ6RVFQ
UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FNSzFpTkZvV2xoMExZb3VHSWhsMnpFUVBQYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QURBRi84NzE1OUM5NjhDRjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1ds
aDBMWW91R0lobDJ6RVFQUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEActq0lV7bOL7p7Tp+dx/NdbnaixTOpfe3TLVWrCOHIe2u1ziDjqzTJ0XaVps9
kY8sWkX8xOGiZxsTbgIejCXo1xIXdTCx+GiyuXf4ZqBVJnEt9miHJkdcaxzEJcqm
Mb1+0qoBpmSDmiA7b8ZLVIq7rHzEwcq8WUe6ho6ljQYoTxihPz3cXXLBTf0W46Ta
oPu9+Zsw4c3qC0X9bFzsqsR1kpGD6oZCX6I93FMs7aCZshMm8KhTC50CoMcBE99j
IH15cGQbte6148kcqOIIYXH5xABmtdZaB3urQo0VELAmRAOFTvwTwO9cLHCpFLjK
11Q1V/9mSTKeAhgDszWiFYUZkw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:44 2026 by rpki-client