
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json)
Hash identifier: FW75Zfyoct4xK8SgKIa7CT3vFoDmvPha7sna7uo3gyU=
Subject key identifier: BF:CE:66:10:AA:6E:E8:AB:96:AF:36:85:07:5F:0D:4A:5D:94:43:2A
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial: 0E00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
Manifest number: 0DF0
Signing time: Thu 16 Apr 2026 17:46:39 +0000
Manifest this update: Thu 16 Apr 2026 17:46:39 +0000
Manifest next update: Thu 23 Apr 2026 17:46:39 +0000
Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: WJoRLpN7FeBLsVHOEYZd+7EV/0CebLaSYXa4C8BMXW4=)
2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: egC6j0/L+vNrahwqS7R8sgu3NxXeX9dmJPD7oQ0uOyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Validity
Not Before: Apr 16 17:46:39 2026 GMT
Not After : Apr 23 17:46:39 2026 GMT
Subject: CN=69e1207f-4068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:ae:74:5c:3b:21:48:0e:0b:49:a5:63:21:
9e:14:63:5a:af:44:4d:ab:f1:25:36:c6:82:d4:a9:
88:59:a7:83:50:d0:20:a9:2d:6d:35:3a:4a:07:eb:
3c:12:7e:14:de:7d:57:e3:bd:42:4f:88:63:90:6c:
18:63:cd:65:0f:bf:71:0b:59:c7:76:29:33:9f:85:
69:d9:30:b2:88:9b:c3:cd:5e:5c:c1:e2:70:23:6f:
88:fb:f6:6b:5e:a4:f5:55:97:01:b3:a7:f6:de:19:
63:94:62:48:f1:52:1c:be:59:10:67:d7:6f:2e:ca:
3d:f4:4b:1d:6e:6c:4f:79:9b:01:d1:9c:0a:a5:d9:
38:98:8a:d5:bb:3f:2a:81:d0:45:a4:86:47:1a:e3:
a9:82:e6:07:20:39:e5:8a:7c:32:e5:0a:f7:3d:c1:
2b:22:e7:5f:43:d5:a0:d9:c8:e6:0a:b0:a8:65:33:
b0:83:e3:7e:2f:38:2b:d4:09:4f:4c:37:2d:1b:a6:
71:06:ed:da:b6:eb:55:be:36:9d:45:e3:87:14:0e:
61:12:41:6b:2b:34:15:e4:c5:01:aa:df:ae:a5:ef:
96:fa:83:93:db:96:bb:cb:bc:4f:40:2f:c7:b9:8b:
27:74:b8:0a:67:b7:21:4d:ac:28:f6:54:20:fe:6b:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CE:66:10:AA:6E:E8:AB:96:AF:36:85:07:5F:0D:4A:5D:94:43:2A
X509v3 Authority Key Identifier:
keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:2c:c7:74:dd:49:51:cd:57:ea:92:44:74:0e:86:69:4a:17:
a7:18:8f:f3:7f:93:c5:85:6a:ad:cf:d8:84:69:c7:dd:7d:18:
45:c5:95:bc:f1:03:02:9d:cd:0f:01:d6:94:6f:12:ee:49:96:
fa:c7:1f:52:26:c6:74:e8:41:fe:06:9e:51:4e:3d:1f:4a:92:
21:99:4e:85:fa:64:5c:f4:e8:70:92:3a:2b:c1:38:4c:26:80:
8a:19:ec:0f:8f:db:e6:1c:c5:26:68:14:12:be:b2:02:d9:bc:
39:0f:34:f1:0e:05:13:76:3c:4c:d7:6a:53:ef:96:7e:1d:01:
98:9b:66:c1:00:7d:0b:6b:5b:06:0a:e8:67:8f:d7:2d:be:86:
7f:72:da:7c:09:66:c6:25:15:2b:82:2a:0d:16:5f:76:7c:ac:
cb:e0:14:49:7f:cb:e1:7d:18:4f:03:ad:6a:af:8e:11:c2:45:
ca:b2:fe:0a:bd:63:c8:30:b8:ef:f0:3e:b5:a6:63:c1:9a:ae:
df:eb:e3:21:b5:85:d3:66:de:12:e2:96:77:8d:05:79:09:d6:
ea:61:fd:0f:88:9f:fa:ce:c7:69:2d:f0:ac:31:36:ce:9f:69:
e1:fa:30:13:86:25:99:c6:9b:81:b2:a8:2d:b8:ec:aa:e1:6c:
92:01:30:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC
QzA5NzdDQzgwHhcNMjYwNDE2MTc0NjM5WhcNMjYwNDIzMTc0NjM5WjAYMRYwFAYD
VQQDEw02OWUxMjA3Zi00MDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA296udFw7IUgOC0mlYyGeFGNar0RNq/ElNsaC1KmIWaeDUNAgqS1tNTpKB+s8
En4U3n1X471CT4hjkGwYY81lD79xC1nHdikzn4Vp2TCyiJvDzV5cweJwI2+I+/Zr
XqT1VZcBs6f23hljlGJI8VIcvlkQZ9dvLso99EsdbmxPeZsB0ZwKpdk4mIrVuz8q
gdBFpIZHGuOpguYHIDnlinwy5Qr3PcErIudfQ9Wg2cjmCrCoZTOwg+N+Lzgr1AlP
TDctG6ZxBu3atutVvjadReOHFA5hEkFrKzQV5MUBqt+upe+W+oOT25a7y7xPQC/H
uYsndLgKZ7chTawo9lQg/mv1twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/OZhCq
buirlq82hQdfDUpdlEMqMB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz
N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm
TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjlBMS9EMjYwMTVDQUQzN0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5
U1R0TEs2bTFWeW04Q1hmTWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0izHdN1JUc1X6pJEdA6GaUoXpxiP83+TxYVqrc/YhGnH3X0YRcWVvPEDAp3N
DwHWlG8S7kmW+scfUibGdOhB/gaeUU49H0qSIZlOhfpkXPTocJI6K8E4TCaAihns
D4/b5hzFJmgUEr6yAtm8OQ808Q4FE3Y8TNdqU++Wfh0BmJtmwQB9C2tbBgroZ4/X
Lb6Gf3LafAlmxiUVK4IqDRZfdnysy+AUSX/L4X0YTwOtaq+OEcJFyrL+Cr1jyDC4
7/A+taZjwZqu3+vjIbWF02beEuKWd40FeQnW6mH9D4if+s7HaS3wrDE2zp9p4fow
E4YlmcabgbKoLbjsquFskgEw0w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:51 2026 by rpki-client