
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
File: iV5rynpcNtnzBEctDScTpILJ2yU.mft (raw, json)
Hash identifier: WrF4Xjq9Zs/D/Et+xR/gPacZZVXWurfn4D+JzvLHj0s=
Subject key identifier: D9:31:BD:D6:CB:C8:5A:64:DA:8B:E2:0C:4F:05:46:74:2F:7D:DC:74
Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
Certificate issuer: /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Certificate serial: 0CF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
Manifest number: 0CEC
Signing time: Thu 16 Apr 2026 18:10:50 +0000
Manifest this update: Thu 16 Apr 2026 18:10:49 +0000
Manifest next update: Thu 23 Apr 2026 18:10:49 +0000
Files and hashes: 1: iV5rynpcNtnzBEctDScTpILJ2yU.crl (hash: y87P+RO5q7XBjXNApQ2LUYrExDwLtdFDkCM+DfQrm1k=)
2: 37759456617811ECBB095A62C4F9AE02.roa (hash: GoPelaWzfjsTFtPr3I95eodushRHuWInvxaTpmekvow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3319 (0xcf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25
Validity
Not Before: Apr 16 18:10:49 2026 GMT
Not After : Apr 23 18:10:49 2026 GMT
Subject: CN=69e1262a-8b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:7c:c7:68:45:6a:c3:dc:c4:e3:91:15:58:
2b:7d:dc:b4:4a:e1:e6:bd:25:df:1f:37:59:65:1f:
d2:41:4d:c9:e5:5c:10:9c:a4:ef:cf:ef:ad:fd:01:
1a:ea:83:50:f2:a4:40:d1:4e:5b:7d:5c:b9:24:d0:
b8:31:ed:3d:66:71:cd:0d:e6:ac:05:90:88:47:81:
9c:ff:6e:ce:a8:f4:f1:20:15:23:6e:41:35:ab:a8:
f7:fb:01:32:c1:16:1c:2c:a8:e8:7b:d5:10:95:ea:
fe:58:96:9f:fe:25:ba:85:96:1b:c6:1c:71:1b:64:
af:15:2a:5b:b8:a0:3d:72:eb:fa:9f:63:64:81:05:
4b:fd:4e:8f:94:a7:f8:d8:06:63:c8:dd:35:b8:91:
cd:eb:d1:a8:d9:20:a6:65:fd:f5:01:d7:2c:3e:3c:
33:12:4e:54:0e:67:64:9f:32:76:bd:8c:36:56:0e:
b4:b1:fe:64:8f:40:d0:af:5e:72:f6:a0:0b:3f:2d:
63:5a:16:cf:f2:30:57:a1:ff:1b:8b:bc:e4:99:8f:
f8:d1:1d:e5:a3:75:d9:45:19:9f:92:32:cf:0c:c9:
51:ee:d0:52:24:c7:22:a8:09:1a:76:a5:bc:0c:ed:
f9:87:1d:46:6d:c1:f0:47:c0:1e:d0:68:70:77:12:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:31:BD:D6:CB:C8:5A:64:DA:8B:E2:0C:4F:05:46:74:2F:7D:DC:74
X509v3 Authority Key Identifier:
keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:6a:94:4c:2e:b5:52:28:84:cb:e7:1b:11:bf:28:48:4e:
07:08:a5:b2:1f:fa:1a:cc:9d:29:7a:1d:49:b9:ff:0c:23:29:
e6:63:66:ce:62:1a:8c:94:52:bb:ae:90:0f:8b:95:62:0d:c8:
cf:32:31:af:e6:1d:84:a5:9a:f3:e6:f1:f3:9d:aa:7c:fd:d9:
ec:1f:96:3a:89:b0:0f:73:a8:32:98:80:01:0e:9d:97:ed:6b:
8e:b4:16:15:84:e1:52:da:5d:08:4f:f2:ff:12:09:4b:ff:c6:
67:c3:af:c9:d6:7f:9c:4d:77:ea:06:cc:bd:21:ec:1b:bc:bf:
38:10:91:ff:a3:e1:74:09:1c:0c:00:ca:73:7f:17:13:5d:cd:
05:16:a7:73:fc:28:43:1b:0c:ee:15:ba:a5:a7:79:ef:fc:43:
61:2f:e4:b8:44:fc:6f:00:e7:d6:78:c8:7d:3a:8e:be:4a:4a:
5e:7f:27:11:ea:22:ac:fb:d1:da:93:18:c0:e0:90:cc:aa:4d:
9b:71:b7:14:9a:62:0c:79:7c:29:ca:fe:ae:87:c3:aa:87:32:
d5:5f:af:e5:20:7e:62:48:65:f0:c1:e8:cc:e5:cb:49:61:76:
db:bf:a5:9f:c5:ed:e6:09:8e:ef:04:32:b9:98:9e:34:bb:f6:
2a:71:ff:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgyOUExMTAvBgNVBAUTKDg5NUU2QkNBN0E1QzM2RDlGMzA0NDcyRDBEMjcxM0E0
ODJDOURCMjUwHhcNMjYwNDE2MTgxMDQ5WhcNMjYwNDIzMTgxMDQ5WjAYMRYwFAYD
VQQDEw02OWUxMjYyYS04Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2zB8x2hFasPcxOORFVgrfdy0SuHmvSXfHzdZZR/SQU3J5VwQnKTvz++t/QEa
6oNQ8qRA0U5bfVy5JNC4Me09ZnHNDeasBZCIR4Gc/27OqPTxIBUjbkE1q6j3+wEy
wRYcLKjoe9UQler+WJaf/iW6hZYbxhxxG2SvFSpbuKA9cuv6n2NkgQVL/U6PlKf4
2AZjyN01uJHN69Go2SCmZf31AdcsPjwzEk5UDmdknzJ2vYw2Vg60sf5kj0DQr15y
9qALPy1jWhbP8jBXof8bi7zkmY/40R3lo3XZRRmfkjLPDMlR7tBSJMciqAkadqW8
DO35hx1GbcHwR8Ae0GhwdxLHTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkxvdbL
yFpk2oviDE8FRnQvfdx0MB8GA1UdIwQYMBaAFIlea8p6XDbZ8wRHLQ0nE6SCydsl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI5QS8xRjIzRTA1ODA1
N0YxMUVBQTU1MTZCM0ZDNEY5QUUwMi9pVjVyeW5wY050bnpCRWN0RFNjVHBJTEoy
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWNXJ5bnBjTnRuekJFY3REU2NUcElMSjJ5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODI5QS8xRjIzRTA1ODA1N0YxMUVBQTU1MTZCM0ZDNEY5QUUwMi9pVjVyeW5wY050
bnpCRWN0RFNjVHBJTEoyeVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArB9qlEwutVIohMvnGxG/KEhOBwilsh/6GsydKXodSbn/DCMp5mNmzmIajJRS
u66QD4uVYg3IzzIxr+YdhKWa8+bx852qfP3Z7B+WOomwD3OoMpiAAQ6dl+1rjrQW
FYThUtpdCE/y/xIJS//GZ8OvydZ/nE136gbMvSHsG7y/OBCR/6PhdAkcDADKc38X
E13NBRanc/woQxsM7hW6pad57/xDYS/kuET8bwDn1njIfTqOvkpKXn8nEeoirPvR
2pMYwOCQzKpNm3G3FJpiDHl8Kcr+rofDqocy1V+v5SB+Ykhl8MHozOXLSWF227+l
n8Xt5gmO7wQyuZieNLv2KnH/1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:39 2026 by rpki-client