
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json)
Hash identifier: vyrf/SDsFVl7B2EaAL+bp+lQyCpIOI82RJlF2+iPUDo=
Subject key identifier: ED:42:E6:EF:10:27:59:50:D1:CD:4D:AB:12:8F:2D:B0:A4:CF:E6:46
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
Manifest number: 01D4
Signing time: Sat 13 Jun 2026 03:44:58 +0000
Manifest this update: Sat 13 Jun 2026 03:44:58 +0000
Manifest next update: Sat 20 Jun 2026 03:44:58 +0000
Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: CzJeha9U6b/Be/QBWlS6Lq2WtcIrDcqBPk7U56PL66U=)
2: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: OQdS0MqbomscJ7LmPYlCtNKMF+iUt0AL2oWOEgu1PX0=)
3: 7251CC7C546211EF85988412C4F9AE02.roa (hash: 6JRD7f3UzQjHPzduH9cDuitGdysFDUsQwpVXNBqTlJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Validity
Not Before: Jun 13 03:44:58 2026 GMT
Not After : Jun 20 03:44:58 2026 GMT
Subject: CN=6a2cd23a-6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:03:35:61:91:60:bd:6a:53:29:74:57:43:07:
a3:a0:2b:8c:08:4b:30:8b:fb:67:27:b4:b0:15:f4:
ed:31:dd:ef:b4:77:fa:9c:ba:dc:c3:9b:d0:81:ee:
f1:fd:6a:56:3c:68:52:1e:4c:bc:19:32:47:b7:92:
47:ef:fc:47:59:5b:47:ce:17:a5:c5:fb:86:27:ed:
be:1d:7c:85:ec:9c:6d:4b:49:e2:13:4a:09:d5:8c:
8d:ab:9c:1a:6c:dc:d5:fb:2c:d6:a5:a7:21:2e:02:
4d:42:e9:1e:22:81:92:80:cf:7b:b7:ff:44:da:6b:
09:fa:c7:2f:f1:5c:6e:ce:e9:8a:78:90:9b:9d:8e:
2b:fe:1e:cd:a7:97:61:1c:8b:be:42:67:8a:1f:b9:
b3:d6:56:d7:ac:db:92:77:da:a7:6f:f2:cb:25:aa:
d1:c1:50:6f:54:62:4b:98:c1:8e:42:86:d7:12:3d:
52:81:f8:c5:2f:05:64:a1:a2:03:63:c5:3a:f6:00:
37:80:0a:d8:23:15:57:e4:eb:00:80:bc:b4:c1:66:
08:c2:1d:a4:47:c6:f5:a6:28:d6:e3:02:10:b8:dd:
06:1e:da:e9:87:cf:5c:c1:bf:8e:5c:8e:05:ce:23:
e6:1a:fc:96:56:b0:a4:45:95:13:7b:96:b9:61:c5:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:42:E6:EF:10:27:59:50:D1:CD:4D:AB:12:8F:2D:B0:A4:CF:E6:46
X509v3 Authority Key Identifier:
keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:da:e6:93:47:f0:04:42:11:50:dd:93:bf:3a:41:4e:a1:25:
a4:0b:87:09:36:b7:2e:6a:f3:2c:37:35:06:f6:7a:94:83:8a:
0c:1a:00:5e:2a:03:ba:de:bd:19:be:95:03:fa:fb:2e:da:46:
8b:c4:21:b3:4e:65:20:2f:c4:01:eb:83:71:67:15:3f:17:9e:
f7:a0:0d:54:07:30:a6:20:30:5f:79:97:46:94:b4:d2:ac:de:
dc:97:ff:2b:4f:28:08:c4:8a:f6:ec:1c:b4:a0:6e:1d:3f:48:
60:26:7a:60:26:a7:98:90:aa:24:cf:c3:ad:0d:4d:ce:f0:d0:
9d:e8:af:5d:12:06:ca:5a:e3:64:2f:21:2a:79:bd:81:f6:36:
a9:ab:5c:b1:15:23:73:bf:9c:24:4d:8e:72:62:04:93:50:f4:
e6:d0:24:a4:8e:12:9e:e6:89:3d:00:32:8f:f1:c3:8f:19:b9:
cd:43:6d:67:28:c6:2f:4c:0f:83:7a:11:23:c3:ea:3e:fa:9e:
e1:1a:1c:1d:7e:88:9d:7d:3c:db:af:b4:2a:02:14:c8:28:d6:
7e:32:29:ba:66:28:da:b3:55:b2:2f:58:35:b6:0a:9f:ba:c3:
18:83:66:a3:a8:42:f9:03:9b:43:e2:b9:29:55:25:9e:71:e8:
1a:a8:dd:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkU2RDcxMTAvBgNVBAUTKDcwQ0QwMkI2NjQyNDc5QTg3NDQ2MjcxNTcwNkU2QUE5
QTg5REEyQzkwHhcNMjYwNjEzMDM0NDU4WhcNMjYwNjIwMDM0NDU4WjAYMRYwFAYD
VQQDEw02YTJjZDIzYS02Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8QM1YZFgvWpTKXRXQwejoCuMCEswi/tnJ7SwFfTtMd3vtHf6nLrcw5vQge7x
/WpWPGhSHky8GTJHt5JH7/xHWVtHzhelxfuGJ+2+HXyF7JxtS0niE0oJ1YyNq5wa
bNzV+yzWpachLgJNQukeIoGSgM97t/9E2msJ+scv8VxuzumKeJCbnY4r/h7Np5dh
HIu+QmeKH7mz1lbXrNuSd9qnb/LLJarRwVBvVGJLmMGOQobXEj1SgfjFLwVkoaID
Y8U69gA3gArYIxVX5OsAgLy0wWYIwh2kR8b1pijW4wIQuN0GHtrph89cwb+OXI4F
ziPmGvyWVrCkRZUTe5a5YcWO+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1C5u8Q
J1lQ0c1NqxKPLbCkz+ZGMB8GA1UdIwQYMBaAFHDNArZkJHmodEYnFXBuaqmonaLJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZENy83MUE1MTU3NEFF
RjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2VhaDBSaWNWY0c1cXFhaWRv
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTZENy83MUE1MTU3NEFFRjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2Vh
aDBSaWNWY0c1cXFhaWRvc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMdrmk0fwBEIRUN2TvzpBTqElpAuHCTa3LmrzLDc1BvZ6lIOKDBoAXioDut69
Gb6VA/r7LtpGi8Qhs05lIC/EAeuDcWcVPxee96ANVAcwpiAwX3mXRpS00qze3Jf/
K08oCMSK9uwctKBuHT9IYCZ6YCanmJCqJM/DrQ1NzvDQneivXRIGylrjZC8hKnm9
gfY2qatcsRUjc7+cJE2OcmIEk1D05tAkpI4SnuaJPQAyj/HDjxm5zUNtZyjGL0wP
g3oRI8PqPvqe4RocHX6InX0826+0KgIUyCjWfjIpumYo2rNVsi9YNbYKn7rDGINm
o6hC+QObQ+K5KVUlnnHoGqjdiA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:38:17 2026 by rpki-client