
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft
File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json)
Hash identifier: R9LEpcIwyx7qhiuDUsaOSjfH3/KdUkFeovYWPiRqm7I=
Subject key identifier: 8D:73:E2:EC:62:9C:B2:10:37:55:ED:BF:16:99:B8:9F:65:3B:FB:E9
Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9
Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9
Certificate serial: 2E35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft
Manifest number: 2E0E
Signing time: Tue 16 Jun 2026 15:30:45 +0000
Manifest this update: Tue 16 Jun 2026 15:30:44 +0000
Manifest next update: Tue 23 Jun 2026 15:30:44 +0000
Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: eExlgTV40NAe1tgpr0e+SAHyuFlojZXULDKospL78Es=)
2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: ZGLBdSKyApanjt3DB4LGqUMAAL9hh/eBxEwyqsKMNwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl
rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11829 (0x2e35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9
Validity
Not Before: Jun 16 15:30:44 2026 GMT
Not After : Jun 23 15:30:44 2026 GMT
Subject: CN=6a316c24-a0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:a9:e9:72:6c:f8:b3:ca:17:03:04:eb:fa:
1d:e5:cd:dc:2d:f1:45:8f:69:47:00:a0:51:da:7c:
63:b9:85:44:12:bd:d0:97:31:54:22:1a:96:39:45:
b0:f9:67:9c:c6:6d:82:36:c1:a8:ac:23:2d:cc:c0:
18:09:2f:d8:19:71:0a:c8:0f:5e:89:88:bb:53:0e:
9b:5d:93:9d:ef:18:a0:86:60:c5:97:d6:9f:77:1d:
88:e1:51:6e:31:ed:85:5c:c5:48:89:04:69:03:b3:
63:08:84:12:6a:a1:79:71:4a:19:f6:7c:99:9a:34:
78:c0:00:72:36:c4:16:22:16:3e:41:30:96:0f:60:
40:1d:ad:39:8f:42:57:e0:5e:35:20:31:0c:7e:1a:
c7:64:48:83:bb:8b:fd:bc:f7:2d:27:22:a8:a8:e4:
11:9b:d7:8e:1e:d3:bf:12:a4:4a:bd:88:c9:47:f4:
ba:54:bb:92:01:09:d1:19:d6:7d:2f:ac:2a:cd:14:
a3:fe:4d:a5:14:a7:39:c4:de:d9:fd:f1:51:f9:af:
4f:85:3b:73:83:29:48:3c:a9:3c:97:ee:c8:f6:8f:
e6:34:3f:9c:07:c6:a5:00:95:6d:72:d7:30:90:6c:
3b:31:a9:53:7f:9c:02:fa:db:2b:01:79:cc:e1:9e:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:73:E2:EC:62:9C:B2:10:37:55:ED:BF:16:99:B8:9F:65:3B:FB:E9
X509v3 Authority Key Identifier:
keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:f9:e8:c8:f4:bc:bb:bd:eb:f7:e8:75:1c:c5:05:2f:04:4b:
3e:5c:aa:9e:8b:4b:42:86:ea:97:7a:0d:cb:35:36:cb:d8:fa:
82:16:cc:6f:74:75:7a:c6:29:b1:6a:66:b3:19:9a:0f:c8:54:
96:99:cb:37:42:9b:26:10:03:e9:f4:0e:ce:14:21:9b:be:e2:
14:67:e3:12:3a:5d:63:b6:1b:bd:0b:df:52:96:ba:58:ca:d3:
74:4e:bf:02:99:df:35:7a:4b:49:35:cc:cb:19:3e:c6:25:b5:
dc:04:60:f1:d8:f0:68:2f:2e:3c:8b:a0:fc:ab:4d:ad:db:13:
0e:ee:e3:df:4a:83:8d:56:6e:fd:91:2b:c7:e6:e8:1d:61:ef:
5c:1b:ae:e8:a5:3f:11:c7:ee:19:8c:d9:1a:56:9f:c3:32:19:
f5:70:0a:5f:e0:2f:12:91:41:a8:92:2d:b2:8f:99:9f:ec:a9:
10:68:ad:1d:35:aa:48:af:d1:90:24:17:06:62:3b:d4:5f:8d:
45:08:c4:18:01:d0:6e:2f:dd:d5:e7:7d:40:19:3f:84:c2:0a:
f9:76:36:7e:32:51:4c:ed:14:8e:21:c4:fa:50:8c:36:51:7a:
30:12:b4:da:22:75:f1:07:d3:3b:d3:10:aa:72:69:6c:22:f3:
5e:4d:0c:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2
QkIxQjc0RDkwHhcNMjYwNjE2MTUzMDQ0WhcNMjYwNjIzMTUzMDQ0WjAYMRYwFAYD
VQQDEw02YTMxNmMyNC1hMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdap6XJs+LPKFwME6/od5c3cLfFFj2lHAKBR2nxjuYVEEr3QlzFUIhqWOUWw
+Wecxm2CNsGorCMtzMAYCS/YGXEKyA9eiYi7Uw6bXZOd7xighmDFl9afdx2I4VFu
Me2FXMVIiQRpA7NjCIQSaqF5cUoZ9nyZmjR4wAByNsQWIhY+QTCWD2BAHa05j0JX
4F41IDEMfhrHZEiDu4v9vPctJyKoqOQRm9eOHtO/EqRKvYjJR/S6VLuSAQnRGdZ9
L6wqzRSj/k2lFKc5xN7Z/fFR+a9PhTtzgylIPKk8l+7I9o/mND+cB8alAJVtctcw
kGw7MalTf5wC+tsrAXnM4Z5qTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1z4uxi
nLIQN1XtvxaZuJ9lO/vpMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG
QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q
cGNVenpFYzZmRU5yc2JkTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkPnoyPS8u73r9+h1HMUFLwRLPlyqnotLQobql3oNyzU2y9j6ghbMb3R1esYp
sWpmsxmaD8hUlpnLN0KbJhAD6fQOzhQhm77iFGfjEjpdY7YbvQvfUpa6WMrTdE6/
ApnfNXpLSTXMyxk+xiW13ARg8djwaC8uPIug/KtNrdsTDu7j30qDjVZu/ZErx+bo
HWHvXBuu6KU/EcfuGYzZGlafwzIZ9XAKX+AvEpFBqJItso+Zn+ypEGitHTWqSK/R
kCQXBmI71F+NRQjEGAHQbi/d1ed9QBk/hMIK+XY2fjJRTO0UjiHE+lCMNlF6MBK0
2iJ18QfTO9MQqnJpbCLzXk0MmA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:02:33 2026 by rpki-client