
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
File: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json)
Hash identifier: yCT1m98BS3iVIXt0bWuLMMHy0VER8MYCNvah7iKm1i8=
Subject key identifier: 93:A2:0C:90:A5:84:E8:2A:7E:4E:AD:FC:D7:45:E2:8D:1F:43:77:4B
Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
Manifest number: 0148
Signing time: Fri 17 Apr 2026 04:57:28 +0000
Manifest this update: Fri 17 Apr 2026 04:57:28 +0000
Manifest next update: Fri 24 Apr 2026 04:57:28 +0000
Files and hashes: 1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: /mgxXznPnJwZJWfI9gZzqpB1PbsCgPxjakX/zLHvg+Q=)
2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: wpEukBumTxmT4e2pU7Nv0zr8HBN5v6g/VuuPyeiJSDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Validity
Not Before: Apr 17 04:57:28 2026 GMT
Not After : Apr 24 04:57:28 2026 GMT
Subject: CN=69e1bdb8-1238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:51:7e:b8:20:da:f7:d2:cb:bb:a5:9d:16:
fe:70:47:75:30:7c:59:5e:26:fb:82:50:ff:be:7c:
2c:41:df:a7:6b:60:75:c5:3e:8b:81:f5:08:25:76:
56:ca:0e:53:0f:b6:b0:51:32:d0:25:a4:b9:9a:d4:
e2:04:b9:71:c7:3e:a3:1c:82:f4:e2:bd:82:26:3e:
0c:e9:ff:3d:66:50:a1:33:71:52:8e:68:50:83:07:
79:49:5a:44:a0:ee:a3:b9:93:4d:f1:43:ce:cd:27:
85:56:44:b6:15:96:42:ec:6b:64:f1:97:93:b9:2e:
44:91:9d:6f:73:5d:1e:6e:13:30:8a:55:78:5a:b7:
df:a5:c7:99:ab:c1:ab:4b:58:99:b2:08:61:6b:9a:
c2:2c:c9:49:65:d5:d9:5c:00:e4:f3:5c:13:70:04:
22:98:73:1d:c1:f0:cc:84:03:46:ea:ed:3b:81:c5:
5f:09:ec:bc:3d:87:b6:0a:54:c4:3f:6c:1d:af:a3:
b9:0f:55:27:45:cd:73:eb:d9:8a:03:7f:2b:81:bc:
9c:ba:ba:42:66:75:6f:c7:40:fa:94:d5:40:04:51:
7e:b6:3c:cb:11:3c:23:a1:c6:a1:80:df:7f:95:18:
3a:a8:f2:41:c7:54:60:c6:79:b1:16:c7:d2:22:57:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A2:0C:90:A5:84:E8:2A:7E:4E:AD:FC:D7:45:E2:8D:1F:43:77:4B
X509v3 Authority Key Identifier:
keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:75:cc:9d:9e:49:e2:b8:d2:eb:4b:d6:af:ad:d5:df:27:76:
9d:80:e6:af:42:43:f4:25:0d:f6:35:d3:f6:74:6f:ad:0d:46:
2f:69:86:91:95:8f:9a:d1:99:75:dd:f2:11:db:dc:a8:b0:73:
a8:78:18:76:54:7e:ca:7e:08:28:3d:cf:22:c1:44:d0:b0:59:
8d:41:17:35:f1:b8:0e:9c:f8:5b:ef:db:ea:1b:11:b2:0c:54:
6d:3f:29:e1:be:74:54:ad:f4:1c:68:5a:a5:12:ac:20:6b:3c:
d0:07:e9:d3:99:09:84:ec:ff:7d:ed:7f:42:47:01:a6:5e:f8:
8e:17:a6:af:d2:17:ff:43:ff:56:b6:ee:0a:c9:eb:81:4e:5d:
0a:6d:bd:bf:cb:20:3b:c5:ef:2c:1e:39:60:c9:21:71:ab:e8:
ba:91:82:51:36:40:3a:8a:0f:8d:5e:4c:1a:96:c8:fd:33:61:
64:e2:e1:17:5f:92:8f:1c:56:fe:6e:b2:91:70:89:1d:0b:39:
8b:66:8c:03:81:6b:33:a9:ea:e9:91:ed:f7:40:52:dd:b4:04:
28:cf:a8:80:37:ce:02:71:3d:19:49:d9:d1:c8:0c:4b:47:72:
35:f5:d9:fa:3a:b1:81:da:7a:e9:c6:e3:84:9c:9e:e5:62:fe:
2a:0c:34:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U4MTQxMTAvBgNVBAUTKDExOEQ5QkRFMzE3NTRGOTg1NENCNTU0NzQwQTI5OUYx
MzdFMjQxRTIwHhcNMjYwNDE3MDQ1NzI4WhcNMjYwNDI0MDQ1NzI4WjAYMRYwFAYD
VQQDEw02OWUxYmRiOC0xMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiWJRfrgg2vfSy7ulnRb+cEd1MHxZXib7glD/vnwsQd+na2B1xT6LgfUIJXZW
yg5TD7awUTLQJaS5mtTiBLlxxz6jHIL04r2CJj4M6f89ZlChM3FSjmhQgwd5SVpE
oO6juZNN8UPOzSeFVkS2FZZC7Gtk8ZeTuS5EkZ1vc10ebhMwilV4WrffpceZq8Gr
S1iZsghha5rCLMlJZdXZXADk81wTcAQimHMdwfDMhANG6u07gcVfCey8PYe2ClTE
P2wdr6O5D1UnRc1z69mKA38rgbycurpCZnVvx0D6lNVABFF+tjzLETwjocahgN9/
lRg6qPJBx1RgxnmxFsfSIlcOOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOiDJCl
hOgqfk6t/NdF4o0fQ3dLMB8GA1UdIwQYMBaAFBGNm94xdU+YVMtVR0CimfE34kHi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxNC84QzU3RjE1QTRB
MzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1aFV5MVZIUUtLWjhUZmlR
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VZMmIzakYxVDVoVXkxVkhRS0taOFRmaVFlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTgxNC84QzU3RjE1QTRBMzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1
aFV5MVZIUUtLWjhUZmlRZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc3XMnZ5J4rjS60vWr63V3yd2nYDmr0JD9CUN9jXT9nRvrQ1GL2mGkZWPmtGZ
dd3yEdvcqLBzqHgYdlR+yn4IKD3PIsFE0LBZjUEXNfG4Dpz4W+/b6hsRsgxUbT8p
4b50VK30HGhapRKsIGs80Afp05kJhOz/fe1/QkcBpl74jhemr9IX/0P/VrbuCsnr
gU5dCm29v8sgO8XvLB45YMkhcavoupGCUTZAOooPjV5MGpbI/TNhZOLhF1+SjxxW
/m6ykXCJHQs5i2aMA4FrM6nq6ZHt90BS3bQEKM+ogDfOAnE9GUnZ0cgMS0dyNfXZ
+jqxgdp66cbjhJye5WL+Kgw0sg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:40 2026 by rpki-client