
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json)
Hash identifier: DpXnjKWXxrUMnpxJWC5103un/NFtcN8S8CqvgbFkp98=
Subject key identifier: 66:4C:E6:E3:51:1A:F1:EB:B3:D0:7B:5F:1B:75:4B:50:1B:D9:69:2A
Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Certificate serial: 0629
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
Manifest number: 0624
Signing time: Thu 16 Apr 2026 22:43:00 +0000
Manifest this update: Thu 16 Apr 2026 22:42:59 +0000
Manifest next update: Thu 23 Apr 2026 22:42:59 +0000
Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: J4KTFbUqiRbZZlGrNgZGXLN80pSm8qNwVS+HGJiH+dE=)
2: 05A2A4008FE811EEACB1296AC4F9AE02.roa (hash: M5Aw+b/bHsIys2hkZbVggFi9gRiAWBXbAHIAYVqCW7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:42:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F
Validity
Not Before: Apr 16 22:42:59 2026 GMT
Not After : Apr 23 22:42:59 2026 GMT
Subject: CN=69e165f4-1a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:0b:7f:3b:1d:0a:2e:4b:8c:fe:a2:65:50:
09:bb:52:bf:f9:75:78:3b:74:f4:eb:04:c6:81:81:
8d:5f:d4:2e:ed:23:f7:35:ca:48:86:f4:87:57:98:
19:77:92:e8:4b:9b:51:a7:37:65:41:00:58:eb:49:
c5:8b:14:34:d1:4d:a1:5b:e7:7f:bc:5c:7f:5a:5c:
7f:31:e6:a5:8c:bb:2a:cd:9e:9f:7b:88:e0:6c:2d:
b6:e8:42:b7:15:e9:3b:0a:16:fa:92:70:8d:2d:a0:
a8:0e:d3:de:28:bb:b6:aa:bf:01:fc:e9:fe:cd:5e:
6a:7e:a7:7d:da:26:e4:bf:e8:26:70:73:c1:0f:85:
35:6d:db:05:e2:8f:41:e8:0b:d4:ec:c0:a5:f7:b0:
60:ba:2f:9f:cc:3c:30:90:f3:55:41:1a:36:ec:d8:
08:df:65:a8:f7:83:30:36:32:cc:95:dd:52:73:5e:
2a:20:62:70:04:a0:e9:90:88:cf:1c:08:a4:d7:44:
56:53:fd:4e:5a:75:54:c9:60:f4:11:84:06:2f:ae:
7b:9d:ba:c8:47:62:d3:c7:fd:c3:00:b9:ac:50:7c:
1e:4e:5f:c2:3c:60:65:69:72:12:f5:7c:0c:54:24:
7a:e2:2b:ff:ff:4d:a2:60:8f:53:14:1a:d2:03:a5:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4C:E6:E3:51:1A:F1:EB:B3:D0:7B:5F:1B:75:4B:50:1B:D9:69:2A
X509v3 Authority Key Identifier:
keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:47:a0:51:b1:81:69:a5:36:93:08:be:7d:cf:28:f4:c0:14:
63:7c:bf:21:39:a7:12:9c:a4:95:4f:8b:61:2e:1f:dd:d1:f6:
6a:eb:0a:ff:72:12:8d:22:7d:db:74:80:fe:89:f4:3c:fc:66:
51:aa:db:cc:eb:fe:b4:48:aa:b8:ac:4e:d8:bf:84:0d:c6:42:
e6:cf:c9:86:64:eb:57:ff:df:74:21:e8:57:12:a6:81:40:95:
93:38:7a:6a:27:c0:32:25:82:ee:48:0f:36:13:aa:64:fe:34:
22:8a:e5:cd:47:1e:60:05:6a:5b:f6:2b:ed:10:8a:1e:62:2c:
c0:9e:c7:ba:fc:8a:7b:6f:be:86:6c:e8:1a:ce:5d:46:b1:8b:
7c:c9:c4:69:95:02:c4:25:14:a8:f9:60:da:46:c7:78:81:02:
7b:50:c0:d1:54:d8:a2:f7:a4:00:91:60:ec:5f:fa:fe:d8:c3:
56:8c:77:59:74:07:cc:cf:e7:cb:4d:fa:2f:f4:95:a2:e4:2d:
a1:8e:9c:ab:48:7f:91:04:61:15:d2:cf:ed:77:fb:1c:0b:48:
3e:ae:5b:c2:a3:2a:d5:c2:b7:99:d6:40:15:e5:43:79:23:a5:
1a:ef:6d:f1:6a:48:be:60:76:22:a6:ce:6a:7a:b4:31:be:1d:
4c:a1:10:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGQkUxMTAvBgNVBAUTKEQ3MEU1OTRCODFBMTY1OEMyQURERjRBMzI2OEVGOUNG
MDhGOTY1MEYwHhcNMjYwNDE2MjI0MjU5WhcNMjYwNDIzMjI0MjU5WjAYMRYwFAYD
VQQDEw02OWUxNjVmNC0xYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtB8LfzsdCi5LjP6iZVAJu1K/+XV4O3T06wTGgYGNX9Qu7SP3NcpIhvSHV5gZ
d5LoS5tRpzdlQQBY60nFixQ00U2hW+d/vFx/Wlx/MealjLsqzZ6fe4jgbC226EK3
Fek7Chb6knCNLaCoDtPeKLu2qr8B/On+zV5qfqd92ibkv+gmcHPBD4U1bdsF4o9B
6AvU7MCl97Bgui+fzDwwkPNVQRo27NgI32Wo94MwNjLMld1Sc14qIGJwBKDpkIjP
HAik10RWU/1OWnVUyWD0EYQGL657nbrIR2LTx/3DALmsUHweTl/CPGBlaXIS9XwM
VCR64iv//02iYI9TFBrSA6V+OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGZM5uNR
GvHrs9B7Xxt1S1Ab2WkqMB8GA1UdIwQYMBaAFNcOWUuBoWWMKt30oyaO+c8I+WUP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZCRS83NDIyMzcwNkRB
RkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZd3EzZlNqSm83NXp3ajVa
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF3NVpTNEdoWll3cTNmU2pKbzc1endqNVpROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkZCRS83NDIyMzcwNkRBRkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZ
d3EzZlNqSm83NXp3ajVaUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAkegUbGBaaU2kwi+fc8o9MAUY3y/ITmnEpyklU+LYS4f3dH2ausK/3ISjSJ9
23SA/on0PPxmUarbzOv+tEiquKxO2L+EDcZC5s/JhmTrV//fdCHoVxKmgUCVkzh6
aifAMiWC7kgPNhOqZP40IorlzUceYAVqW/Yr7RCKHmIswJ7HuvyKe2++hmzoGs5d
RrGLfMnEaZUCxCUUqPlg2kbHeIECe1DA0VTYovekAJFg7F/6/tjDVox3WXQHzM/n
y036L/SVouQtoY6cq0h/kQRhFdLP7Xf7HAtIPq5bwqMq1cK3mdZAFeVDeSOlGu9t
8WpIvmB2IqbOanq0Mb4dTKEQfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:48:22 2026 by rpki-client