
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
File: V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json)
Hash identifier: ElmONDUUYcN23pYdOlrvbvmllSyE4T+6aOFb6bZhNAU=
Subject key identifier: 9F:16:0A:AE:8B:C3:99:AF:7E:81:0E:0F:BF:02:2A:17:99:4A:BA:D0
Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
Manifest number: 010D
Signing time: Fri 17 Apr 2026 05:44:50 +0000
Manifest this update: Fri 17 Apr 2026 05:44:49 +0000
Manifest next update: Fri 24 Apr 2026 05:44:49 +0000
Files and hashes: 1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: sVujQ+vCLyR5H73wM0OH6NPiij7HmfL4HfH4Qdq0FgE=)
2: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: bwcFEcR5ByOuMh5c9fYjzQ896YuFNkVRc9AQMLg87o4=)
3: 89FFAC1AF26B11F092350A59636F56BC.roa (hash: NFihz5oOFEQ/L/IatISrvLAQXRyCguKHk6tM5p6j0/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Validity
Not Before: Apr 17 05:44:49 2026 GMT
Not After : Apr 24 05:44:49 2026 GMT
Subject: CN=69e1c8d2-46a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:9c:dd:63:eb:a8:4c:64:5b:65:10:29:98:
7e:8f:8b:4c:fb:0c:b2:75:3d:ab:89:0d:a6:43:3a:
1b:e3:f6:6c:7f:ba:3d:f7:5f:8c:40:2e:46:83:39:
84:3d:45:e9:ab:98:b4:cf:3c:c4:d1:ad:26:6f:d3:
f0:39:69:4f:29:48:e4:df:9b:80:53:69:95:99:ad:
f7:e0:f0:df:12:b8:0b:ae:b2:db:d9:2e:9a:69:46:
56:5d:d7:11:ba:de:0f:03:67:76:2f:27:4d:9f:e7:
37:08:71:24:07:09:fe:a4:80:39:5f:d7:ee:52:6e:
c3:45:3a:72:fb:83:f8:ac:da:43:bf:5b:34:fe:f3:
e8:08:6c:ca:0e:a2:b8:34:0b:56:6e:b7:dd:02:29:
07:d0:9b:66:05:63:52:ac:45:5a:62:fa:a9:54:bf:
5c:64:bd:f4:b8:cd:c0:62:5f:cd:1f:08:db:82:3f:
98:44:54:a9:28:2c:36:c0:23:78:a3:f1:1c:6c:6e:
51:d3:bf:48:05:00:cf:b8:e0:74:46:db:82:23:90:
61:8c:2c:6f:7e:e7:5e:9e:d5:ce:85:d8:e4:46:4c:
59:07:74:f6:42:21:f2:4d:d2:52:0c:4d:40:af:95:
0a:27:76:d9:38:32:8b:cb:2e:4e:94:60:aa:d1:03:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:0A:AE:8B:C3:99:AF:7E:81:0E:0F:BF:02:2A:17:99:4A:BA:D0
X509v3 Authority Key Identifier:
keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e7:fe:77:78:e4:d0:ce:0b:07:fa:2a:b4:a2:99:38:db:38:
45:0c:e8:30:13:28:a2:f1:d6:0e:6b:04:b1:b1:75:9d:b5:1d:
66:89:a9:bc:30:53:99:80:ed:d2:5d:1a:e1:21:80:52:5e:85:
9d:b3:e5:e8:db:52:1a:9b:10:ca:37:1c:77:60:6c:cc:9b:ae:
88:bf:f4:c0:22:2f:a2:4f:2c:95:32:82:fe:78:a3:48:4a:8a:
51:45:d5:66:3a:4b:48:e3:2a:f1:dc:df:05:7c:b1:d4:70:70:
94:f0:fd:22:96:34:c0:ed:63:da:78:21:65:ac:26:3b:cc:55:
d3:53:80:df:e8:1f:c2:73:67:58:42:1f:27:1a:ce:a8:92:ee:
26:6c:e6:b2:f7:65:fe:35:01:aa:82:29:d8:71:3a:1f:aa:27:
94:20:d2:e7:ad:ff:6f:a5:fa:94:7c:4d:2f:c4:2a:c6:97:7a:
57:65:71:25:17:14:4e:46:cd:39:8b:93:17:49:ca:5e:b9:5c:
4f:87:90:cf:f1:4c:8b:41:6e:cd:9f:a1:11:d3:c8:ac:fc:ea:
91:fc:f0:04:69:8c:1d:b6:38:81:22:e1:93:8b:1c:30:e8:1e:
2a:eb:8a:00:9a:51:54:aa:5d:41:db:3f:38:74:1d:d8:ff:7c:
62:7c:47:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ3ODYxMTAvBgNVBAUTKDU3OEM4RDAyQUVGMEI0M0UyOUZFQ0VBMTg5NURDQzlE
MTA2NjM1MzUwHhcNMjYwNDE3MDU0NDQ5WhcNMjYwNDI0MDU0NDQ5WjAYMRYwFAYD
VQQDEw02OWUxYzhkMi00NmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6ec3WPrqExkW2UQKZh+j4tM+wyydT2riQ2mQzob4/Zsf7o991+MQC5GgzmE
PUXpq5i0zzzE0a0mb9PwOWlPKUjk35uAU2mVma334PDfErgLrrLb2S6aaUZWXdcR
ut4PA2d2LydNn+c3CHEkBwn+pIA5X9fuUm7DRTpy+4P4rNpDv1s0/vPoCGzKDqK4
NAtWbrfdAikH0JtmBWNSrEVaYvqpVL9cZL30uM3AYl/NHwjbgj+YRFSpKCw2wCN4
o/EcbG5R079IBQDPuOB0RtuCI5BhjCxvfudentXOhdjkRkxZB3T2QiHyTdJSDE1A
r5UKJ3bZODKLyy5OlGCq0QP0jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8WCq6L
w5mvfoEOD78CKheZSrrQMB8GA1UdIwQYMBaAFFeMjQKu8LQ+Kf7OoYldzJ0QZjU1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc4Ni8zNDU5OEM3MEE3
QzMxMUVGQjUxMUUwNTNDNEY5QUUwMi9WNHlOQXE3d3RENHBfczZoaVYzTW5SQm1O
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Y0eU5BcTd3dEQ0cF9zNmhpVjNNblJCbU5UVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDc4Ni8zNDU5OEM3MEE3QzMxMUVGQjUxMUUwNTNDNEY5QUUwMi9WNHlOQXE3d3RE
NHBfczZoaVYzTW5SQm1OVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf+f+d3jk0M4LB/oqtKKZONs4RQzoMBMoovHWDmsEsbF1nbUdZompvDBTmYDt
0l0a4SGAUl6FnbPl6NtSGpsQyjccd2BszJuuiL/0wCIvok8slTKC/nijSEqKUUXV
ZjpLSOMq8dzfBXyx1HBwlPD9IpY0wO1j2nghZawmO8xV01OA3+gfwnNnWEIfJxrO
qJLuJmzmsvdl/jUBqoIp2HE6H6onlCDS563/b6X6lHxNL8Qqxpd6V2VxJRcUTkbN
OYuTF0nKXrlcT4eQz/FMi0FuzZ+hEdPIrPzqkfzwBGmMHbY4gSLhk4scMOgeKuuK
AJpRVKpdQds/OHQd2P98YnxH7w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:27:29 2026 by rpki-client