
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json)
Hash identifier: xHSH/WK9Y702Mt3M7eq5BNgBaXxn/L9WYe9qm2XVEo4=
Subject key identifier: 9C:F2:DD:50:44:FC:64:9B:F3:8C:2E:DE:20:D0:A1:99:59:1E:B6:7F
Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Certificate serial: 227D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
Manifest number: 2259
Signing time: Sat 18 Apr 2026 15:48:35 +0000
Manifest this update: Sat 18 Apr 2026 15:48:34 +0000
Manifest next update: Sat 25 Apr 2026 15:48:34 +0000
Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: 6tkwG5n3kkPuAcxnga/as6EovlsRIA0T+VFioK4Pcs8=)
2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: JN5MdgQyOnCl7sTnuuhfSC+dcJigA58t5/ie8y0Mx7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 15:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8829 (0x227d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Validity
Not Before: Apr 18 15:48:34 2026 GMT
Not After : Apr 25 15:48:34 2026 GMT
Subject: CN=69e3a7d3-5c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:37:e5:c5:1e:e8:88:a5:f2:ae:bc:5b:d7:
c7:e0:60:ab:7b:e8:7e:a2:10:87:c3:28:bc:e9:76:
a4:cc:a3:66:14:05:e9:28:bc:36:60:6a:07:a3:72:
88:01:5e:35:90:48:7f:7d:73:95:b8:c2:dc:e3:19:
45:e6:d3:cc:29:dc:b3:65:06:06:db:c8:76:ae:b2:
a4:92:35:cf:c9:f2:54:4b:cc:42:56:c2:68:9a:7a:
80:e0:49:fa:00:49:b1:9d:2f:4d:8d:9a:e9:94:84:
67:61:ac:1b:66:38:ac:c6:c5:43:97:88:98:f5:ca:
fb:e3:31:a4:f7:d9:2a:ab:30:bf:c0:c7:51:41:fb:
d6:c7:81:c4:b2:24:72:fa:56:14:3c:0b:fe:4c:80:
92:cc:ab:09:4f:dc:4e:03:14:ba:06:30:de:1a:f8:
6c:56:a9:a2:b6:b9:14:30:a3:87:7d:b6:e7:b0:95:
8c:10:ef:61:ac:04:39:20:a3:3c:e1:3b:8e:63:0f:
b7:52:b2:61:0d:d9:07:10:0c:bc:25:55:8f:97:27:
73:c0:f8:31:12:c0:22:b6:69:ce:1d:42:ae:bc:a1:
fb:6d:0f:e6:12:18:ad:7d:2a:db:52:6d:dd:8c:b2:
b0:ec:04:72:96:0e:fc:4c:45:c3:7b:11:3d:0e:6d:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F2:DD:50:44:FC:64:9B:F3:8C:2E:DE:20:D0:A1:99:59:1E:B6:7F
X509v3 Authority Key Identifier:
keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:35:76:38:6a:bc:b6:05:7b:6b:bd:66:d2:23:fa:b5:dd:6f:
b9:ae:12:07:7e:7f:3d:9b:40:6e:06:be:9d:cd:bf:a6:9b:9d:
73:ab:12:4a:47:de:a5:89:67:fc:cb:72:bb:65:88:0d:96:85:
04:e2:45:bc:35:0a:5c:48:63:46:16:56:c3:cb:99:19:ad:d5:
0a:6a:63:d6:d1:af:5c:aa:34:d2:6a:b0:1f:f9:93:fe:df:84:
fb:e3:1e:e2:c6:76:b6:47:eb:10:fb:37:1a:82:ff:95:02:90:
3e:e7:e4:9e:97:91:5a:a2:fe:be:0b:14:3d:57:d5:e2:45:1a:
fd:a3:00:8c:75:b1:19:5c:25:fd:a9:23:b9:5b:1f:af:d2:ff:
e8:30:9d:63:f0:c6:70:a0:7c:a7:98:08:de:ae:1e:5e:06:a5:
25:88:4a:6a:fe:9a:02:33:87:52:be:33:d7:92:4e:10:19:df:
79:42:b5:81:50:ea:c0:d6:19:b8:55:26:9e:13:8f:b3:e2:75:
2e:0e:02:7c:a1:89:d0:e4:91:d7:71:17:42:10:79:53:6d:74:
db:3d:d9:4d:ba:fc:66:25:95:78:ca:d5:f3:8f:b8:77:59:35:
2c:9b:b4:b2:eb:ad:5b:a3:07:44:44:1c:0e:3c:b5:24:da:ab:
4e:e1:3a:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4
RENCNzBBMkEwHhcNMjYwNDE4MTU0ODM0WhcNMjYwNDI1MTU0ODM0WjAYMRYwFAYD
VQQDEw02OWUzYTdkMy01YzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2f435cUe6Iil8q68W9fH4GCre+h+ohCHwyi86XakzKNmFAXpKLw2YGoHo3KI
AV41kEh/fXOVuMLc4xlF5tPMKdyzZQYG28h2rrKkkjXPyfJUS8xCVsJomnqA4En6
AEmxnS9NjZrplIRnYawbZjisxsVDl4iY9cr74zGk99kqqzC/wMdRQfvWx4HEsiRy
+lYUPAv+TICSzKsJT9xOAxS6BjDeGvhsVqmitrkUMKOHfbbnsJWMEO9hrAQ5IKM8
4TuOYw+3UrJhDdkHEAy8JVWPlydzwPgxEsAitmnOHUKuvKH7bQ/mEhitfSrbUm3d
jLKw7ARylg78TEXDexE9Dm275wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzy3VBE
/GSb84wu3iDQoZlZHrZ/MB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5
RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW
ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAizV2OGq8tgV7a71m0iP6td1vua4SB35/PZtAbga+nc2/ppudc6sSSkfepYln
/Mtyu2WIDZaFBOJFvDUKXEhjRhZWw8uZGa3VCmpj1tGvXKo00mqwH/mT/t+E++Me
4sZ2tkfrEPs3GoL/lQKQPufknpeRWqL+vgsUPVfV4kUa/aMAjHWxGVwl/akjuVsf
r9L/6DCdY/DGcKB8p5gI3q4eXgalJYhKav6aAjOHUr4z15JOEBnfeUK1gVDqwNYZ
uFUmnhOPs+J1Lg4CfKGJ0OSR13EXQhB5U2102z3ZTbr8ZiWVeMrV84+4d1k1LJu0
suutW6MHREQcDjy1JNqrTuE6PQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:10 2026 by rpki-client