
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json)
Hash identifier: MFEL04wNpHj5vfScg4ygDaEHXFL94nbhWH1YFwi55SU=
Subject key identifier: B5:A8:89:A2:EB:1F:D2:CE:35:C1:AD:B9:16:8C:D6:CF:F2:62:7F:EE
Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
Manifest number: 0188
Signing time: Sun 19 Apr 2026 04:09:09 +0000
Manifest this update: Sun 19 Apr 2026 04:09:08 +0000
Manifest next update: Sun 26 Apr 2026 04:09:08 +0000
Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: pbyGU8ANpJ5zojBoUzBsb31CgshtiEmoCmQgB6VQfr8=)
2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: lJm555h+eg8dO0CHQ2nNo/R5NutYBuna/K3mXRlVmtQ=)
3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: nKFo2j+4zMG+utkqyTT7eCmh94qQNizYNCAl8D99c1U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl
rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E
Validity
Not Before: Apr 19 04:09:08 2026 GMT
Not After : Apr 26 04:09:08 2026 GMT
Subject: CN=69e45565-239e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:3b:c3:5c:d1:49:a7:70:28:4a:d2:45:cd:
22:df:e2:2f:c8:80:97:d6:aa:16:cb:02:ae:14:e8:
9d:5d:38:5b:70:e7:9d:e3:2f:0d:90:09:4a:43:a9:
45:19:21:a8:79:ce:33:1e:3f:4a:c0:03:a0:6d:9e:
22:f4:36:56:7c:48:88:51:27:40:28:17:2a:d8:2a:
8f:f0:69:5d:13:59:da:02:ef:be:5d:ed:ce:cd:f9:
e8:c1:f7:6e:2f:46:98:f4:ae:52:cf:22:8b:92:b5:
4f:bc:c6:09:15:94:9c:e5:1e:60:62:b8:28:bd:01:
d1:9c:47:c2:c8:1c:7f:b7:1f:7a:f6:07:0e:86:0b:
51:07:8a:11:0a:32:d3:ec:ba:91:4b:e6:e0:4f:40:
60:70:6b:bf:07:29:ab:80:b5:7a:f8:c9:12:90:52:
47:97:b2:13:68:2f:d3:44:a4:fe:b9:84:42:72:e8:
f1:e0:fa:e9:7a:e9:b5:5f:e0:f6:76:4f:ac:7c:ca:
e5:c8:7f:1b:3d:79:0d:08:6b:50:6c:17:4f:52:82:
82:7e:e2:6d:da:54:43:f8:fa:57:08:58:64:f8:fc:
7d:9a:c4:6f:6a:25:33:3e:b7:ac:8d:93:bb:45:00:
18:c5:18:16:1c:ab:3d:93:72:ff:ae:06:0f:e6:b9:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:89:A2:EB:1F:D2:CE:35:C1:AD:B9:16:8C:D6:CF:F2:62:7F:EE
X509v3 Authority Key Identifier:
keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:46:e0:03:2f:34:76:10:d2:2e:e9:e8:cf:26:65:3c:30:6e:
40:4d:88:ee:90:4f:d3:47:8c:3d:3d:5c:ca:79:c1:e1:65:82:
eb:ff:65:04:88:9d:92:28:75:b9:a8:53:55:5e:e7:63:10:8c:
d0:99:86:18:2b:27:e6:f3:ef:51:90:39:da:56:62:2e:4b:79:
a2:b4:d3:c6:96:7f:a9:07:7c:95:39:6e:be:34:b2:5b:a7:b4:
35:a2:65:8a:f9:c0:98:7f:e7:dd:a7:d5:34:9f:80:0c:c9:0e:
d0:14:ca:eb:3f:47:e0:36:52:e1:ae:17:0f:3a:4b:b2:0a:8f:
da:e7:a8:55:3c:20:84:e8:81:ab:0a:36:09:1e:65:4a:9d:5a:
99:f1:ac:ea:b7:07:32:59:11:65:de:e9:99:7e:ac:b4:e1:e5:
73:ff:d2:14:48:63:46:e3:ac:27:c0:54:da:55:1d:c2:4b:29:
84:bc:e4:b6:f8:0c:1c:70:a1:43:80:44:9e:a7:88:e5:aa:e7:
b6:66:d4:4f:c3:c6:76:06:04:f1:95:ca:7a:aa:6c:76:da:e7:
c7:83:8d:12:97:a0:ee:47:20:20:90:c2:a5:9e:d4:c4:25:ce:
f3:33:ed:4c:d3:e5:23:fe:5b:29:a8:f1:41:12:0e:27:0e:ad:
14:78:0d:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD
RDc5MzQ1NUUwHhcNMjYwNDE5MDQwOTA4WhcNMjYwNDI2MDQwOTA4WjAYMRYwFAYD
VQQDEw02OWU0NTU2NS0yMzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAseA7w1zRSadwKErSRc0i3+IvyICX1qoWywKuFOidXThbcOed4y8NkAlKQ6lF
GSGoec4zHj9KwAOgbZ4i9DZWfEiIUSdAKBcq2CqP8GldE1naAu++Xe3Ozfnowfdu
L0aY9K5SzyKLkrVPvMYJFZSc5R5gYrgovQHRnEfCyBx/tx969gcOhgtRB4oRCjLT
7LqRS+bgT0BgcGu/BymrgLV6+MkSkFJHl7ITaC/TRKT+uYRCcujx4Prpeum1X+D2
dk+sfMrlyH8bPXkNCGtQbBdPUoKCfuJt2lRD+PpXCFhk+Px9msRvaiUzPresjZO7
RQAYxRgWHKs9k3L/rgYP5rmHIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWoiaLr
H9LONcGtuRaM1s/yYn/uMB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2
NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ
NkxVeHRaelVla0hOZVRSVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeUbgAy80dhDSLunozyZlPDBuQE2I7pBP00eMPT1cynnB4WWC6/9lBIidkih1
uahTVV7nYxCM0JmGGCsn5vPvUZA52lZiLkt5orTTxpZ/qQd8lTluvjSyW6e0NaJl
ivnAmH/n3afVNJ+ADMkO0BTK6z9H4DZS4a4XDzpLsgqP2ueoVTwghOiBqwo2CR5l
Sp1amfGs6rcHMlkRZd7pmX6stOHlc//SFEhjRuOsJ8BU2lUdwksphLzktvgMHHCh
Q4BEnqeI5arntmbUT8PGdgYE8ZXKeqpsdtrnx4ONEpeg7kcgIJDCpZ7UxCXO8zPt
TNPlI/5bKajxQRIOJw6tFHgNFg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:11 2026 by rpki-client