
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json)
Hash identifier: fduwoR6lpWp4swkLvGokR9ZiGVmXnOmKvFTPZ6I9kak=
Subject key identifier: D0:DC:83:D7:C6:AA:10:FF:B1:F0:EE:8B:18:62:58:16:F9:DD:DA:62
Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
Manifest number: 0151
Signing time: Fri 17 Apr 2026 04:49:48 +0000
Manifest this update: Fri 17 Apr 2026 04:49:47 +0000
Manifest next update: Fri 24 Apr 2026 04:49:47 +0000
Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: swBgNkxM5JJl7a9qmB5ydL1Zl+fu3owD9MrUNNs157U=)
2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: sx9r0ziKeVv3PgPFT0H8V5/JZLvSBe+KHoBiEIdn+3Q=)
3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: 8qsCKXW1PnkeYNlCGo4/GnAMha9Fa7HghDmajg38QjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Validity
Not Before: Apr 17 04:49:47 2026 GMT
Not After : Apr 24 04:49:47 2026 GMT
Subject: CN=69e1bbec-1477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:3d:0f:0a:d8:84:96:b1:9a:1d:b2:77:02:
d6:0b:63:46:4e:3c:c6:82:39:ee:d0:14:3c:c5:27:
fa:7b:ec:85:9c:31:96:0b:ed:08:60:2f:bf:4c:ef:
75:59:2f:11:2f:f8:a2:a1:82:82:ab:73:3b:8a:f4:
33:c0:6a:b6:48:bc:64:e3:ed:23:a1:63:d8:86:3b:
aa:39:7b:7b:d3:74:42:2d:08:3d:27:69:c3:77:8a:
75:af:17:3c:74:d0:ab:ba:a5:2c:46:f8:38:0a:e7:
17:93:6f:13:e5:9b:7c:49:be:e1:9a:cb:37:7c:99:
0c:8f:61:e5:94:42:38:de:04:6a:73:eb:27:b8:1d:
94:fd:36:ef:c1:f0:9c:34:01:5a:bb:a6:2c:ee:33:
70:8c:89:fc:d8:8e:6f:02:27:5a:1d:eb:d9:10:6a:
18:6f:e8:be:5d:98:a7:1c:c8:71:e4:14:6b:d8:78:
7c:64:ab:5d:3e:ed:05:8d:ed:59:db:c7:04:a0:da:
4c:0f:ba:81:14:25:c4:41:b7:44:7f:6f:d6:b5:bf:
ab:0a:1f:8d:e5:d8:a3:0a:04:df:04:ff:1d:75:e9:
a6:38:62:3e:3e:ea:5e:6a:e0:b9:cc:ca:f6:74:06:
38:f0:11:2c:39:3d:b9:b1:8c:24:15:11:2f:17:8a:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:83:D7:C6:AA:10:FF:B1:F0:EE:8B:18:62:58:16:F9:DD:DA:62
X509v3 Authority Key Identifier:
keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:cc:79:6e:f7:54:5a:8f:8b:36:df:a4:49:47:26:66:7e:ab:
d0:5a:cf:51:4f:95:6c:06:ad:2a:a6:c8:8c:17:b1:2a:25:58:
70:ea:28:7b:85:e2:35:3c:0a:2d:77:13:c8:88:2a:88:37:83:
96:23:e4:87:59:ca:2b:3d:cf:98:57:d0:91:95:c9:66:58:42:
41:89:d9:cb:f1:e9:17:82:e9:0b:9e:e7:06:4e:95:7f:4f:ef:
8d:22:f4:05:5d:5f:6c:60:44:9b:08:5f:58:67:89:e7:21:4b:
2b:2d:52:08:4a:d4:c9:d9:f9:f6:90:eb:43:56:e3:1a:6c:4e:
db:ba:a4:42:f2:44:9a:27:05:47:22:29:8c:ba:3c:e9:39:ad:
31:c5:4d:67:df:9d:cc:5c:04:f5:33:19:e7:5e:f6:bc:51:fa:
76:ea:1a:cb:0b:11:44:f2:fa:6c:89:67:9f:83:05:bc:2b:7e:
d5:0c:61:f8:39:26:8d:18:ba:a8:42:19:cd:ad:3b:3f:be:ae:
07:67:a9:23:01:a7:55:90:ce:ce:45:63:a0:46:38:b6:29:03:
95:8c:56:6f:54:4c:de:f9:2f:3b:78:7b:38:fb:d6:0b:09:e8:
8b:fa:b5:c4:e4:7d:1e:1b:ca:fb:9f:cb:0c:14:b5:16:a9:c7:
44:79:3d:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5
MENCOEQ0NzIwHhcNMjYwNDE3MDQ0OTQ3WhcNMjYwNDI0MDQ0OTQ3WjAYMRYwFAYD
VQQDEw02OWUxYmJlYy0xNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvG89DwrYhJaxmh2ydwLWC2NGTjzGgjnu0BQ8xSf6e+yFnDGWC+0IYC+/TO91
WS8RL/iioYKCq3M7ivQzwGq2SLxk4+0joWPYhjuqOXt703RCLQg9J2nDd4p1rxc8
dNCruqUsRvg4CucXk28T5Zt8Sb7hmss3fJkMj2HllEI43gRqc+snuB2U/TbvwfCc
NAFau6Ys7jNwjIn82I5vAidaHevZEGoYb+i+XZinHMhx5BRr2Hh8ZKtdPu0Fje1Z
28cEoNpMD7qBFCXEQbdEf2/Wtb+rCh+N5dijCgTfBP8ddemmOGI+PupeauC5zMr2
dAY48BEsOT25sYwkFREvF4ot4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDcg9fG
qhD/sfDuixhiWBb53dpiMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND
RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4
U0Q4NjFxUU1DQTZReTQxSEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA8x5bvdUWo+LNt+kSUcmZn6r0FrPUU+VbAatKqbIjBexKiVYcOooe4XiNTwK
LXcTyIgqiDeDliPkh1nKKz3PmFfQkZXJZlhCQYnZy/HpF4LpC57nBk6Vf0/vjSL0
BV1fbGBEmwhfWGeJ5yFLKy1SCErUydn59pDrQ1bjGmxO27qkQvJEmicFRyIpjLo8
6TmtMcVNZ9+dzFwE9TMZ5172vFH6duoaywsRRPL6bIlnn4MFvCt+1Qxh+DkmjRi6
qEIZza07P76uB2epIwGnVZDOzkVjoEY4tikDlYxWb1RM3vkvO3h7OPvWCwnoi/q1
xOR9HhvK+5/LDBS1FqnHRHk9XQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:33 2026 by rpki-client