
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json)
Hash identifier: nSscNAW4rpSb/1v9Q2NliMNT4zOitzFbSsjRaKurPN8=
Subject key identifier: 8E:76:50:9D:E0:37:67:EE:66:E2:2F:59:C6:C9:29:1B:48:A6:51:60
Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
Manifest number: B2
Signing time: Sat 13 Jun 2026 07:11:10 +0000
Manifest this update: Sat 13 Jun 2026 07:11:09 +0000
Manifest next update: Sat 20 Jun 2026 07:11:09 +0000
Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: lkDb3bH50R0QGggahhfV45pSzomaKhVpm5QOKVsifrU=)
2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: sLjeaSGa4LRSlSB8sQPoF/VbSZaMLTrPtakBzYE292w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Validity
Not Before: Jun 13 07:11:09 2026 GMT
Not After : Jun 20 07:11:09 2026 GMT
Subject: CN=6a2d028d-9943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:73:8f:3a:7b:d3:13:18:e0:c6:f6:ec:81:
5e:24:1f:26:6b:92:73:82:a6:9a:72:8c:df:3e:0c:
4d:3e:50:09:7f:17:e1:75:97:53:bc:70:1e:7d:95:
d4:f3:db:78:b2:a5:8a:ba:fc:72:01:94:e1:fd:18:
72:20:b7:69:e2:72:73:ac:a7:76:db:b7:a3:f1:c9:
f0:31:93:d5:bc:8d:79:f9:21:10:16:ce:b0:9b:2e:
d5:86:ec:dc:3d:d5:dc:de:30:a6:d4:18:43:76:ba:
19:3b:97:61:58:f0:5a:3e:3b:b8:26:6c:cd:db:14:
77:6f:a8:b0:6d:cd:d2:3c:53:f3:1b:4d:f2:5c:8e:
cb:ef:80:92:07:6e:31:a0:57:3b:90:9c:3b:6a:10:
23:b5:1e:2c:88:4a:02:ae:60:cb:57:a5:e8:01:f7:
8e:d4:80:1d:5f:cc:66:e4:4c:b2:f4:a5:e5:56:6c:
0a:47:ab:4f:96:c3:b0:10:9c:61:44:e0:36:1b:a1:
08:65:52:4e:5f:16:1a:97:49:e2:5a:a0:b9:62:a3:
b5:5d:e2:d1:90:33:81:bc:17:c1:50:ab:7c:2d:ad:
59:1d:b4:88:81:67:e6:59:d1:f1:18:42:96:52:87:
00:9e:1e:06:10:df:30:d0:04:03:20:39:6b:40:de:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:50:9D:E0:37:67:EE:66:E2:2F:59:C6:C9:29:1B:48:A6:51:60
X509v3 Authority Key Identifier:
keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c2:c3:29:44:39:63:be:05:ec:83:7f:eb:e4:63:19:d2:43:
30:9b:26:bb:a4:dc:68:b3:e4:e6:52:31:90:91:71:72:67:c2:
29:e2:56:c0:e0:a6:73:9a:82:f1:42:be:64:2e:45:a4:1e:d5:
3e:a5:da:e1:7c:c6:84:d1:57:b5:22:13:ca:54:97:6f:c0:1b:
eb:17:86:c6:b5:d7:ce:82:98:10:5e:06:4f:fb:63:7f:8f:6d:
60:bd:e6:bd:8e:83:54:04:45:ac:7c:30:3f:00:31:9d:dc:85:
80:b7:28:81:16:0d:7f:49:de:5c:a5:ff:08:67:b8:d8:e3:cb:
d5:5f:5d:3a:cc:c2:5d:51:28:43:8c:66:5c:b8:3b:66:f4:b1:
92:c6:5d:a4:89:41:25:c4:98:e7:2d:bb:31:c7:a5:7d:0f:1f:
53:aa:5e:30:65:db:9b:7b:24:f9:46:79:5a:7c:e5:5c:c2:81:
56:ff:d4:56:e7:3a:2b:0e:26:3c:b5:06:53:7f:33:46:b8:ee:
d9:72:47:15:dd:b1:d0:5f:b5:38:93:86:62:5a:cd:7f:3b:95:
35:c6:65:d9:3f:6d:64:d2:0b:32:31:93:54:c0:13:2b:de:d0:
5d:77:e0:c2:2b:87:aa:84:3c:60:b2:8a:aa:9b:70:16:f2:41:
75:05:22:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMzQUExMTAvBgNVBAUTKEY3RDZERTZFN0IyQUM3QkQ0NTBDNzcxNTg2M0U5Nzk5
NTUzODNFNEUwHhcNMjYwNjEzMDcxMTA5WhcNMjYwNjIwMDcxMTA5WjAYMRYwFAYD
VQQDEw02YTJkMDI4ZC05OTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0dJzjzp70xMY4Mb27IFeJB8ma5JzgqaacozfPgxNPlAJfxfhdZdTvHAefZXU
89t4sqWKuvxyAZTh/RhyILdp4nJzrKd227ej8cnwMZPVvI15+SEQFs6wmy7Vhuzc
PdXc3jCm1BhDdroZO5dhWPBaPju4JmzN2xR3b6iwbc3SPFPzG03yXI7L74CSB24x
oFc7kJw7ahAjtR4siEoCrmDLV6XoAfeO1IAdX8xm5Eyy9KXlVmwKR6tPlsOwEJxh
ROA2G6EIZVJOXxYal0niWqC5YqO1XeLRkDOBvBfBUKt8La1ZHbSIgWfmWdHxGEKW
UocAnh4GEN8w0AQDIDlrQN6lxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI52UJ3g
N2fuZuIvWcbJKRtIplFgMB8GA1UdIwQYMBaAFPfW3m57Kse9RQx3FYY+l5lVOD5O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNBQS81MkQ5QUQ0NjU5
NjcxMUYwOEM0MDc5MkNDNEY5QUUwMi85OWJlYm5zcXg3MUZESGNWaGo2WG1WVTRQ
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzNBQS81MkQ5QUQ0NjU5NjcxMUYwOEM0MDc5MkNDNEY5QUUwMi85OWJlYm5zcXg3
MUZESGNWaGo2WG1WVTRQazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT8LDKUQ5Y74F7IN/6+RjGdJDMJsmu6TcaLPk5lIxkJFxcmfCKeJWwOCmc5qC
8UK+ZC5FpB7VPqXa4XzGhNFXtSITylSXb8Ab6xeGxrXXzoKYEF4GT/tjf49tYL3m
vY6DVARFrHwwPwAxndyFgLcogRYNf0neXKX/CGe42OPL1V9dOszCXVEoQ4xmXLg7
ZvSxksZdpIlBJcSY5y27McelfQ8fU6peMGXbm3sk+UZ5WnzlXMKBVv/UVuc6Kw4m
PLUGU38zRrju2XJHFd2x0F+1OJOGYlrNfzuVNcZl2T9tZNILMjGTVMATK97QXXfg
wiuHqoQ8YLKKqptwFvJBdQUiKw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:22 2026 by rpki-client