
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json)
Hash identifier: EZjpyfVjb4RrWu1jwWp3k960BQJ8Kf/5U5ql6QW9ypg=
Subject key identifier: 45:9C:9E:B3:92:D1:5A:27:DB:4F:BB:EA:2D:AB:AD:34:A2:6E:97:1B
Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Certificate serial: 12E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
Manifest number: 12B8
Signing time: Fri 12 Jun 2026 17:02:04 +0000
Manifest this update: Fri 12 Jun 2026 17:02:03 +0000
Manifest next update: Fri 19 Jun 2026 17:02:03 +0000
Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: TWM0FjS0iDDxTh9s0tfERJRAvj1SF89EKz9im4Ddm7E=)
2: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: QiP/Tw9hklight716IQFhsBaTNPHXt42nLTbqUKFQ1w=)
3: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=)
4: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4833 (0x12e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Validity
Not Before: Jun 12 17:02:03 2026 GMT
Not After : Jun 19 17:02:03 2026 GMT
Subject: CN=6a2c3b8c-4bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:18:66:e4:dc:8e:cf:19:db:c2:37:f3:13:
6d:00:92:e7:b0:ee:f1:02:a4:14:f0:2b:01:5e:bf:
8f:12:37:a1:2a:15:27:ca:d4:44:f3:fe:bb:e4:b7:
12:f1:a9:03:55:65:4a:db:2e:17:42:c0:2d:bf:84:
2f:eb:75:16:ea:31:16:fd:54:5f:6e:e0:67:be:9f:
84:73:78:9f:36:a5:94:a8:00:72:3e:62:d8:c9:7a:
f2:d8:47:40:49:0b:89:bf:2c:ae:75:32:c8:5f:44:
19:78:a0:72:ca:5d:ac:bf:55:2c:0b:62:d1:c8:94:
de:17:4c:32:39:3d:c2:63:86:b1:c9:0c:3d:38:af:
4c:68:78:dc:94:53:63:bd:42:4b:12:5c:90:b2:82:
02:1b:82:6f:42:1b:db:6c:86:51:b8:ec:5b:5d:be:
5d:cf:0e:cd:0a:89:75:94:92:88:aa:07:c3:6c:2d:
e9:e3:61:9d:56:7a:56:a4:b1:fd:5f:8c:c5:72:f7:
4d:77:e7:1a:f3:1d:9f:26:35:8d:6e:01:16:ad:12:
84:ff:a2:05:6e:ad:29:e1:ad:7f:92:43:bc:e8:22:
e0:62:8b:87:00:d8:ce:9a:1f:e3:ca:29:51:8d:1b:
fe:2d:9d:26:32:19:ab:d3:d7:16:4d:9e:d7:09:0b:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:9E:B3:92:D1:5A:27:DB:4F:BB:EA:2D:AB:AD:34:A2:6E:97:1B
X509v3 Authority Key Identifier:
keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:82:97:43:fb:e4:1a:50:d6:d9:a7:d6:79:b2:33:9c:3a:e1:
ad:e1:af:4f:78:1d:df:8a:57:7b:d0:f4:db:ea:aa:4d:cf:78:
51:b9:cc:c9:28:36:03:91:1d:a8:93:80:9d:ff:28:72:fa:0c:
c2:67:eb:dc:2f:7e:cb:8f:9a:f7:27:7c:6c:a6:8d:b9:fe:d6:
b0:bf:dd:df:0c:92:5f:40:9d:3f:0e:4d:b4:79:2e:ed:9f:58:
86:da:78:7e:32:ec:14:90:7f:0a:f8:2a:90:1b:6b:60:e6:a3:
a9:aa:cd:07:d6:f2:69:09:02:e5:4b:c1:4c:28:a2:f9:79:5a:
f1:26:b0:a6:bb:15:1c:ca:1a:6d:a8:0b:4a:2d:e3:db:1c:5f:
68:e6:50:fe:42:f7:5d:62:69:e9:14:f5:6c:f2:67:dc:f9:61:
ab:78:32:a2:66:fa:6b:69:67:c3:bd:b1:1b:fa:64:b8:e9:70:
eb:3e:b3:d2:cc:d7:5a:dd:2f:99:3c:8a:19:df:92:7b:6e:0d:
71:f9:8d:bf:42:ab:2a:46:df:c4:8b:45:03:2f:99:51:4f:cd:
2f:98:7b:00:44:29:18:10:d8:0c:00:93:4c:3e:0a:85:56:2c:
7d:17:72:be:73:0e:9f:22:c9:53:77:b7:8c:32:07:34:2a:ff:
c9:a6:38:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw
RTcwNjY3QUIwHhcNMjYwNjEyMTcwMjAzWhcNMjYwNjE5MTcwMjAzWjAYMRYwFAYD
VQQDEw02YTJjM2I4Yy00YmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl/IYZuTcjs8Z28I38xNtAJLnsO7xAqQU8CsBXr+PEjehKhUnytRE8/675LcS
8akDVWVK2y4XQsAtv4Qv63UW6jEW/VRfbuBnvp+Ec3ifNqWUqAByPmLYyXry2EdA
SQuJvyyudTLIX0QZeKByyl2sv1UsC2LRyJTeF0wyOT3CY4axyQw9OK9MaHjclFNj
vUJLElyQsoICG4JvQhvbbIZRuOxbXb5dzw7NCol1lJKIqgfDbC3p42GdVnpWpLH9
X4zFcvdNd+ca8x2fJjWNbgEWrRKE/6IFbq0p4a1/kkO86CLgYouHANjOmh/jyilR
jRv+LZ0mMhmr09cWTZ7XCQuzvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWcnrOS
0Von20+76i2rrTSibpcbMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5
RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp
TUtxWGk3R3FqSGtPY0daNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnYKXQ/vkGlDW2afWebIznDrhreGvT3gd34pXe9D02+qqTc94UbnMySg2A5Ed
qJOAnf8ocvoMwmfr3C9+y4+a9yd8bKaNuf7WsL/d3wySX0CdPw5NtHku7Z9Yhtp4
fjLsFJB/CvgqkBtrYOajqarNB9byaQkC5UvBTCii+Xla8SawprsVHMoabagLSi3j
2xxfaOZQ/kL3XWJp6RT1bPJn3Plhq3gyomb6a2lnw72xG/pkuOlw6z6z0szXWt0v
mTyKGd+Se24NcfmNv0KrKkbfxItFAy+ZUU/NL5h7AEQpGBDYDACTTD4KhVYsfRdy
vnMOnyLJU3e3jDIHNCr/yaY4aw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:25:43 2026 by rpki-client