
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
File: mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json)
Hash identifier: PHYrQ7pBZZTFNq0Ks3dqf8SRpa3yLlMok4et0Uw4hsI=
Subject key identifier: B7:46:A5:02:56:16:BF:81:D2:FA:D8:97:B1:AE:5B:2F:CD:95:C6:0A
Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
Certificate issuer: /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
Manifest number: 3A
Signing time: Fri 17 Apr 2026 08:16:18 +0000
Manifest this update: Fri 17 Apr 2026 08:16:17 +0000
Manifest next update: Fri 24 Apr 2026 08:16:17 +0000
Files and hashes: 1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: 2GqjPpokIG/xBUW5IIn0XliwItEdkvJTGSz+du0nISg=)
2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: 18c0IjqREvvCbFh1OonuDqpoKVFbN0WBr8JimtNfp4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Validity
Not Before: Apr 17 08:16:17 2026 GMT
Not After : Apr 24 08:16:17 2026 GMT
Subject: CN=69e1ec52-1b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:ef:b7:9d:cc:63:c0:f1:ce:54:71:05:13:
13:10:d6:eb:ab:b0:02:f4:c2:4b:e5:fb:13:18:6f:
59:51:c9:5b:f3:59:03:40:c4:9a:83:04:f6:2a:16:
e3:b2:ab:4d:32:07:15:2d:42:99:34:03:d1:99:32:
fd:24:c6:73:ba:4d:b8:07:ab:36:3d:31:00:28:93:
be:52:32:e3:db:5d:c2:f4:e6:c2:fa:dd:f2:dc:e6:
09:11:a7:49:20:e6:ef:3f:14:a0:c8:9a:0f:36:93:
75:1a:a3:08:73:08:b3:b5:14:3d:c2:22:2c:e4:82:
b2:24:5d:66:38:47:11:e5:0d:50:3f:bd:d7:14:0f:
73:00:dc:c7:78:61:31:3e:bf:f1:da:f6:41:cd:d3:
bb:45:47:37:d6:6e:e3:c1:c4:b4:07:9c:04:51:6d:
2f:fd:64:c1:c6:61:89:37:27:0d:e4:aa:12:47:86:
72:5f:3c:73:de:6f:a2:c2:82:16:ec:18:43:e2:3b:
a5:33:06:78:31:ef:bc:96:6a:46:bb:f0:93:c6:a1:
03:9c:c5:fa:ca:0c:63:63:1f:c4:82:aa:2a:16:84:
b2:18:51:59:95:09:1c:d9:83:05:2c:5e:41:a7:1d:
93:da:35:78:db:6a:74:b9:13:3b:bf:73:c2:27:e7:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:46:A5:02:56:16:BF:81:D2:FA:D8:97:B1:AE:5B:2F:CD:95:C6:0A
X509v3 Authority Key Identifier:
keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8c:55:1e:f2:1a:4d:95:ac:58:8d:c8:a6:87:cf:4d:18:81:
c7:e0:81:88:cf:27:c5:56:94:b3:2f:d1:2a:dd:01:32:33:7a:
ff:35:bd:9e:d5:ec:ea:1e:d2:f8:d6:da:12:81:61:6c:0c:9a:
2e:79:a9:52:92:63:3c:46:ae:bd:98:26:14:81:14:f6:3e:b9:
d8:ec:c7:9f:c8:84:b8:a2:61:55:ef:f5:43:d8:34:bf:aa:00:
28:ba:e4:fb:4e:22:31:20:6a:56:70:05:c0:c2:3c:35:cf:17:
fc:0d:af:a8:d9:4d:1c:14:20:fe:ef:ce:93:f8:9e:aa:d4:f5:
73:23:f7:c9:5f:1a:ef:6f:de:5c:61:02:b1:33:41:f5:68:93:
e8:94:98:b7:32:a5:2c:29:50:4c:0d:c9:b9:ec:c9:5d:72:86:
18:67:0f:9e:1f:6b:9b:9a:66:e0:eb:85:45:c4:f3:79:5e:de:
c2:13:a6:91:50:c1:c2:7e:54:3e:03:a0:0d:a5:63:e6:27:c7:
90:fc:80:8d:4c:8b:1b:54:9d:5f:cc:e6:d6:8e:4f:a0:af:18:
19:f1:06:bd:6a:1f:d7:4f:75:30:39:fa:16:f9:71:24:77:3a:
08:7f:79:55:34:2d:54:99:ff:b9:fa:3a:d3:09:5b:af:d1:c4:
78:86:87:be
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QTg1MDExMC8GA1UEBRMoOTk1RDcwQTk3RjU2QjJFMDAwQkFDQTZFQ0E0MzczRTYy
MDdCQjk4RDAeFw0yNjA0MTcwODE2MTdaFw0yNjA0MjQwODE2MTdaMBgxFjAUBgNV
BAMTDTY5ZTFlYzUyLTFiMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDhEu+3ncxjwPHOVHEFExMQ1uursAL0wkvl+xMYb1lRyVvzWQNAxJqDBPYqFuOy
q00yBxUtQpk0A9GZMv0kxnO6TbgHqzY9MQAok75SMuPbXcL05sL63fLc5gkRp0kg
5u8/FKDImg82k3UaowhzCLO1FD3CIizkgrIkXWY4RxHlDVA/vdcUD3MA3Md4YTE+
v/Ha9kHN07tFRzfWbuPBxLQHnARRbS/9ZMHGYYk3Jw3kqhJHhnJfPHPeb6LCghbs
GEPiO6UzBngx77yWaka78JPGoQOcxfrKDGNjH8SCqioWhLIYUVmVCRzZgwUsXkGn
HZPaNXjbanS5Ezu/c8In50+lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUt0alAlYW
v4HS+tiXsa5bL82VxgowHwYDVR0jBBgwFoAUmV1wqX9WsuAAuspuykNz5iB7uY0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODUwLzJEQkM0OTQ4RUQy
NzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlXc3VBQXVzcHV5a056NWlCN3VZ
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbVYxd3FYOVdzdUFBdXNwdXlrTno1aUI3dVkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB
ODUwLzJEQkM0OTQ4RUQyNzExRjBCMzk3RDM3OTQ0NkY1NkJDL21WMXdxWDlXc3VB
QXVzcHV5a056NWlCN3VZMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCkjFUe8hpNlaxYjcimh89NGIHH4IGIzyfFVpSzL9Eq3QEyM3r/Nb2e1ezqHtL4
1toSgWFsDJouealSkmM8Rq69mCYUgRT2PrnY7MefyIS4omFV7/VD2DS/qgAouuT7
TiIxIGpWcAXAwjw1zxf8Da+o2U0cFCD+786T+J6q1PVzI/fJXxrvb95cYQKxM0H1
aJPolJi3MqUsKVBMDcm57MldcoYYZw+eH2ubmmbg64VFxPN5Xt7CE6aRUMHCflQ+
A6ANpWPmJ8eQ/ICNTIsbVJ1fzObWjk+grxgZ8Qa9ah/XT3UwOfoW+XEkdzoIf3lV
NC1Umf+5+jrTCVuv0cR4hoe+
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:33:59 2026 by rpki-client