
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
File: rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft (raw, json)
Hash identifier: vQ7PmkkwBEDfYVQ0iiQplSkyyvXlIVpcYkS9FiK4gs4=
Subject key identifier: E7:6D:AA:BA:73:97:8D:86:D1:A2:34:3E:F7:12:57:80:A1:C8:09:26
Authority key identifier: AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D
Certificate issuer: /CN=A91ED65C/serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
Manifest number: 32
Signing time: Sat 13 Jun 2026 08:44:32 +0000
Manifest this update: Sat 13 Jun 2026 08:44:32 +0000
Manifest next update: Sat 20 Jun 2026 08:44:32 +0000
Files and hashes: 1: rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl (hash: TRPmRdv2iqXq1LjQzIrGsknzKZiSonuTVW4V1QCg0nA=)
2: 39CF61B81E3F11F196621670303D8C67.roa (hash: EYfYn+U3VhT59mtwpdO2I7nb2Hr1Kjf7NC15GXsbD8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl
rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED65C, serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
Validity
Not Before: Jun 13 08:44:32 2026 GMT
Not After : Jun 20 08:44:32 2026 GMT
Subject: CN=6a2d1870-aeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:95:9e:47:b1:a0:8e:a4:4f:b9:fc:01:44:
65:b1:70:1f:1d:74:10:d7:41:27:83:85:73:53:a6:
9e:b7:0e:e9:50:d9:09:e3:05:10:2b:46:92:1e:77:
61:12:56:af:b2:be:a1:9b:4b:06:c9:d2:98:3b:b1:
07:46:fa:4b:98:0b:00:d0:88:6c:f8:9c:da:42:37:
34:cc:69:23:13:6c:88:6a:c4:4d:10:5b:63:3f:f1:
3b:17:a0:8e:e0:ed:ea:70:27:f6:ab:53:59:de:a6:
a7:cc:02:02:74:66:2b:3a:e7:c9:4e:87:f7:9d:5f:
87:82:7d:92:1b:1b:30:26:38:f0:67:5b:79:60:4f:
c0:eb:0b:84:24:67:c5:dd:e4:14:b6:99:a2:e4:5a:
f3:e0:85:1b:f6:4f:b1:21:39:f0:4f:57:98:99:8e:
95:1d:73:e0:0f:cb:65:dd:77:34:a6:69:37:be:8c:
c7:32:22:c1:ff:8d:9c:73:df:47:34:94:0b:b1:d9:
1f:93:8f:26:99:15:ae:d5:fd:4c:0c:a0:16:9d:c3:
56:50:55:35:a6:d3:6f:27:f5:e9:95:73:ed:a7:a4:
ef:a9:1e:d3:44:69:72:ea:e7:51:db:03:32:3e:c7:
69:94:03:db:e3:49:4b:17:0e:74:5b:1c:15:fc:87:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6D:AA:BA:73:97:8D:86:D1:A2:34:3E:F7:12:57:80:A1:C8:09:26
X509v3 Authority Key Identifier:
keyid:AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:6c:60:55:4d:73:35:46:6e:4d:e2:81:0f:55:cf:8d:43:d6:
21:33:43:ee:8f:3c:09:2c:f4:83:80:70:e1:68:8d:a6:3e:06:
32:e8:c2:a0:25:68:72:a6:ac:e2:ce:1f:4d:23:93:d3:02:77:
1f:68:7d:42:79:8b:29:65:b1:11:1f:e8:c0:80:43:f1:67:97:
6b:ab:73:3c:7e:73:a8:e5:9f:ca:4a:73:50:83:b6:c1:dc:e6:
ea:50:18:70:57:f8:94:40:0b:a6:4e:ec:38:37:c0:47:80:92:
a2:29:fd:93:77:ad:ab:2d:02:46:33:b6:ce:32:7c:48:35:f1:
08:a1:45:90:53:f1:fa:6b:4b:0e:87:05:27:b9:e0:ea:f7:af:
d2:22:1c:0f:d0:7b:c8:2a:6c:31:93:76:6d:9b:1b:0d:c6:5f:
6a:8d:26:81:25:b6:b4:f6:aa:d9:37:b0:89:4e:4d:3d:a3:bc:
0b:6b:f9:03:eb:0f:f8:b4:ba:93:19:7e:2a:e7:57:cd:3c:d7:
6f:76:1f:20:07:4c:af:2a:1e:e0:cf:ac:77:c8:93:df:34:d0:
03:04:fa:7e:56:77:d2:bb:fd:b4:52:f8:d8:9e:93:36:ed:69:
85:e3:6a:9f:f1:c0:69:ec:4c:3c:84:75:f0:44:1c:ab:d6:fd:
96:a8:3c:5e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RDY1QzExMC8GA1UEBRMoQUVGRDUxNDY0QTc5NjU0MkQ1NjQyMTNBMkY2M0FENUY4
RkMzMDA2RDAeFw0yNjA2MTMwODQ0MzJaFw0yNjA2MjAwODQ0MzJaMBgxFjAUBgNV
BAMTDTZhMmQxODcwLWFlZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0r5WeR7GgjqRPufwBRGWxcB8ddBDXQSeDhXNTpp63DulQ2QnjBRArRpIed2ES
Vq+yvqGbSwbJ0pg7sQdG+kuYCwDQiGz4nNpCNzTMaSMTbIhqxE0QW2M/8TsXoI7g
7epwJ/arU1nepqfMAgJ0Zis658lOh/edX4eCfZIbGzAmOPBnW3lgT8DrC4QkZ8Xd
5BS2maLkWvPghRv2T7EhOfBPV5iZjpUdc+APy2XddzSmaTe+jMcyIsH/jZxz30c0
lAux2R+TjyaZFa7V/UwMoBadw1ZQVTWm028n9emVc+2npO+pHtNEaXLq51HbAzI+
x2mUA9vjSUsXDnRbHBX8h0H1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU522qunOX
jYbRojQ+9xJXgKHICSYwHwYDVR0jBBgwFoAUrv1RRkp5ZULVZCE6L2OtX4/DAG0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDL0Y2MTNFMTI2MUUz
QzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVMVlpDRTZMMk90WDRfREFH
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcnYxUlJrcDVaVUxWWkNFNkwyT3RYNF9EQUcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE
NjVDL0Y2MTNFMTI2MUUzQzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVM
VlpDRTZMMk90WDRfREFHMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQATbGBVTXM1Rm5N4oEPVc+NQ9YhM0PujzwJLPSDgHDhaI2mPgYy6MKgJWhypqzi
zh9NI5PTAncfaH1CeYspZbERH+jAgEPxZ5drq3M8fnOo5Z/KSnNQg7bB3ObqUBhw
V/iUQAumTuw4N8BHgJKiKf2Td62rLQJGM7bOMnxINfEIoUWQU/H6a0sOhwUnueDq
96/SIhwP0HvIKmwxk3ZtmxsNxl9qjSaBJba09qrZN7CJTk09o7wLa/kD6w/4tLqT
GX4q51fNPNdvdh8gB0yvKh7gz6x3yJPfNNADBPp+VnfSu/20UvjYnpM27WmF42qf
8cBp7Ew8hHXwRByr1v2WqDxe
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:34:26 2026 by rpki-client