
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
File: -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json)
Hash identifier: qn9ET0/lPP7qze4Q/1irRRtwg8VK3/GBPlKhpcmOSTo=
Subject key identifier: 98:0E:8F:C8:BD:A3:B9:EF:62:A4:4F:4D:D2:AF:CA:6E:16:DE:91:55
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
Manifest number: 020B
Signing time: Sun 19 Apr 2026 02:50:13 +0000
Manifest this update: Sun 19 Apr 2026 02:50:12 +0000
Manifest next update: Sun 26 Apr 2026 02:50:12 +0000
Files and hashes: 1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: 9weBMO3sn/FoOLOk2RLqD1tMa7TQi1LE704pUlAHonY=)
2: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: JS/I83lnkJ+yXv//aUKTuv7mn22oJXxijweaV/2/Tbw=)
3: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: jsG4A9B1X5RWld/1WjKWMW5kvn6PEfUEqCveLWYyYLU=)
4: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: eyr8NymwonEMsBAoYqcO5uIS3VzQALB/L7GTWt3kg9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Validity
Not Before: Apr 19 02:50:12 2026 GMT
Not After : Apr 26 02:50:12 2026 GMT
Subject: CN=69e442e5-cc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:39:89:bd:78:72:f2:98:e9:82:bc:ab:9d:
87:2e:a9:c1:96:08:bf:af:2b:d7:fb:02:96:8e:a9:
8c:9e:a0:2c:73:7a:6f:85:2e:d7:12:b0:2b:32:18:
aa:ab:25:c3:4c:e3:1f:bb:1a:6c:c4:b2:47:0f:5f:
c3:12:1f:8e:9a:26:d1:d7:93:0b:0c:8a:15:c4:5a:
22:57:9d:5e:91:da:c5:66:71:e7:94:39:ed:0c:5c:
b5:06:8d:e2:09:4a:fe:91:97:92:e4:78:44:3c:24:
06:21:38:3e:38:a0:0c:62:82:60:87:2a:13:12:e5:
23:87:c3:e5:3e:85:a4:a0:74:3b:5b:02:db:03:d9:
ed:0b:7f:f3:9a:a3:52:ed:c7:c1:2d:56:e0:a7:72:
0f:1c:00:e3:dd:3d:4a:0e:79:17:62:fe:24:0a:f8:
8f:b4:3c:bb:79:b8:e5:8d:ce:e1:38:48:ca:a6:ee:
d4:6f:8f:d6:12:52:a1:ed:14:9e:42:b8:fa:41:44:
07:00:16:4c:2c:46:ce:79:db:96:0d:1a:3f:29:bc:
25:7c:d9:eb:d4:c4:52:55:d9:7e:04:57:9c:de:fa:
4c:0e:57:3e:d8:d2:c5:85:aa:94:5a:66:da:e5:d8:
6e:5e:2c:04:f6:58:ac:01:75:9f:95:33:b3:82:26:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:8F:C8:BD:A3:B9:EF:62:A4:4F:4D:D2:AF:CA:6E:16:DE:91:55
X509v3 Authority Key Identifier:
keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:c0:d0:8e:15:73:46:d9:a6:41:8e:20:0c:61:dd:83:81:b9:
85:34:9f:25:93:ab:d1:3f:9a:79:f3:2c:20:04:db:05:da:eb:
8f:08:a6:27:04:3e:98:55:f6:ef:6c:cb:bd:f5:e6:9b:c5:ad:
93:9c:d5:be:26:cc:f2:8d:f2:85:65:2b:14:8e:1c:96:ea:cf:
4b:84:c2:5e:fd:c8:e9:18:17:80:af:55:6f:72:c5:5a:27:b5:
51:b4:c0:c3:c1:c4:d2:dc:55:a1:0e:e6:d1:04:4d:1f:ae:20:
bc:bc:b9:2b:d8:94:7a:87:7f:d5:38:ea:40:d7:78:3a:70:06:
07:9f:6a:48:b8:0d:d8:1b:5a:cf:4c:1e:16:ab:2d:20:a8:bb:
81:25:e9:85:e3:4c:2d:fd:7f:94:66:52:b5:cb:79:17:4a:80:
cb:4a:72:23:00:d9:1a:f2:b1:87:26:21:cf:be:de:02:aa:0f:
b0:87:13:0f:c4:81:78:55:ef:5b:b9:0b:8c:6c:2a:5a:80:17:
e5:09:11:01:16:7c:d3:66:69:7b:55:ed:72:6e:5c:03:a2:34:
b7:87:51:d9:13:41:85:fc:2c:d9:38:64:d5:76:c6:df:6f:48:
89:55:da:6d:14:3d:40:b1:0e:3d:b3:1e:61:f9:02:c4:e7:4a:
58:5e:a6:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy
MTA0Q0I3QTgwHhcNMjYwNDE5MDI1MDEyWhcNMjYwNDI2MDI1MDEyWjAYMRYwFAYD
VQQDEw02OWU0NDJlNS1jYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGU5ib14cvKY6YK8q52HLqnBlgi/ryvX+wKWjqmMnqAsc3pvhS7XErArMhiq
qyXDTOMfuxpsxLJHD1/DEh+OmibR15MLDIoVxFoiV51ekdrFZnHnlDntDFy1Bo3i
CUr+kZeS5HhEPCQGITg+OKAMYoJghyoTEuUjh8PlPoWkoHQ7WwLbA9ntC3/zmqNS
7cfBLVbgp3IPHADj3T1KDnkXYv4kCviPtDy7ebjljc7hOEjKpu7Ub4/WElKh7RSe
Qrj6QUQHABZMLEbOeduWDRo/KbwlfNnr1MRSVdl+BFec3vpMDlc+2NLFhaqUWmba
5dhuXiwE9lisAXWflTOzgiZSTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJgOj8i9
o7nvYqRPTdKvym4W3pFVMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG
NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTA5OS8wMjIxRDdDRTJGNjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1N
ZWd1cGREQVZ0YkVoQk10NmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWcDQjhVzRtmmQY4gDGHdg4G5hTSfJZOr0T+aefMsIATbBdrrjwimJwQ+mFX2
72zLvfXmm8Wtk5zVvibM8o3yhWUrFI4clurPS4TCXv3I6RgXgK9Vb3LFWie1UbTA
w8HE0txVoQ7m0QRNH64gvLy5K9iUeod/1TjqQNd4OnAGB59qSLgN2Btaz0weFqst
IKi7gSXpheNMLf1/lGZStct5F0qAy0pyIwDZGvKxhyYhz77eAqoPsIcTD8SBeFXv
W7kLjGwqWoAX5QkRARZ802Zpe1Xtcm5cA6I0t4dR2RNBhfws2Thk1XbG329IiVXa
bRQ9QLEOPbMeYfkCxOdKWF6mqw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:34 2026 by rpki-client