
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier: EylodKDAQDlZJnk+nbUsY3EwwgFzdKu2CbIzwi0JVQo=
Subject key identifier: 6A:A4:75:9A:C2:CF:11:B3:51:DF:99:AF:99:1F:C6:A2:F2:85:D1:1C
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial: 0814
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number: 07FC
Signing time: Fri 12 Jun 2026 21:17:30 +0000
Manifest this update: Fri 12 Jun 2026 21:17:29 +0000
Manifest next update: Fri 19 Jun 2026 21:17:29 +0000
Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: 6POG0XuXkdG0eeiFJEoJJlbn2dRD1fBPqSGH0HB/qSM=)
2: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: Rlc9tIFJ76w9w+Q182kiW0dYBgbYcuIIgNLuRF6VH4A=)
3: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: tT41B0xJ+RDXXvQx3CB/Ui5y+1aA7lb07rB6KtZUBJc=)
4: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: 9LuZa38M86RpuIBtOyu8RxTzdNFpAwgeI57izlLPJgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Validity
Not Before: Jun 12 21:17:29 2026 GMT
Not After : Jun 19 21:17:29 2026 GMT
Subject: CN=6a2c776a-afce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:47:d1:9e:32:9d:62:54:93:6e:54:f7:59:
56:7f:5c:0f:07:48:5a:a5:2f:0e:46:12:33:8b:84:
2e:4b:8c:07:39:71:4f:bf:5d:a7:f9:d3:2f:53:5e:
de:86:8e:c8:27:91:31:a9:1e:0e:2c:9b:7e:82:5b:
6f:df:14:05:d2:76:62:8b:ff:d5:59:f4:68:ac:a1:
90:ab:a2:64:de:88:03:b4:fa:c3:8f:33:10:c6:33:
cb:dd:ef:18:dd:c7:13:61:1e:2d:f8:fa:3c:61:71:
75:56:de:87:ae:ef:53:17:b3:b5:50:7e:62:57:ad:
5c:1f:04:f3:30:d6:82:c7:f5:9b:b4:ab:83:56:10:
5b:2f:c8:e4:b2:8f:aa:ef:7b:e3:f6:4f:e0:96:35:
b9:00:c3:f0:da:63:6e:8d:43:d2:53:a5:30:64:a2:
c4:44:69:60:86:0f:0b:79:79:06:1c:9a:cc:ea:56:
ca:69:7d:72:78:8b:a2:14:1c:8d:d2:69:46:cf:9d:
8c:d1:e1:f5:4c:bb:da:69:83:5c:26:db:2b:c8:3f:
c0:02:c5:2c:e1:33:3b:a5:b1:17:b3:4c:d0:77:56:
ed:25:37:02:2e:ab:b8:90:4c:57:d3:c0:28:1c:2e:
24:20:7c:c4:39:c6:d0:88:23:c1:a7:12:00:74:1f:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A4:75:9A:C2:CF:11:B3:51:DF:99:AF:99:1F:C6:A2:F2:85:D1:1C
X509v3 Authority Key Identifier:
keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:1e:9f:12:34:33:b2:1d:00:4c:e0:9e:c3:36:a4:5a:c1:73:
92:65:f6:7d:0b:cc:b8:55:9e:8e:52:0b:f0:f7:8f:54:9a:72:
0a:d6:28:fb:73:06:0d:0c:6f:bf:a7:80:91:ed:4a:12:c8:c2:
6f:13:12:70:73:33:eb:6a:2f:00:66:02:de:8b:ad:24:78:01:
1e:0f:23:11:0f:ec:c5:6d:0b:3b:7a:34:cd:d7:ca:0a:db:8e:
69:22:00:9a:ae:f3:6a:e0:1c:9a:87:53:11:5b:8b:d6:8a:d8:
2c:ab:59:dc:f9:a8:c0:bd:a1:3a:31:5a:d0:b1:8c:53:75:2e:
33:55:ef:8b:a8:dd:39:46:5e:85:db:b1:99:94:ca:b5:52:ff:
ef:6d:c3:8a:7d:07:5b:d2:56:87:ad:ec:70:a1:97:83:60:66:
0d:0e:65:33:ba:69:1a:b9:bd:73:0e:4c:ce:32:a2:d0:7e:8d:
39:ae:f2:cf:57:45:09:07:64:51:2c:fa:05:7d:6a:9c:f3:fb:
4d:57:9b:2e:30:31:5d:4d:bd:a3:a1:a9:fd:fc:26:2e:9d:66:
81:1f:c9:6e:92:23:8c:1d:13:4e:e6:df:f2:af:c1:32:1c:15:
27:14:e5:d1:83:23:23:ea:f4:4c:b9:99:e9:53:7d:30:5e:4b:
68:fe:d4:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy
RDc3RDczN0YwHhcNMjYwNjEyMjExNzI5WhcNMjYwNjE5MjExNzI5WjAYMRYwFAYD
VQQDEw02YTJjNzc2YS1hZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoWBH0Z4ynWJUk25U91lWf1wPB0hapS8ORhIzi4QuS4wHOXFPv12n+dMvU17e
ho7IJ5ExqR4OLJt+gltv3xQF0nZii//VWfRorKGQq6Jk3ogDtPrDjzMQxjPL3e8Y
3ccTYR4t+Po8YXF1Vt6Hru9TF7O1UH5iV61cHwTzMNaCx/WbtKuDVhBbL8jkso+q
73vj9k/gljW5AMPw2mNujUPSU6UwZKLERGlghg8LeXkGHJrM6lbKaX1yeIuiFByN
0mlGz52M0eH1TLvaaYNcJtsryD/AAsUs4TM7pbEXs0zQd1btJTcCLqu4kExX08Ao
HC4kIHzEOcbQiCPBpxIAdB/3gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqkdZrC
zxGzUd+Zr5kfxqLyhdEcMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG
QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5
TGllWUtXbHBlRm90ZDljMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlB6fEjQzsh0ATOCewzakWsFzkmX2fQvMuFWejlIL8PePVJpyCtYo+3MGDQxv
v6eAke1KEsjCbxMScHMz62ovAGYC3outJHgBHg8jEQ/sxW0LO3o0zdfKCtuOaSIA
mq7zauAcmodTEVuL1orYLKtZ3PmowL2hOjFa0LGMU3UuM1Xvi6jdOUZehduxmZTK
tVL/723Din0HW9JWh63scKGXg2BmDQ5lM7ppGrm9cw5MzjKi0H6NOa7yz1dFCQdk
USz6BX1qnPP7TVebLjAxXU29o6Gp/fwmLp1mgR/JbpIjjB0TTubf8q/BMhwVJxTl
0YMjI+r0TLmZ6VN9MF5LaP7UOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:17 2026 by rpki-client