
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json)
Hash identifier: tlCNLjqHEshvXEkI4fwMdZlQnOGH2HhTfZ/dcl/LRUo=
Subject key identifier: 12:98:D7:A3:BD:BE:6C:A1:FE:00:A9:38:FB:89:FC:AA:3A:39:1F:10
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial: 071B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
Manifest number: 06F7
Signing time: Thu 16 Apr 2026 21:42:59 +0000
Manifest this update: Thu 16 Apr 2026 21:42:58 +0000
Manifest next update: Thu 23 Apr 2026 21:42:58 +0000
Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: SpFuBqs42xpE2Bt4BNHRjkiguYAKjMJ4vtuC8USCzf4=)
2: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: p9oLeg7LyY+vlGNticT0e8fg65yu3rD7mdYWF8Pyt1o=)
3: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: N9eG1bQhX1YdCDkzKaSF+f+WLANX5CsAn9fANFhO8B8=)
4: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: VDBG2w47npIoKGnSUG19h4msTJ7z1dezZlZeedxqUyw=)
5: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: /IhoZrHLS7mKMxuodlFyZTmLLtfy6GDD39NpDwvO+Xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Validity
Not Before: Apr 16 21:42:58 2026 GMT
Not After : Apr 23 21:42:58 2026 GMT
Subject: CN=69e157e3-f76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:dc:39:6c:95:07:4f:d5:9a:47:50:11:23:
86:06:6e:27:a7:c9:d2:ed:6f:32:40:c4:4e:e7:fe:
86:d9:0f:f3:14:e4:a9:87:fc:96:e1:38:2b:fe:05:
16:07:3f:89:7c:24:62:48:5f:36:0a:3b:1b:c8:b2:
79:a9:cd:9c:a3:29:80:52:14:2b:77:8a:ce:c2:54:
c4:f0:75:1d:30:c9:83:a7:6e:2a:08:80:dc:cf:58:
4b:33:58:b4:42:f4:2c:df:4e:ff:86:4d:21:aa:5a:
ae:09:3d:cf:f3:e4:63:c9:50:a8:a1:e1:51:7b:76:
d9:ac:b0:6e:12:87:b2:60:36:99:b2:7f:8c:2e:42:
91:79:f9:e7:14:c4:e7:ff:92:f6:8e:8b:71:14:d8:
c4:d9:66:7b:d9:f5:b3:af:92:8e:cf:70:af:97:c3:
21:28:3b:66:bb:fa:51:62:68:ac:3a:6d:ed:bb:d6:
81:15:52:12:12:07:b0:e6:97:d5:2b:8e:16:ac:04:
d0:2a:0c:f2:73:66:3e:2e:fc:07:87:aa:84:e7:a9:
a9:38:99:39:17:f8:7a:fc:0d:55:f5:df:1e:ff:7d:
fb:75:14:fb:87:06:25:d2:d5:7c:6f:8c:a6:92:af:
c6:80:2c:00:78:ca:13:4f:33:b4:f9:61:f8:a4:3b:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:98:D7:A3:BD:BE:6C:A1:FE:00:A9:38:FB:89:FC:AA:3A:39:1F:10
X509v3 Authority Key Identifier:
keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:db:5c:da:76:1c:ca:cd:74:4a:93:47:8d:42:f5:27:93:fe:
a3:5a:71:4e:b5:d9:7d:b4:bd:a7:5a:32:5c:02:60:76:f4:90:
e2:f6:9e:13:0a:13:72:fb:e4:24:fe:c5:f8:37:67:3f:11:27:
fd:ed:dd:1d:17:f8:82:4a:97:be:60:f4:7e:f7:e6:eb:c0:ff:
d4:ed:0a:fd:a6:3c:e0:82:84:73:65:ce:34:c9:24:a0:82:ba:
27:5a:0f:2a:a4:8f:74:f2:5f:89:7a:09:09:b9:1e:64:3c:cc:
1d:e5:98:00:cb:13:91:07:3f:a1:aa:72:69:cd:08:53:4b:d2:
4a:96:63:22:57:d1:27:f7:20:c5:c1:ce:96:95:0b:06:39:2c:
2a:fb:73:75:2d:96:91:75:a4:5f:a6:1a:a7:26:b1:b4:29:3a:
aa:0e:95:60:48:53:79:e0:32:87:30:66:5a:35:c5:15:d9:65:
ff:55:15:72:a7:9d:f4:26:4c:da:db:f6:1d:ae:b6:22:24:ab:
b8:7a:8a:f5:1b:c8:d0:18:8d:0b:e7:55:7f:1c:6e:ba:cb:15:
3f:19:84:eb:e7:f5:b9:70:31:c9:d7:90:85:8b:f0:49:ee:42:
e5:25:64:8f:14:e8:fc:84:3a:91:e3:f5:3a:c6:58:15:cb:2f:
1c:95:4d:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD
MkE0RTI5Q0UwHhcNMjYwNDE2MjE0MjU4WhcNMjYwNDIzMjE0MjU4WjAYMRYwFAYD
VQQDEw02OWUxNTdlMy1mNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8a7cOWyVB0/VmkdQESOGBm4np8nS7W8yQMRO5/6G2Q/zFOSph/yW4Tgr/gUW
Bz+JfCRiSF82CjsbyLJ5qc2coymAUhQrd4rOwlTE8HUdMMmDp24qCIDcz1hLM1i0
QvQs307/hk0hqlquCT3P8+RjyVCooeFRe3bZrLBuEoeyYDaZsn+MLkKRefnnFMTn
/5L2jotxFNjE2WZ72fWzr5KOz3Cvl8MhKDtmu/pRYmisOm3tu9aBFVISEgew5pfV
K44WrATQKgzyc2Y+LvwHh6qE56mpOJk5F/h6/A1V9d8e/337dRT7hwYl0tV8b4ym
kq/GgCwAeMoTTzO0+WH4pDvMowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKY16O9
vmyh/gCpOPuJ/Ko6OR8QMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE
NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw
TURiUnh5M1V3S2ZDcE9LYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKdtc2nYcys10SpNHjUL1J5P+o1pxTrXZfbS9p1oyXAJgdvSQ4vaeEwoTcvvk
JP7F+DdnPxEn/e3dHRf4gkqXvmD0fvfm68D/1O0K/aY84IKEc2XONMkkoIK6J1oP
KqSPdPJfiXoJCbkeZDzMHeWYAMsTkQc/oapyac0IU0vSSpZjIlfRJ/cgxcHOlpUL
BjksKvtzdS2WkXWkX6YapyaxtCk6qg6VYEhTeeAyhzBmWjXFFdll/1UVcqed9CZM
2tv2Ha62IiSruHqK9RvI0BiNC+dVfxxuussVPxmE6+f1uXAxydeQhYvwSe5C5SVk
jxTo/IQ6keP1OsZYFcsvHJVNoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:23 2026 by rpki-client