
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier: 3dNoX9kdWLnKhmasqOX7Zxa2K9joHEWEQVoZQbgyVwc=
Subject key identifier: 65:35:45:A2:BC:28:1D:53:21:8C:E2:B7:74:D1:2D:43:C8:17:1F:48
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial: 02BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number: 02B0
Signing time: Fri 17 Apr 2026 01:21:58 +0000
Manifest this update: Fri 17 Apr 2026 01:21:58 +0000
Manifest next update: Fri 24 Apr 2026 01:21:58 +0000
Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: Xh6yH4Aq6n8hUHNOl7KXAs4iU1jssw1JY4PxYemK3vw=)
2: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: QQORdPKkCBGXWBMZkno+T8u87+gp990frsFu1rUngIM=)
3: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: vysf+JOpL7OvntYiYikMIsDz8nEsAs8IBD8OzimL+Fg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Validity
Not Before: Apr 17 01:21:58 2026 GMT
Not After : Apr 24 01:21:58 2026 GMT
Subject: CN=69e18b36-061d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:33:10:ea:7a:2d:2e:ae:5b:8e:dc:c3:63:
65:0e:50:4b:65:e3:16:6c:2b:a9:4d:aa:ca:ce:20:
00:33:6e:8e:82:24:0b:b5:99:aa:35:42:0e:c7:08:
ae:0b:eb:cd:20:30:79:56:11:fa:f7:7d:b3:07:58:
6c:af:21:ac:c5:2a:bf:ff:56:82:72:12:a8:2e:23:
e3:b7:44:6b:09:83:96:4a:17:81:14:99:65:9e:93:
1f:6b:db:95:05:04:d1:fa:fa:8e:5e:59:5e:3c:56:
2a:cd:6c:53:21:64:40:ed:05:5c:7c:5e:a8:66:57:
e2:fd:d6:36:18:e4:1c:2e:b8:c5:15:c6:93:cc:3a:
70:f1:33:6a:52:56:1f:16:9b:b4:cf:1a:7a:e2:2f:
0f:58:95:07:23:47:4a:23:9e:ae:1f:a0:9b:20:f4:
fd:49:bb:10:27:d6:f8:ea:f9:35:56:7c:ae:22:84:
3d:ca:03:0c:8d:25:95:06:34:02:14:4e:84:cb:dc:
84:eb:ab:1d:7c:31:4a:b1:c7:de:bc:27:2e:d4:ac:
a4:ff:0b:70:99:0b:90:e6:8b:e5:d2:8b:f1:be:7e:
99:6c:3d:60:3a:82:fd:3b:49:56:8d:e2:d1:49:c1:
2d:c2:67:95:02:b8:50:e4:84:c6:f3:a0:fd:f4:62:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:35:45:A2:BC:28:1D:53:21:8C:E2:B7:74:D1:2D:43:C8:17:1F:48
X509v3 Authority Key Identifier:
keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:de:0d:9d:26:25:86:09:ea:0c:0c:b9:35:9e:9e:e7:5a:d3:
0c:8b:5d:3d:5a:7d:ef:ff:59:7a:c2:8d:62:bd:3a:80:72:c0:
d3:55:47:22:3e:94:e0:7d:38:42:06:be:48:89:b3:5e:63:3e:
17:94:66:46:72:20:97:da:cd:9d:28:13:ba:01:e7:78:e5:b4:
8d:54:5e:f2:3d:b0:fb:ba:33:9c:47:89:bf:1a:10:a2:b8:03:
7f:5b:61:8b:5f:0a:42:67:2b:8f:12:9d:91:30:6c:ba:2d:4b:
75:57:b7:d3:f9:e4:8d:e3:ea:3f:c3:29:3e:f6:e2:ce:1f:e0:
35:9d:40:b7:37:bb:1f:c7:25:4c:03:92:81:fd:6f:2d:c7:f4:
5c:84:1a:28:c4:37:b1:87:68:e8:1e:0c:07:52:52:a9:0d:2a:
43:c0:18:cc:d5:e7:a5:88:d7:1b:47:94:91:b3:02:46:80:26:
74:22:18:70:e9:9c:b9:ea:e4:d2:91:74:46:55:5b:da:44:9d:
06:01:c2:68:4c:83:a0:63:20:e3:67:51:bd:fb:82:4c:05:4d:
9d:03:51:c6:3a:d0:bb:4b:8b:07:c9:84:ee:11:70:1a:49:8f:
19:86:6e:7f:d6:5e:ac:42:b3:81:1b:94:ce:0d:dd:12:8a:98:
60:7f:90:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB
MTk3QjlEN0MwHhcNMjYwNDE3MDEyMTU4WhcNMjYwNDI0MDEyMTU4WjAYMRYwFAYD
VQQDEw02OWUxOGIzNi0wNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA14IzEOp6LS6uW47cw2NlDlBLZeMWbCupTarKziAAM26OgiQLtZmqNUIOxwiu
C+vNIDB5VhH6932zB1hsryGsxSq//1aCchKoLiPjt0RrCYOWSheBFJllnpMfa9uV
BQTR+vqOXllePFYqzWxTIWRA7QVcfF6oZlfi/dY2GOQcLrjFFcaTzDpw8TNqUlYf
Fpu0zxp64i8PWJUHI0dKI56uH6CbIPT9SbsQJ9b46vk1VnyuIoQ9ygMMjSWVBjQC
FE6Ey9yE66sdfDFKscfevCcu1Kyk/wtwmQuQ5ovl0ovxvn6ZbD1gOoL9O0lWjeLR
ScEtwmeVArhQ5ITG86D99GJlIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGU1RaK8
KB1TIYzit3TRLUPIFx9IMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB
MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq
VUpua2hEUElKSmVobDduWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXN4NnSYlhgnqDAy5NZ6e51rTDItdPVp97/9ZesKNYr06gHLA01VHIj6U4H04
Qga+SImzXmM+F5RmRnIgl9rNnSgTugHneOW0jVRe8j2w+7oznEeJvxoQorgDf1th
i18KQmcrjxKdkTBsui1LdVe30/nkjePqP8MpPvbizh/gNZ1Atze7H8clTAOSgf1v
Lcf0XIQaKMQ3sYdo6B4MB1JSqQ0qQ8AYzNXnpYjXG0eUkbMCRoAmdCIYcOmcuerk
0pF0RlVb2kSdBgHCaEyDoGMg42dRvfuCTAVNnQNRxjrQu0uLB8mE7hFwGkmPGYZu
f9ZerEKzgRuUzg3dEoqYYH+QDA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:44 2026 by rpki-client