
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier: MoBhP0IXPh0WCBezIL6GgILtEqUgwwrZUv1GYQovY4I=
Subject key identifier: 3B:61:56:8D:FC:9D:86:29:83:A6:57:DC:66:29:83:EE:90:E8:F4:83
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number: D9
Signing time: Sat 13 Jun 2026 06:49:44 +0000
Manifest this update: Sat 13 Jun 2026 06:49:44 +0000
Manifest next update: Sat 20 Jun 2026 06:49:44 +0000
Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: tyZ3gqmk82m4wfTFbkcH1n5hbvcBSuw9tsBSRUGcjJ0=)
2: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=)
3: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Validity
Not Before: Jun 13 06:49:44 2026 GMT
Not After : Jun 20 06:49:44 2026 GMT
Subject: CN=6a2cfd88-669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:05:27:d9:c2:b5:40:ed:ed:7f:c4:52:d9:
11:ff:fe:1e:d0:ee:19:8e:01:41:ac:aa:51:4d:1f:
e4:c1:d8:7e:5f:29:d5:d8:25:9e:f9:18:e9:92:b7:
ac:d3:a5:c1:2f:3e:fc:f6:39:62:29:c4:70:35:01:
76:97:89:84:dd:2e:fd:57:28:d0:6f:41:ef:af:0b:
d8:0f:7d:b0:ec:2d:63:a0:5b:22:89:18:82:6d:60:
34:2d:8a:c5:0f:3a:a8:ca:10:30:53:f9:a1:fc:46:
83:f3:f0:46:4a:41:6c:e3:4d:ca:d1:39:af:d1:2c:
e9:07:2f:4a:59:92:ae:e6:7c:c8:a7:81:16:e2:fc:
dc:88:bc:ba:ad:31:28:90:f6:96:ba:38:5a:3a:d2:
cd:f2:b7:fc:a9:06:19:86:15:5a:76:3e:93:ce:a9:
c6:89:94:48:04:28:b4:a1:7f:c8:9d:f3:d5:6f:c1:
a4:8c:1b:da:3e:6b:3b:9f:4d:60:fc:92:9e:d4:6a:
4a:58:f4:d6:4d:d5:a9:e6:ed:ee:79:b8:35:42:b7:
d5:ef:a5:dc:26:49:79:12:87:e7:96:6f:56:81:da:
47:55:78:06:fa:2c:b1:91:e4:ae:98:7f:38:38:2b:
e0:13:3d:79:79:58:d9:51:da:cd:8f:fb:0f:e2:53:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:61:56:8D:FC:9D:86:29:83:A6:57:DC:66:29:83:EE:90:E8:F4:83
X509v3 Authority Key Identifier:
keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:cd:9c:d5:f9:72:b7:63:d8:63:8b:ea:9f:2f:a2:aa:6e:27:
b9:29:1e:66:a7:53:b9:c2:67:06:3b:2f:2c:da:f4:27:30:ab:
6d:6e:48:dd:12:8a:0a:a4:38:82:a0:26:a1:e4:b7:3b:8e:f3:
6d:a6:a1:5f:b4:99:a4:a2:66:89:43:b2:43:eb:e3:22:77:b6:
c6:9b:38:25:68:20:db:29:67:13:f5:f2:10:52:57:a3:97:e2:
55:d1:30:c3:69:4b:4c:f4:0d:e7:bd:44:c5:c5:24:6f:28:1e:
f8:dd:89:ea:0c:21:0f:20:b1:bd:3a:2e:3c:0d:d5:b1:40:c4:
67:b2:65:61:45:86:bc:f4:8f:d7:7a:59:f0:44:29:5b:7e:f0:
c9:73:60:62:8f:f4:ed:eb:df:36:01:73:70:ab:64:32:dd:0d:
0a:62:7b:d3:4d:c4:fe:8a:2c:8c:16:8c:ac:1e:c0:c1:1f:1e:
57:cd:b8:74:b2:7a:04:d5:9a:96:4e:91:d9:8b:10:2a:72:e5:
35:6d:1c:bd:72:3e:be:f1:85:65:a8:7a:ad:cd:62:2b:19:03:
85:c6:ec:34:68:bb:a0:c0:8e:5a:70:69:a2:c6:af:c9:45:4e:
5f:3d:8f:c0:ea:55:e4:45:8d:45:9a:6e:a3:95:ff:6a:75:a4:
2a:07:46:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRFMTMxMTAvBgNVBAUTKDQ5RkQzM0Q2RjUxQUQ2QTQ5ODg0NDY5RkEzOUZFRjA0
MzIzMzZGODEwHhcNMjYwNjEzMDY0OTQ0WhcNMjYwNjIwMDY0OTQ0WjAYMRYwFAYD
VQQDEw02YTJjZmQ4OC02NjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6TUFJ9nCtUDt7X/EUtkR//4e0O4ZjgFBrKpRTR/kwdh+XynV2CWe+Rjpkres
06XBLz789jliKcRwNQF2l4mE3S79VyjQb0HvrwvYD32w7C1joFsiiRiCbWA0LYrF
DzqoyhAwU/mh/EaD8/BGSkFs403K0Tmv0SzpBy9KWZKu5nzIp4EW4vzciLy6rTEo
kPaWujhaOtLN8rf8qQYZhhVadj6TzqnGiZRIBCi0oX/InfPVb8GkjBvaPms7n01g
/JKe1GpKWPTWTdWp5u3uebg1QrfV76XcJkl5Eofnlm9WgdpHVXgG+iyxkeSumH84
OCvgEz15eVjZUdrNj/sP4lN1YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDthVo38
nYYpg6ZX3GYpg+6Q6PSDMB8GA1UdIwQYMBaAFEn9M9b1GtakmIRGn6Of7wQyM2+B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREUxMy8xNTFGRTQ3RTJB
NTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFxU1loRWFmbzVfdkJESXpi
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NmMHoxdlVhMXFTWWhFYWZvNV92QkRJemI0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REUxMy8xNTFGRTQ3RTJBNTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFx
U1loRWFmbzVfdkJESXpiNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZM2c1flyt2PYY4vqny+iqm4nuSkeZqdTucJnBjsvLNr0JzCrbW5I3RKKCqQ4
gqAmoeS3O47zbaahX7SZpKJmiUOyQ+vjIne2xps4JWgg2ylnE/XyEFJXo5fiVdEw
w2lLTPQN571ExcUkbyge+N2J6gwhDyCxvTouPA3VsUDEZ7JlYUWGvPSP13pZ8EQp
W37wyXNgYo/07evfNgFzcKtkMt0NCmJ7003E/oosjBaMrB7AwR8eV824dLJ6BNWa
lk6R2YsQKnLlNW0cvXI+vvGFZah6rc1iKxkDhcbsNGi7oMCOWnBposavyUVOXz2P
wOpV5EWNRZpuo5X/anWkKgdGjA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:09:12 2026 by rpki-client