
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
File: _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json)
Hash identifier: KxfdwyVjCyh33bbzjrEE/OjqgsK1nk396ZhEcbSGC5w=
Subject key identifier: CC:45:44:86:A5:C3:96:6C:63:A9:64:34:8B:4D:AD:FB:DC:6D:F5:FA
Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Certificate issuer: /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
Manifest number: 50
Signing time: Mon 11 May 2026 09:13:56 +0000
Manifest this update: Mon 11 May 2026 09:13:55 +0000
Manifest next update: Mon 18 May 2026 09:13:55 +0000
Files and hashes: 1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: FWeUXEs51uh5t3tsidbO+x+Pbc4e/4xec2/snV2t0VE=)
2: B97CD5B84D1911F191BBC780B9833773.roa (hash: HpuWmUe+4DzlKIQ/3j2Ee6fHNR3Y+Qt0BWhQNdOZvoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Validity
Not Before: May 11 09:13:55 2026 GMT
Not After : May 18 09:13:55 2026 GMT
Subject: CN=6a019dd4-d1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:2f:f3:f5:ee:0e:a8:5f:21:ab:f5:a1:88:
5d:ff:52:9d:6d:49:ba:76:e1:84:d1:55:29:af:97:
a1:be:aa:1b:a3:f9:07:e0:5a:73:7c:b7:e5:ea:49:
7c:87:c5:5e:27:a8:1e:96:e1:15:8f:fd:0e:94:12:
82:90:c0:6a:a3:ba:e3:fe:a2:b5:de:a8:d0:63:d7:
f8:a0:2f:00:da:8c:5f:29:b8:f1:de:85:ac:94:51:
d1:c4:5e:e2:ad:c8:8e:79:e2:ca:18:16:26:06:5a:
f1:06:0b:1e:31:59:f1:d3:8a:9c:3b:b4:88:e6:fb:
16:97:7b:d6:03:4b:57:ea:53:f4:c1:1f:08:a8:54:
69:7f:03:a9:68:4c:ad:a5:b3:85:7d:a5:3f:4f:5e:
64:11:6a:3e:70:8c:1f:e2:2f:52:4c:61:fb:fc:2d:
6e:1d:64:5b:9e:33:0c:15:e0:dc:33:c6:01:db:91:
87:48:9b:73:79:d5:b2:c9:2b:cf:b2:13:51:72:62:
e6:f3:4b:ef:c4:95:41:bf:0e:a9:9e:4a:66:40:ee:
aa:e8:2d:e0:2d:f6:55:c4:c6:2f:a6:35:16:b5:53:
c9:4a:29:b6:62:e3:3a:b4:04:84:7d:79:4f:5b:bb:
dc:56:cf:e3:68:ef:d9:be:24:59:c8:28:c1:bd:e4:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:44:86:A5:C3:96:6C:63:A9:64:34:8B:4D:AD:FB:DC:6D:F5:FA
X509v3 Authority Key Identifier:
keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:43:9a:97:53:2a:f7:f3:c4:58:98:0f:d4:52:dd:f9:e7:42:
ea:6d:01:e9:61:7c:9a:81:e8:24:78:96:49:39:33:d0:18:d4:
95:15:7d:cf:e5:89:62:6f:07:46:93:f9:5f:7c:a2:28:32:23:
69:00:67:76:f0:d7:07:5e:fe:38:88:a0:ac:57:2d:14:32:29:
b2:a2:3b:28:a9:e7:d4:eb:3e:1d:22:de:1a:e4:dc:8f:da:f2:
a9:f4:c9:d5:d8:56:bf:03:c6:87:a8:f5:ae:ec:3e:8e:df:97:
6b:47:1f:8f:32:d4:40:90:72:ab:bd:da:22:5e:f9:ff:ca:81:
76:2d:fa:a4:c2:a4:5a:d0:3e:01:2c:8d:32:a6:ea:41:8b:9c:
05:85:66:c6:47:53:bc:d0:d4:78:a4:f2:06:42:09:10:65:3c:
d6:41:01:d6:7c:de:82:3a:aa:17:7f:df:39:65:c2:f0:e8:b1:
2a:46:f9:eb:23:f4:a6:41:d8:a7:0c:9d:55:4a:fe:17:0b:c3:
86:c0:8f:3f:a6:b3:3f:62:8e:0a:4b:b7:7b:33:31:1e:9c:89:
61:41:eb:75:fe:1c:11:0f:0c:21:17:a9:f4:e6:ff:15:da:09:
dc:31:e3:fe:be:cf:02:33:be:eb:63:8a:78:ac:3f:d5:2a:ac:
d5:4e:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:46 2026 by rpki-client