
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json)
Hash identifier: wlAOiEZXOQfjN8fSdBtZ8La56teUllLNv2MOiPGMjFk=
Subject key identifier: EE:6B:54:D3:97:09:00:20:6C:0E:94:04:9A:AA:47:0E:67:62:C2:EA
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial: 057A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
Manifest number: 0568
Signing time: Tue 12 May 2026 23:30:19 +0000
Manifest this update: Tue 12 May 2026 23:30:18 +0000
Manifest next update: Tue 19 May 2026 23:30:18 +0000
Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: JqUnsROawSB+8Cck9Cn+d/DWF77H6fKONF26GaHGSpI=)
2: 1295B5943FA611EF94664041C4F9AE02.roa (hash: hapzzVKt9oxlCLEwYHK4MTLp4PI8BfiasqodqBtyfb4=)
3: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: ly19W/Muv8BDmpRPmS2Fe3o0q7TToeFH9ObD8f2QW9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Validity
Not Before: May 12 23:30:18 2026 GMT
Not After : May 19 23:30:18 2026 GMT
Subject: CN=6a03b80a-a1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:6a:93:1a:65:08:56:28:31:eb:ae:16:b4:
c0:cd:d3:21:79:7a:ab:f6:9e:97:f7:e6:c2:3d:a9:
a7:aa:0f:5b:b2:ca:f0:08:fa:da:a1:3e:02:3a:3b:
03:8b:1b:48:6d:c2:f8:5c:e2:07:5b:86:bd:ae:b8:
6f:f7:71:93:71:56:c7:06:45:10:ea:cf:eb:7b:38:
db:df:42:1e:0b:5b:10:c3:e9:01:7f:c0:d2:64:7a:
09:f9:1e:4d:44:61:09:e0:2c:5c:5a:c3:93:24:68:
ab:06:21:c4:97:4c:06:b4:52:1c:df:31:68:2e:23:
7e:e4:d3:ea:cb:92:e8:0a:77:33:50:89:aa:38:ac:
8b:70:7d:32:b8:7f:f9:9c:8b:49:8a:bd:b5:ff:61:
4f:f7:34:24:57:6f:89:50:db:ff:2e:80:b6:38:94:
a4:c2:18:35:16:9c:e8:53:0f:e5:b0:2b:8f:1e:e3:
5d:e2:b7:26:fa:d9:13:10:78:8f:20:5d:26:2e:2a:
5b:f5:32:7d:0b:29:47:37:01:3c:70:9e:4f:31:b4:
54:f8:90:80:08:12:ec:c1:b4:06:cf:f1:3c:fd:14:
2a:01:af:c6:ba:9a:e2:04:06:5b:02:d2:da:5d:50:
ab:4f:68:9f:1f:4f:69:a4:7f:ba:23:a8:f0:39:9f:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6B:54:D3:97:09:00:20:6C:0E:94:04:9A:AA:47:0E:67:62:C2:EA
X509v3 Authority Key Identifier:
keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:a4:8c:5a:ae:67:e6:41:37:cf:f6:e0:86:34:c9:09:dc:d7:
ca:e6:d1:12:c2:25:87:54:56:e8:a8:75:55:35:d4:39:da:b3:
8a:55:b1:6f:42:a5:0e:28:3e:4d:f5:1a:58:33:f1:38:bd:4a:
02:17:8c:c1:55:e0:ba:fa:d7:6b:69:7b:f9:3b:62:3c:29:9e:
ac:b3:b1:dc:d6:4a:bf:c4:e9:9f:dc:b7:45:80:72:9f:2e:9a:
5e:10:bd:6d:12:ae:27:27:ce:dd:48:04:bb:79:c6:f7:30:d6:
cb:a9:9b:23:e5:c1:c3:aa:8f:bb:9b:39:2c:4e:e7:43:d0:b0:
f7:4f:7b:40:ac:e5:de:e0:f7:c4:ce:86:be:05:6b:24:a3:3e:
3d:2a:56:75:a5:c0:a2:ec:40:a1:4f:65:34:c0:65:7b:ac:80:
83:39:c6:17:02:fa:9b:2d:a4:a5:a1:ad:b3:3f:98:61:a1:59:
dd:92:bf:89:c0:3a:d6:77:2a:50:98:17:bd:e9:91:77:43:83:
92:70:18:1f:9c:f7:27:12:e9:13:f5:47:e6:ff:8f:cf:44:46:
32:f0:c6:0f:0a:0e:e5:6d:91:65:42:63:dd:63:7a:f2:18:6e:
ad:23:ce:30:02:a7:77:d9:b8:34:8a:5e:2a:06:72:4e:79:94:
a5:09:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:56 2026 by rpki-client