
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier: q3mfHPd/S8IdHrnvPywS4Qv4A/D+GWunViDNPoSgyd0=
Subject key identifier: CD:75:57:E7:8C:76:F7:EB:78:6A:51:CF:20:00:73:7C:0F:6F:82:7D
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial: 03A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number: 038F
Signing time: Wed 13 May 2026 00:53:48 +0000
Manifest this update: Wed 13 May 2026 00:53:47 +0000
Manifest next update: Wed 20 May 2026 00:53:47 +0000
Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: 9lskJH7Y3zo8hcYGymQiZtdWhq124BWSZnxV7X8YUPc=)
2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=)
3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929 (0x3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Validity
Not Before: May 13 00:53:47 2026 GMT
Not After : May 20 00:53:47 2026 GMT
Subject: CN=6a03cb9c-7d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:17:a9:bb:92:52:c4:20:5c:22:4a:d7:45:
3e:78:e1:b4:ba:b0:11:a2:9f:39:9d:6a:b7:27:09:
06:e6:96:0f:ba:46:ac:ce:99:ed:b0:ac:bb:94:07:
e3:3f:2e:15:7a:9d:76:14:a6:07:cb:80:02:12:71:
11:9d:08:b5:59:27:f5:d2:b5:e3:ab:4d:be:4f:cf:
df:b6:89:39:85:48:cc:60:2c:df:31:eb:f3:11:20:
5d:04:be:c1:91:23:a7:c4:0a:53:0c:f2:d6:de:33:
00:27:ec:05:32:c2:cf:01:15:40:78:82:6b:95:d9:
d3:71:2d:d1:36:a8:0a:81:b7:d9:b2:87:13:3e:01:
65:8a:6c:05:b6:8f:5b:5f:41:6b:d0:a1:75:ba:c6:
5f:49:25:09:db:78:bb:99:70:c1:42:be:00:da:71:
04:a6:42:54:1b:06:ad:fe:2a:8a:f7:19:e5:4a:2e:
e1:ac:29:4d:53:fe:71:31:33:65:a9:24:45:7f:99:
af:dc:1d:7e:cc:26:f4:e2:e5:8b:c9:7a:a1:24:0e:
08:69:da:79:4a:bf:e2:df:1d:a5:e4:13:08:61:0a:
29:d1:a1:02:c3:9c:07:d4:d2:2d:d9:62:24:14:e6:
fd:ae:d1:e6:79:03:3b:14:9c:eb:b9:2e:dc:da:b4:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:75:57:E7:8C:76:F7:EB:78:6A:51:CF:20:00:73:7C:0F:6F:82:7D
X509v3 Authority Key Identifier:
keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:90:d9:47:04:a2:c9:d2:35:48:9b:3f:07:a0:3c:23:1c:4e:
94:4e:28:44:1e:17:b8:c6:50:5d:68:b2:83:2c:8c:da:b4:a9:
53:97:0e:66:c3:cf:82:a2:64:c5:a2:1b:ce:09:39:2b:4a:f7:
ae:24:02:00:33:98:67:9f:b0:c5:0c:ad:2c:69:7c:04:fa:17:
f5:37:fe:2b:6d:5a:87:80:b0:05:2d:c8:e3:21:2d:b3:44:0e:
06:cc:57:9c:c7:8b:36:a9:66:3e:34:e7:1b:60:e3:2d:9c:ba:
c0:e7:53:fb:ed:cb:31:84:68:53:13:a3:8a:04:3a:31:2b:54:
82:ec:6b:6f:df:3c:90:f6:ec:66:2c:d5:bc:47:c6:e6:0f:53:
33:43:84:a0:f7:ac:87:43:9b:54:39:58:c2:2e:f3:99:b8:84:
10:14:ed:47:6c:a8:a4:2b:92:4a:9f:28:43:63:17:88:31:2a:
8e:7c:86:fc:f3:1f:c4:34:88:1e:ca:7d:8a:e3:0c:2a:c5:11:
1b:e8:59:26:f3:ad:82:6e:80:d5:84:e0:1a:79:33:96:1d:76:
dc:0f:57:44:41:fc:90:69:db:d2:13:c0:38:1e:3b:6c:9e:a8:
92:cb:e3:08:07:bd:46:f9:74:5c:89:38:af:fd:32:9d:19:80:
66:9f:5c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:04:29 2026 by rpki-client