
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json)
Hash identifier: +k9kPPtZIkA0oX0M/bQh3KAVZbBvHX/VpB+OobKdWEY=
Subject key identifier: DD:37:87:63:06:5C:3F:BD:00:74:DC:3A:A0:0E:4B:85:69:43:E3:B4
Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Certificate serial: 0863
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
Manifest number: 085A
Signing time: Tue 12 May 2026 20:53:15 +0000
Manifest this update: Tue 12 May 2026 20:53:14 +0000
Manifest next update: Tue 19 May 2026 20:53:14 +0000
Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: qiaEyqA8U0YUIulow8iyKsC9IWBfuSXKPQ5vIbmfRP0=)
2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: FbDgkdDDZMbNMRMdVxYm9VIX+tjPFoWLYLBx+uGl7CM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147 (0x863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Validity
Not Before: May 12 20:53:14 2026 GMT
Not After : May 19 20:53:14 2026 GMT
Subject: CN=6a03933b-b373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:ac:06:c5:16:76:7e:59:9d:d6:36:80:21:
76:9a:9d:61:fb:4e:4a:62:82:30:1f:04:ee:7e:56:
4f:17:d4:95:e1:51:c8:c7:ee:9b:13:be:c8:59:1b:
cd:ce:5c:68:c5:81:bc:80:46:65:6b:c5:0b:70:e6:
93:91:6f:7c:8c:d0:9e:e4:5a:f7:0b:78:30:e5:7e:
32:8d:57:e7:9d:be:1f:94:d1:2b:55:98:c7:4b:11:
9b:5d:e6:80:64:ed:d2:65:d9:b9:85:c4:f4:c0:0b:
7b:95:2b:ea:0e:d4:92:43:ed:68:d6:d0:b2:b2:ee:
37:44:96:ca:b3:68:80:58:8f:50:66:85:2b:07:12:
93:c8:11:f5:d5:d4:51:ef:f5:e1:4e:15:4f:3c:14:
bb:bb:74:cb:c2:e7:c9:1c:ca:11:f9:8f:3c:98:b4:
a0:26:1c:4b:c7:55:1c:5e:39:10:27:f0:d3:49:2b:
ca:3a:e8:6f:57:a5:94:44:be:bc:09:34:4b:8f:88:
55:ad:dd:47:6a:88:3c:38:c1:9a:91:a3:7e:63:1e:
1f:3a:9c:20:09:4d:42:37:5b:c7:c2:c8:42:87:98:
4b:52:6b:f7:25:b1:6a:6a:2d:43:39:40:e4:2f:0e:
04:ba:59:a3:a2:0b:7c:3c:b8:8c:86:cf:37:71:5a:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:87:63:06:5C:3F:BD:00:74:DC:3A:A0:0E:4B:85:69:43:E3:B4
X509v3 Authority Key Identifier:
keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:f1:a4:06:87:93:85:0b:7d:f9:5e:5c:a8:aa:68:d0:10:4f:
ac:c9:e2:33:06:7e:41:be:54:90:4c:4c:86:76:17:f3:47:9f:
f8:35:65:6f:81:27:f5:07:aa:d0:f3:5c:d1:1a:37:cc:1e:dd:
05:2f:ea:78:25:ad:55:81:3f:1c:a7:3c:26:8c:84:06:d9:90:
39:17:aa:f7:14:2b:c8:ff:d4:2b:d3:99:65:d9:85:fd:46:03:
b5:fb:8a:68:f6:34:4a:26:18:f0:00:61:b6:06:0b:f7:30:30:
6f:dc:00:0f:34:a6:b2:da:ee:ab:6e:28:0b:b9:96:90:4d:d0:
df:da:8d:e5:f5:33:8d:ce:15:23:0f:68:7b:6a:54:d5:9d:a5:
37:58:94:46:59:a4:14:ce:38:5a:42:43:d0:d7:09:bb:2a:1d:
1f:39:d2:fa:99:3c:7c:8d:5d:85:e0:49:57:3c:11:8a:01:b4:
d2:44:bd:8a:3e:24:a6:b0:2c:3f:ae:64:01:37:d7:c5:8b:43:
87:ef:6d:57:da:2b:06:fb:73:b2:c8:3d:0a:b9:49:fe:64:94:
d9:b1:14:30:8d:f6:b4:bf:0f:c9:be:c9:36:f8:41:b8:69:a9:
9a:04:db:2c:2a:bd:18:9c:f0:58:1f:a7:1c:a8:3c:6b:8c:79:
62:1c:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:05 2026 by rpki-client