
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
File: 81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json)
Hash identifier: pvMmOX7xuepAWFpeS0cuTiujTd3iRjqOvjUqD6DSPD0=
Subject key identifier: E4:1B:D6:5B:2C:7D:58:03:C4:88:3C:BA:A1:60:5B:68:C8:27:30:DD
Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Certificate serial: 0D23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
Manifest number: 0D0D
Signing time: Tue 12 May 2026 18:17:27 +0000
Manifest this update: Tue 12 May 2026 18:17:27 +0000
Manifest next update: Tue 19 May 2026 18:17:27 +0000
Files and hashes: 1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: Kh90J8ZZ5Vkil/SNRS/u2kYOdCjjEr11xcnJfRum99s=)
2: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: hx/XClGOxlPW04zDBJmjurX9BHlhYbmPzElIhNfYLOw=)
3: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: oNk2Yj7BAXr53shotI4NPG4FvCYNPLa/xgmkzr6F1Yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Validity
Not Before: May 12 18:17:27 2026 GMT
Not After : May 19 18:17:27 2026 GMT
Subject: CN=6a036eb7-8595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:00:0b:b6:c8:23:25:bf:58:f7:d1:3f:8e:
27:dd:3b:10:b2:24:b5:b0:83:9c:b9:ac:53:ad:ac:
e0:34:b6:cb:15:28:81:1f:a1:2b:f3:87:27:99:a8:
16:90:fb:6b:0b:47:ae:1c:b5:84:33:11:23:ce:e6:
6b:1b:7a:49:b6:76:6d:16:0d:f3:74:43:6a:2e:36:
ca:26:2d:4d:8b:a4:01:c9:45:96:23:f0:f6:10:69:
9b:c9:3c:e3:0f:aa:56:7a:02:1b:b2:5c:af:65:a5:
78:fd:a7:d4:60:3d:a8:f4:91:f2:b1:e5:f5:58:eb:
d4:7c:b6:79:c9:84:10:67:dc:fb:9e:b8:00:e4:86:
28:a8:6e:07:9d:da:af:d8:73:36:11:01:ee:ca:80:
d7:70:b1:8c:51:cd:86:89:27:d8:db:8e:62:de:69:
4e:56:87:9b:e4:fc:18:f7:f8:fe:92:a7:b3:f9:8b:
9e:e2:ca:16:df:b7:3e:c6:e8:8f:2d:0c:7b:d9:6a:
e3:13:5b:cf:00:bd:aa:fd:a6:21:ee:d7:d9:2d:a5:
d8:dd:c6:0a:17:d9:81:d8:87:f2:fa:63:0f:22:a6:
2b:5c:4c:4e:ad:e1:76:10:63:3d:a6:92:f7:6f:ae:
c0:e4:87:62:fb:a9:36:a0:b8:81:d6:06:f9:ae:cb:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1B:D6:5B:2C:7D:58:03:C4:88:3C:BA:A1:60:5B:68:C8:27:30:DD
X509v3 Authority Key Identifier:
keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:ba:70:87:47:a9:a7:e0:07:9c:de:6a:86:dc:5e:1a:47:81:
06:9e:5a:46:e1:60:c2:eb:7c:04:54:e8:b8:c0:15:fc:5c:a4:
c4:38:c9:38:3d:35:70:c4:60:a0:34:82:09:ed:ab:45:b6:58:
de:f9:c9:33:dc:53:6d:3b:f2:39:94:0b:a4:26:98:e6:93:65:
7c:c2:5e:12:20:14:2c:73:16:79:84:a2:bc:d6:b7:72:c1:58:
31:47:3a:60:6e:a3:dd:26:24:4e:14:4d:a2:7e:fb:e7:88:a5:
5c:ba:47:1c:c6:b8:fc:55:6b:46:94:a7:d7:51:f3:46:53:79:
90:d7:13:4b:b3:82:1f:65:a4:ca:78:68:4c:a1:71:db:44:51:
fb:6a:07:aa:29:09:c6:ef:a3:4c:8d:76:d8:fb:85:5f:c8:7a:
c2:96:58:92:d7:8f:c8:72:e8:42:a4:83:18:da:1c:8f:76:7c:
1a:ee:f3:62:39:fc:e1:62:f7:d3:e5:fe:20:65:8a:3d:34:5a:
9f:b5:64:75:f6:ce:c4:b4:30:c4:4d:5a:05:85:0a:e6:58:86:
9e:cf:ae:02:d7:08:20:63:c0:e7:17:20:c3:10:73:bf:65:1b:
dd:ec:9d:aa:bc:31:28:03:8c:cb:c4:28:c9:f5:7d:ed:8c:dc:
64:32:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:35 2026 by rpki-client