
$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json)
Hash identifier: sl2Iu87FysBdQ97UYnGcdbcLffdi5oBjldKVB646mg4=
Subject key identifier: 34:A1:55:42:53:01:56:23:2C:59:45:2E:F1:69:15:8A:FA:76:5E:D2
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
Manifest number: 0132
Signing time: Wed 13 May 2026 05:41:40 +0000
Manifest this update: Wed 13 May 2026 05:41:39 +0000
Manifest next update: Wed 20 May 2026 05:41:39 +0000
Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: z+p1Lik50AmV/NKaExBD/1V+Kyod8xd/vB3/Pzu5OYE=)
2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: vQxrD0Wy1epRcIQqGanMT2UEnCUMa40m33Ixwa6rxNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: May 13 05:41:39 2026 GMT
Not After : May 20 05:41:39 2026 GMT
Subject: CN=6a040f13-babc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:d5:57:9d:8d:81:97:1d:b6:21:4f:b2:ed:
79:59:1a:57:6b:ac:7f:10:81:f5:90:66:0c:8e:36:
37:32:26:c8:3b:dc:db:03:c9:20:0f:6f:74:36:a0:
c4:a5:f6:63:f2:1b:66:e9:0b:cd:fd:9a:6b:fb:68:
90:46:45:08:b8:6c:e3:27:f7:3a:10:3e:9f:d3:e8:
ca:1d:de:89:a1:40:10:57:f6:51:45:2f:52:04:be:
6e:a1:5d:72:3f:f1:13:cc:66:9e:69:0b:17:52:7c:
4f:c7:ad:b9:91:7b:e6:c3:73:3f:ca:be:d3:53:50:
49:59:9f:47:43:76:ad:66:3a:a8:66:57:8a:dd:e5:
24:9f:7a:50:af:25:48:99:a6:89:15:71:5e:37:c8:
7b:07:bb:13:c5:fa:6d:2b:0c:39:98:a4:bd:59:59:
e5:d9:2c:3f:f9:29:d0:64:65:84:64:81:e7:4f:e6:
ba:8d:a4:ed:05:97:03:ee:cc:cd:95:d5:1b:3c:a2:
dd:8f:e6:b2:be:c7:62:f4:42:d0:cc:0c:ed:e3:a4:
ee:bb:21:7c:60:d3:ca:cc:6b:af:7a:18:04:0d:2d:
27:f8:56:2c:bd:f8:61:87:3e:41:76:70:21:50:6e:
52:2d:a9:99:f9:9b:b6:54:67:b7:94:dd:61:f3:aa:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:55:42:53:01:56:23:2C:59:45:2E:F1:69:15:8A:FA:76:5E:D2
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:3a:26:56:23:73:89:4e:e6:e2:ef:6b:43:d7:9e:14:0c:
b8:f8:40:36:7f:dc:5e:ce:07:e3:e7:b7:8d:24:df:60:70:af:
e2:30:8e:bd:d1:94:71:18:97:f7:53:44:74:9e:e6:c1:4e:35:
2d:d1:d9:04:66:34:c8:32:8c:24:7b:17:5a:e8:72:ad:85:de:
b4:75:0f:53:35:b0:5c:2e:2f:8b:97:34:06:93:e8:26:1d:72:
4e:04:9b:fa:b8:0e:70:e4:48:1f:b3:6f:07:51:08:2d:7f:dc:
62:1d:62:20:bd:ff:6c:c6:9e:87:82:96:89:d5:93:94:76:5f:
39:78:b5:ce:4a:36:e3:58:9f:27:3d:f1:2d:30:1a:16:98:6f:
33:cb:8e:8c:54:c2:ef:75:42:27:76:b7:51:ea:00:e3:60:e1:
9a:dc:f9:a2:24:2c:42:7f:47:46:81:94:bb:a3:f4:18:f1:02:
93:65:79:4f:84:48:7f:6c:2f:01:a5:6b:8a:a7:4d:93:bb:8a:
91:8b:17:ab:df:af:2e:28:39:8f:0f:ee:18:69:97:51:c5:bd:
43:c2:f2:dd:44:39:7b:74:ac:e1:47:05:cd:da:db:82:f0:2a:
72:51:f7:b0:8a:70:fe:f2:c3:03:06:75:bb:d2:69:91:ed:b7:
32:9c:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:59 2026 by rpki-client