
$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json)
Hash identifier: jRaQ70F38z/Q105yBzPQ+33gJjbcsjhjpiPtkpbGgBo=
Subject key identifier: 75:C0:A6:AB:E4:C4:52:04:5F:E2:D5:0E:28:0C:A3:89:FD:F5:B6:21
Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Certificate serial: 0700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
Manifest number: 06D5
Signing time: Tue 12 May 2026 22:26:22 +0000
Manifest this update: Tue 12 May 2026 22:26:21 +0000
Manifest next update: Tue 19 May 2026 22:26:21 +0000
Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: btZlPAOFoIgCzNa6QpTV2whLq1N+eCC1OeYj/wrHaPc=)
2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: Wf0tkeHPs4IB8mfGOri8fMJK0QaqR5URQJU73Sfpr+E=)
3: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: w3+aZlQ2RBmGjxz4SlkYvG+q8BQVGDzpFhvPTfzKDVY=)
4: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: S0fZW2dgUJeGAm9ytfhirRt94xu3NkvG3zNOfvuS6tg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Validity
Not Before: May 12 22:26:21 2026 GMT
Not After : May 19 22:26:21 2026 GMT
Subject: CN=6a03a90e-e540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:07:42:2b:5f:bc:4d:7c:95:d3:a0:1d:bc:
f8:19:e8:ab:86:8a:fe:f5:85:41:d9:86:d0:b0:eb:
f9:8f:42:24:0b:28:c9:8e:5d:ed:9c:c9:42:c0:d4:
19:70:a9:61:f7:01:4b:1d:cc:fe:c6:e3:27:b6:9d:
f2:5e:29:12:fd:ec:9d:be:8f:5e:b7:1f:29:cd:45:
a2:68:43:44:9c:ff:aa:e5:49:1c:02:7c:03:32:cc:
9a:8b:46:a4:5d:8d:f5:b4:bd:e9:db:5f:b8:53:47:
c4:b2:5b:84:e2:6e:51:83:8e:ac:45:e5:5f:95:4d:
fc:47:51:ac:a1:a3:0e:1a:1c:36:06:33:b9:af:9c:
4b:f0:8f:a3:38:ce:38:fb:c8:52:b6:e4:86:14:94:
2a:9b:a2:39:d1:c3:3a:97:e6:59:d8:4d:c4:fc:44:
8a:8d:5f:c1:f8:5f:a6:c3:66:34:2d:1c:90:09:71:
ed:9d:76:1f:c3:ab:9f:59:af:10:30:ab:d8:59:fa:
c0:2f:96:23:52:18:68:d0:55:7b:c0:fe:c0:fb:ec:
63:97:69:d0:86:d5:c0:58:ca:43:2a:6c:23:39:52:
19:38:e4:41:ae:10:c3:0e:f5:29:17:b4:83:94:0d:
5e:bc:86:48:88:8f:6d:bd:3d:49:12:cd:86:a9:b2:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C0:A6:AB:E4:C4:52:04:5F:E2:D5:0E:28:0C:A3:89:FD:F5:B6:21
X509v3 Authority Key Identifier:
keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:1a:bf:26:6b:91:86:20:a2:0f:52:e2:7b:16:66:c6:73:b1:
b3:3f:5e:ae:45:25:6d:5e:8c:08:38:95:91:d4:41:3b:a0:c9:
04:d5:c2:e9:dc:9a:f5:28:05:f4:68:6d:a0:64:fe:79:e7:1a:
85:6a:dd:61:fe:65:be:56:fe:9f:19:62:eb:44:1b:7b:7c:28:
f0:57:29:b9:a1:f2:d0:47:0c:d6:84:89:2d:be:90:d5:f7:e7:
6d:73:16:59:93:ab:9c:ee:3d:48:1e:53:33:22:8b:3a:0c:54:
49:97:d8:50:0d:3b:4f:55:de:74:d4:0d:dd:00:72:b7:e1:86:
11:7b:87:1f:38:ea:34:6b:eb:db:00:9a:7c:ee:47:d6:3b:c0:
c3:2f:19:61:f3:84:a6:70:11:a8:90:05:02:5f:ef:5d:6a:4a:
a8:e0:21:a8:5b:d4:76:71:42:62:ab:79:68:35:6c:32:bd:92:
2d:87:88:3e:e8:a6:dd:f6:75:6b:a6:fe:51:0b:64:c5:9b:16:
be:57:8d:f0:4b:1f:5f:b8:a1:4c:30:2a:77:22:df:f8:93:75:
a1:00:49:1e:cc:36:2e:d7:e4:ff:20:5e:60:d5:81:9a:cf:48:
9c:17:af:06:03:24:bc:0e:bc:7f:3a:5d:bf:49:e5:57:ea:31:
21:79:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:05 2026 by rpki-client