
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
File: a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json)
Hash identifier: 3gkVL9LXs5RgKDBQ9cAon50TNOFUaAEALvCwXku8c0c=
Subject key identifier: 6C:DE:BC:89:17:1D:08:2C:DF:FC:45:FB:68:34:BB:E5:30:8A:C3:E5
Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
Certificate issuer: /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Certificate serial: 17C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
Manifest number: 21B8
Signing time: Tue 12 May 2026 16:34:01 +0000
Manifest this update: Tue 12 May 2026 16:34:01 +0000
Manifest next update: Tue 19 May 2026 16:34:01 +0000
Files and hashes: 1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: ylqcg4soD6ie74i0sNA2NvT7WKuWoTJ2C+I7NzrTGo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6086 (0x17c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398E5, serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Validity
Not Before: May 12 16:34:01 2026 GMT
Not After : May 19 16:34:01 2026 GMT
Subject: CN=6a035679-1bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:b4:c4:29:bb:8c:21:f2:b8:2d:a0:b3:b6:
d5:cd:60:c7:fa:e7:fa:b3:94:29:9c:f5:10:a1:53:
96:5f:3c:cb:a3:a4:92:0a:01:a0:99:d5:88:07:bf:
04:10:8f:1e:09:7c:72:26:2d:42:07:cc:7c:ba:d1:
92:d6:6f:f8:5a:c7:15:90:9e:34:3f:a0:20:9b:4b:
b9:e6:4a:f6:6b:ae:ea:9d:99:5f:f1:ed:8e:ee:eb:
a7:e5:75:1f:75:cf:30:b7:eb:4c:52:31:d8:7a:29:
06:54:96:d1:7c:24:3b:33:8a:6e:32:35:61:ee:b3:
8e:a0:e3:2d:be:4c:9b:61:7c:b6:f1:8a:95:47:c9:
6c:e4:7e:d3:a8:cc:97:e5:e7:fd:fc:40:79:fd:ab:
ec:38:57:f0:ab:8e:fa:c9:fa:f6:3b:9f:9c:ea:81:
43:0c:eb:4d:f0:26:10:02:4e:57:b3:a6:d1:da:de:
45:05:63:d0:a8:96:09:5d:2e:91:23:7d:56:a0:d8:
89:52:3b:d8:9f:93:f3:2c:c7:02:7d:35:e1:a2:8a:
4a:12:96:8a:93:1c:a4:5f:8a:3d:d2:ac:65:aa:63:
d1:75:6f:d5:b5:36:70:b0:c3:87:b1:3c:21:57:b8:
b0:c7:a8:9c:ef:45:6e:ec:25:01:d9:ba:53:e3:91:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DE:BC:89:17:1D:08:2C:DF:FC:45:FB:68:34:BB:E5:30:8A:C3:E5
X509v3 Authority Key Identifier:
keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:58:75:f0:2a:e7:1c:4e:3d:33:f3:42:20:27:be:32:e8:
7d:bb:4e:d9:79:33:5a:19:3d:29:69:f0:4f:21:cb:2e:d5:11:
e9:49:b6:6a:ba:f1:cc:16:8c:a0:b4:6c:c5:a8:e3:d1:bb:f6:
51:0a:5f:1b:3b:f7:5a:68:3d:57:2b:9b:4e:e9:10:32:06:16:
a5:d7:e5:ab:7c:99:4c:d2:d4:55:17:f8:81:cc:79:48:af:5f:
4c:ef:3f:66:21:cb:a4:ab:8d:fb:26:de:55:aa:69:62:d4:cf:
6c:cb:25:d0:ef:57:00:27:0e:b6:7f:44:21:47:87:6d:11:83:
55:98:53:35:71:0a:6d:27:0a:15:b8:0e:29:fc:90:fc:d0:00:
45:05:6d:e8:f4:29:fb:fa:44:f6:2e:81:98:91:8b:5d:0d:25:
80:17:6a:89:69:49:ca:b9:6b:92:c9:17:c7:79:6d:5f:91:5d:
68:9e:4f:5c:8f:ad:a9:98:a3:1f:a1:41:a3:8f:3c:cf:3a:e7:
71:4b:2b:a4:a9:c0:b4:43:44:7d:64:5b:e3:ec:d4:8e:f8:f8:
67:6a:3c:4f:db:8f:d7:8a:52:c2:59:95:b8:b5:d8:37:c9:69:
92:ad:25:26:3f:15:40:f9:ce:88:94:ae:6b:58:4b:cc:c9:f7:
dd:a3:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:04 2026 by rpki-client