
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
File: RrMUYkbIqOvcBwyRKtn1czFjUfM.mft (raw, json)
Hash identifier: mAolsif8mhdonwOfT3sszOISeL9Yo1HHEWAV1OEDQJE=
Subject key identifier: 1D:D3:5E:5E:1E:91:52:8A:9E:4C:A2:0E:AC:C6:66:51:5E:4F:70:F6
Authority key identifier: 46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3
Certificate issuer: /CN=A913B25C/serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
Manifest number: 1D
Signing time: Wed 13 May 2026 09:04:28 +0000
Manifest this update: Wed 13 May 2026 09:04:27 +0000
Manifest next update: Wed 20 May 2026 09:04:27 +0000
Files and hashes: 1: RrMUYkbIqOvcBwyRKtn1czFjUfM.crl (hash: T6tdfrwVrx7MGU2Z5b6B9donV7XBJS3DznitpPXRhPw=)
2: B7B0933824D711F1BC6B08E2AB833773.roa (hash: qfb5OhL2JYl88uq6Z6fcjDjGJqh3quT1pfhxv2w56CQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl
rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B25C, serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3
Validity
Not Before: May 13 09:04:27 2026 GMT
Not After : May 20 09:04:27 2026 GMT
Subject: CN=6a043e9c-1165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:97:b0:78:3a:50:0d:21:02:e8:6a:60:74:
9c:cd:0d:bc:30:bf:8c:ad:18:4f:c0:63:64:cc:71:
16:7d:7c:8c:f5:dc:b9:68:53:7a:30:ae:a6:49:48:
e0:1d:57:13:84:c9:03:62:81:4f:43:e5:d4:55:3c:
4a:7a:73:24:48:b6:ae:51:0f:94:13:61:9f:0b:c2:
2b:22:7c:91:26:ae:1d:c2:da:dc:a0:1d:9a:21:17:
e6:70:9a:e7:65:4e:7e:7d:bf:52:17:52:5b:1d:78:
a1:c5:bd:55:c2:26:7e:09:96:56:1a:e5:df:52:12:
0e:ba:63:1b:7c:81:82:a5:e5:6b:59:6b:96:66:d0:
c6:52:1f:24:4d:f7:9d:90:2d:f9:f1:07:61:46:ee:
b5:92:14:6c:f7:e1:e4:4f:1b:06:1c:7a:0d:08:36:
06:90:10:f4:ea:bc:63:e0:3f:50:47:1a:71:4a:28:
5c:d4:29:e1:e6:ea:8b:ff:92:5b:a1:0c:d1:6c:92:
84:16:64:fe:42:b1:e2:49:ba:e3:da:06:7d:97:66:
6e:72:1c:95:49:29:37:b6:1b:3b:31:cd:fb:d2:8a:
be:6a:13:87:5e:5b:02:a0:8a:7b:dd:3c:2e:ab:0c:
bb:91:28:12:8d:d2:c3:c7:07:8a:e8:a6:16:30:50:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D3:5E:5E:1E:91:52:8A:9E:4C:A2:0E:AC:C6:66:51:5E:4F:70:F6
X509v3 Authority Key Identifier:
keyid:46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5f:98:6f:da:aa:32:73:b6:c7:36:77:0b:0e:91:58:78:b7:
89:c4:77:ea:ed:ac:b6:62:1f:1e:c8:5b:16:7b:55:c2:91:b6:
01:e3:3a:3c:1e:46:a0:cc:32:82:c0:0b:9d:2d:88:3e:b9:14:
2a:e7:26:6c:20:f3:15:7e:c9:00:73:dc:9a:63:9e:03:9b:6c:
6c:66:a4:bf:32:fb:4d:67:55:65:12:00:0d:04:bb:1b:1d:b2:
6e:20:59:97:ff:39:99:1b:3d:ae:f9:27:b1:78:fb:cc:d5:4c:
e9:67:76:4c:9b:bc:94:b0:51:97:d1:ca:2b:b7:98:8c:75:0f:
21:a4:f2:fe:48:0c:f0:22:cf:7e:3b:63:72:87:34:0f:17:b9:
ef:f4:3f:c0:d4:dd:66:ab:63:b9:26:66:3a:bf:59:44:df:47:
d6:83:ae:4f:cb:69:57:e8:ed:22:35:d4:b2:34:fa:28:fc:46:
d8:e2:2a:e2:11:16:18:6f:5d:8f:34:71:e3:01:34:e1:a5:23:
28:c5:b2:ca:dd:6b:18:ee:14:ab:dc:5a:9a:ca:a7:4e:ae:96:
b7:07:69:44:92:81:53:d5:1d:fc:fc:cc:b7:9e:d9:d1:97:0d:
5d:44:f3:5d:03:de:ea:38:87:0c:a2:58:15:55:91:ea:7b:77:
8f:71:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:50:56 2026 by rpki-client