
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json)
Hash identifier: moQ6t01G2aRk2QGst8lrZ6zlLBW41vepVI3EqwuYav0=
Subject key identifier: 4F:1A:EA:1A:43:ED:18:45:B1:42:DE:43:4D:2F:BB:B0:24:14:67:D4
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial: 0510
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
Manifest number: 0509
Signing time: Tue 12 May 2026 23:45:10 +0000
Manifest this update: Tue 12 May 2026 23:45:10 +0000
Manifest next update: Tue 19 May 2026 23:45:10 +0000
Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: 7FZ4cNc6CPgOiywYpzpfmpUTdAvgRDHU7f0hmzGSiHk=)
2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: tzCOvyqYt7MFJ8SNbSmhb4aGjE+HioiUqoKryi7LaSA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Validity
Not Before: May 12 23:45:10 2026 GMT
Not After : May 19 23:45:10 2026 GMT
Subject: CN=6a03bb86-bb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:37:3f:e0:e5:7f:f1:79:8c:c6:17:fe:84:
c9:aa:9b:87:a2:87:73:7e:e9:be:3f:6b:37:50:fd:
05:75:44:7e:7e:b7:6e:38:2e:21:70:00:bd:b8:72:
d3:2f:e8:e8:93:4a:98:52:ed:94:72:04:6e:3b:66:
83:1f:c1:92:ed:b1:98:1a:2b:44:9d:d4:a6:55:47:
61:48:5b:26:74:7e:9c:13:06:09:25:22:b9:8b:b5:
2a:fd:dc:0b:28:62:95:99:61:ec:be:55:e9:1a:2a:
9e:81:a0:bd:3e:3b:91:bd:84:68:99:0b:a2:68:38:
bf:0f:b0:70:82:79:fb:85:e1:38:8e:61:66:ee:e0:
2b:dd:75:16:83:60:0a:bb:2f:4a:08:bc:74:d8:cb:
e8:ab:31:2f:7e:2a:b2:1d:7e:00:5b:1e:80:6e:21:
ad:d5:33:44:03:67:84:59:ab:fd:4f:bc:b9:6f:44:
08:44:a1:62:6e:7f:4c:2e:ae:4f:68:e8:8e:7b:9f:
d3:84:36:fe:33:40:e9:82:14:4d:6d:9d:d9:07:b2:
8a:26:ac:f7:d0:06:28:e9:7c:0d:2b:a4:6f:af:11:
fa:d6:2c:af:5d:b5:35:39:c7:93:6a:18:8e:7d:b7:
b5:fe:56:ff:b3:21:7f:84:5a:94:be:4f:35:20:39:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1A:EA:1A:43:ED:18:45:B1:42:DE:43:4D:2F:BB:B0:24:14:67:D4
X509v3 Authority Key Identifier:
keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:07:7f:ee:9f:ce:5a:62:92:21:45:79:66:72:07:4b:ad:73:
5a:8e:78:a3:a8:ce:bc:ca:96:44:49:95:c7:c0:b2:f0:12:b4:
d4:ab:57:68:99:bf:3b:a5:91:93:48:a3:ab:2d:89:14:76:97:
fa:1c:99:d5:1e:59:9b:dd:f2:b0:fb:20:71:e1:1e:f3:36:c8:
44:e7:92:0e:8f:53:07:85:25:d6:16:ab:a2:38:a4:78:35:56:
ef:56:55:1e:0a:eb:e2:3f:32:53:79:50:f7:b6:72:a1:86:60:
6c:3a:78:2d:84:cf:e9:3e:6f:35:6c:b9:12:e6:aa:6a:21:07:
03:a5:57:92:85:6d:6d:01:aa:72:1a:eb:da:e9:77:76:e3:65:
ac:e4:51:03:b0:55:28:9a:0f:4f:51:14:90:12:8a:6e:39:55:
f3:d4:d1:87:93:5a:c0:3b:55:5a:8d:e7:76:18:a2:fe:1e:7f:
fd:7d:33:33:43:d5:2d:1d:41:41:65:48:d4:2b:a6:8a:ba:43:
17:39:46:1d:66:99:23:b8:88:a2:2f:86:fb:98:1f:96:f5:a2:
36:2d:8b:45:a3:9c:3e:38:8e:5f:59:26:cd:ec:7b:10:8e:30:
3e:c4:67:a6:46:d9:33:6a:ef:85:8a:3d:34:ac:0c:13:e8:fd:
42:67:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:22 2026 by rpki-client