
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json)
Hash identifier: SnmlqWwXR+gl7jbneuA30bIXAqYSSQ/EKtNuDe1fbvY=
Subject key identifier: 7B:90:44:8C:BC:47:0D:B8:DE:86:60:85:7F:FB:79:15:F5:BC:33:07
Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Certificate serial: 5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
Manifest number: 5A
Signing time: Mon 11 May 2026 08:17:52 +0000
Manifest this update: Mon 11 May 2026 08:17:52 +0000
Manifest next update: Mon 18 May 2026 08:17:52 +0000
Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: tXxRNUjdSLSVl9Db/xe201q0MkD8lOzRQ/MeffK3xW0=)
2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Validity
Not Before: May 11 08:17:52 2026 GMT
Not After : May 18 08:17:52 2026 GMT
Subject: CN=6a0190b0-451c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:8c:84:af:52:80:7b:c8:75:47:cc:3b:ec:
1c:dc:f3:b9:8d:e2:5a:c6:9e:4d:5c:87:7c:17:d8:
e4:73:8f:38:af:7a:b0:3a:dd:e3:93:c3:07:21:bf:
6d:74:8a:0c:be:4a:92:e4:c1:dc:2a:c8:d6:13:fe:
5e:64:5c:61:2f:be:0c:33:3d:3e:a2:36:d7:8a:a8:
93:fc:42:6c:19:61:18:9c:7c:41:18:4f:de:ac:2c:
ee:1d:19:25:14:31:8f:5f:98:f8:7b:b9:6b:2e:77:
5b:7a:8c:bc:22:e0:38:db:5a:83:b4:a4:a5:8c:7d:
22:2a:5f:cb:6d:47:c3:68:9f:11:67:48:44:fb:d9:
06:26:f6:02:b1:c8:2c:6e:7b:d0:ee:71:23:f4:06:
1b:7d:b6:29:8c:f2:09:32:81:37:8f:9e:7f:ee:75:
d7:a9:cb:ac:46:64:14:ff:f1:e9:ac:8f:92:a4:57:
f1:bf:13:1a:dd:d8:36:16:57:22:66:76:f6:49:42:
69:c2:f4:21:ab:18:26:ec:f2:4d:6f:02:0f:a3:da:
b7:2a:9d:ab:b2:49:e4:f8:8f:84:e6:e5:8a:a4:06:
c2:07:3c:f0:ed:af:bc:4e:cf:8a:0c:fc:d0:f1:bc:
a5:a9:d4:db:5e:4e:33:78:f4:19:2d:ce:51:e0:42:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:90:44:8C:BC:47:0D:B8:DE:86:60:85:7F:FB:79:15:F5:BC:33:07
X509v3 Authority Key Identifier:
keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:e4:5b:4d:df:23:08:6e:34:18:d2:47:86:75:f0:1c:ba:c6:
6e:b3:ba:4a:91:fd:75:53:83:2e:3e:5f:f8:3e:57:48:da:75:
25:fc:2a:5a:2f:8f:cd:d5:ea:1a:db:89:08:be:9c:72:51:6d:
d4:bf:fe:52:cf:c3:f1:34:92:f8:74:2e:62:94:f6:c6:04:61:
cb:97:a6:d3:ad:83:d4:3d:ac:9b:af:02:a3:f1:b6:63:08:bf:
56:55:3c:aa:75:84:13:d4:a1:ce:88:d9:45:f8:d5:57:9f:aa:
73:c2:68:62:de:e8:d9:88:7b:e5:d7:a4:1a:28:00:dd:e8:86:
22:49:f4:58:20:b5:16:5e:f6:be:94:f4:1b:8b:7c:57:9a:9d:
28:e2:cf:ab:29:44:47:11:ce:17:67:12:a8:4d:46:79:15:a2:
0a:b7:63:f0:9e:cc:37:a4:42:83:ae:92:0b:34:a2:e2:3d:58:
41:cb:0d:e8:4e:1c:3b:94:1c:e8:7a:c0:8c:c5:47:7c:33:13:
7e:44:11:13:44:da:90:29:e1:a5:d7:b5:37:f2:db:1b:dc:b8:
c5:09:b7:e2:99:bd:d5:a9:37:e5:1f:cb:bf:ca:73:2f:f9:db:
45:a7:f1:3b:c7:34:39:43:33:d8:41:52:22:a4:0d:10:39:4e:
26:7f:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:47 2026 by rpki-client