
$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json)
Hash identifier: Wyvg9dR2BYCGOqO55MMrR7Y6WxPZaxNFTbnJNJof6FI=
Subject key identifier: AF:F9:57:C6:CF:74:3D:A2:DA:55:CE:E1:6A:CF:4B:57:2E:16:56:FB
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial: 08E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
Manifest number: 0891
Signing time: Tue 12 May 2026 20:57:57 +0000
Manifest this update: Tue 12 May 2026 20:57:56 +0000
Manifest next update: Tue 19 May 2026 20:57:56 +0000
Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: 9CYDz/nGHv9ddxfix9QR4DVWuYSmDmzO94QNiUZdGHY=)
2: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: +7lOcEWjzdH/XplyA+gRPVuruxEgb/MpWHfUAeK3/gQ=)
3: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: izTNp/JGEMDm9FjJb1Cp+fcuTZ2LOC/hwPNrIFeFyK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2278 (0x8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Validity
Not Before: May 12 20:57:56 2026 GMT
Not After : May 19 20:57:56 2026 GMT
Subject: CN=6a039455-cc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:56:3e:40:a2:ca:53:da:10:62:52:7d:26:f4:
0f:d3:c5:6b:d0:9f:a2:23:bd:24:21:d0:e7:44:d8:
58:2e:32:16:cd:9d:07:79:a5:6a:99:ec:34:d7:61:
57:5f:d7:ea:fd:a3:c3:d3:31:64:6d:b0:08:7a:43:
7c:c3:59:29:47:54:f3:53:8b:66:f2:97:03:b2:85:
45:93:28:12:7c:49:c8:9c:fc:aa:c4:da:98:17:16:
2a:c5:78:c8:bf:37:a5:7d:bc:e5:a2:f9:9d:c9:20:
70:a7:ce:75:21:bc:2d:5d:6d:cf:70:64:76:cb:44:
68:20:23:15:24:b8:4d:80:8c:03:0a:6d:a6:3a:64:
2d:62:25:6a:8d:37:d0:a1:d5:6d:02:62:f4:bc:14:
aa:6e:c2:52:fd:1b:b8:81:d6:22:3c:0a:fa:0f:21:
a9:3c:55:0f:f8:30:d2:63:a5:29:94:7d:dc:53:15:
04:65:e3:a9:ef:47:8a:ee:83:41:d8:94:31:49:5c:
8d:f0:94:33:12:d5:a0:67:aa:3a:3d:18:cf:8b:11:
34:6c:7a:55:57:40:70:2f:53:86:df:f1:27:61:34:
ca:40:82:71:30:51:21:7d:5c:db:fa:d2:bc:d8:71:
c3:c5:30:16:0a:b9:47:f1:47:a7:d3:56:c1:04:6b:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:57:C6:CF:74:3D:A2:DA:55:CE:E1:6A:CF:4B:57:2E:16:56:FB
X509v3 Authority Key Identifier:
keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:94:bc:07:0e:a2:e7:57:81:9b:ca:20:bc:d2:f1:1d:b4:b9:
b0:87:6e:0d:0d:38:a2:80:8f:cd:45:c2:1b:e0:43:1b:f1:d8:
39:01:8d:45:dd:9f:5e:74:9f:9f:e1:62:5c:ad:fb:03:e2:6b:
24:6f:ee:11:4d:db:4c:e3:f1:7c:0f:d9:97:ce:9e:dc:79:57:
cd:77:73:e5:c8:26:79:46:7b:09:d8:35:61:52:c1:6c:d7:f5:
7d:48:27:09:ac:4d:8c:13:02:bc:99:1e:9c:29:ab:0d:79:a3:
71:93:59:29:87:8c:e1:33:1a:d5:91:f8:6f:ee:13:38:59:d3:
06:61:bb:ef:63:6d:26:66:4d:62:a2:5c:e5:60:45:9a:c2:30:
19:ca:70:45:8c:72:cd:41:99:a5:2e:43:7c:3c:03:37:61:8b:
19:6e:bd:64:10:1a:7c:e2:e4:f7:b6:08:3e:3f:bf:31:ae:97:
a2:2b:08:53:93:ab:0f:a2:b8:13:91:10:42:0b:3e:92:84:a9:
d5:60:0b:77:72:d5:87:e3:13:35:c8:f6:f8:1a:f5:c3:6f:53:
84:9a:70:3d:3c:4b:a8:62:2f:a2:a5:96:33:7a:16:1e:36:3a:
96:25:c1:87:ee:30:6b:ea:44:dc:4d:6f:c8:25:f2:6e:c3:45:
46:9e:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:18 2026 by rpki-client