
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json)
Hash identifier: AiONAaBD5++L/crsUbNF5zxLMkoQ/s7Hd5qqTPo0+fk=
Subject key identifier: 59:77:1C:92:06:57:1C:8E:8B:4F:D7:42:5E:09:97:24:D0:62:41:C2
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 0512
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
Manifest number: 0502
Signing time: Tue 12 May 2026 23:50:23 +0000
Manifest this update: Tue 12 May 2026 23:50:22 +0000
Manifest next update: Tue 19 May 2026 23:50:22 +0000
Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: s9TUZdJprNstk2Ne+bFvk7fzLXZTUzwruzozyQtXiEE=)
2: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=)
3: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: May 12 23:50:22 2026 GMT
Not After : May 19 23:50:22 2026 GMT
Subject: CN=6a03bcbf-d887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:2a:66:62:ce:a2:2c:66:b0:b3:3f:e8:73:
d9:0e:46:af:e2:e7:6d:95:00:68:2a:31:4e:d8:7b:
16:f8:27:98:26:c3:72:8a:66:c0:91:85:04:b4:ab:
4f:ed:49:23:c1:ee:31:27:1f:c0:8b:74:58:ee:e8:
de:fb:e7:5d:99:ad:c4:61:73:ac:94:9a:ec:19:e7:
3b:cd:f7:60:a4:70:79:c6:59:ad:b1:c7:f5:90:25:
4a:39:ad:b9:c2:39:09:78:bd:cf:e3:d1:03:0f:d4:
42:a0:b1:98:7d:2a:4e:66:0f:97:03:76:14:c9:e5:
53:eb:e9:19:d9:73:bc:40:e9:8e:cd:6d:7b:12:a6:
68:06:cb:80:db:0b:92:81:d7:d8:23:26:c3:8d:0d:
20:7b:0d:48:65:75:7b:9f:61:46:1d:3e:f5:df:40:
7d:2d:a2:c9:4a:07:aa:72:0b:70:20:f8:c1:43:c3:
9c:8a:3f:6c:95:0b:be:a6:a5:b9:6c:09:f0:0e:98:
8a:0c:da:e9:2b:4f:e4:79:15:0d:30:9e:40:3a:07:
8a:5b:a5:00:34:22:68:53:b2:53:64:64:ec:f8:cf:
3e:de:81:a2:95:93:87:29:40:32:1b:ba:6d:3f:4f:
e0:05:77:9b:51:ed:ef:e5:04:e6:87:60:35:2f:01:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:77:1C:92:06:57:1C:8E:8B:4F:D7:42:5E:09:97:24:D0:62:41:C2
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:03:38:9b:44:c1:ce:ce:46:ff:88:16:51:31:a2:39:4f:0b:
31:e7:98:72:8c:3c:7b:f7:1a:26:12:9c:15:f1:53:1a:7e:0d:
a0:ba:9b:61:89:d6:f5:1e:fb:b6:07:8f:28:8d:fc:2a:eb:51:
39:2d:7a:25:66:97:e1:1c:b4:80:9b:d4:71:af:73:b8:e9:d9:
df:3f:ad:43:66:a8:6e:9d:b5:44:0c:b6:c9:70:9c:cf:73:84:
10:83:43:28:31:07:ca:e8:47:35:c4:92:56:a5:c7:d1:b7:d2:
7b:84:e8:7c:6c:dd:38:a3:10:fe:1e:56:17:08:1a:68:44:11:
e2:9c:05:09:0e:40:5f:43:13:20:83:1d:6d:64:e4:4c:94:d1:
f8:30:03:05:ca:c9:64:28:b3:11:74:12:99:01:dd:d2:4a:6b:
1c:d9:b6:82:8a:df:cd:10:64:f4:9e:2f:a7:1a:db:50:5c:85:
02:67:ba:4a:50:7b:76:8a:92:a7:8e:fb:68:86:f9:af:3f:fd:
f6:2f:10:88:8d:fb:18:df:56:6e:cd:bc:55:dd:25:c8:b7:3a:
af:60:0a:06:8f:bb:13:5d:ce:9c:c2:12:7c:d2:2e:39:ea:6e:
2e:71:b5:12:9d:41:13:d5:a4:38:b7:ae:43:a5:32:c2:77:86:
19:9c:68:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:42 2026 by rpki-client