
$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File: tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier: 9cNYGgCRgktrPs3P+t6ULmWuEX5N+H4mvuXoCItY4AE=
Subject key identifier: B8:29:D6:FA:27:1B:40:B4:DD:BE:40:00:1A:71:A7:AC:10:7E:F3:99
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer: /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial: 15C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number: 158A
Signing time: Tue 12 May 2026 16:48:10 +0000
Manifest this update: Tue 12 May 2026 16:48:10 +0000
Manifest next update: Tue 19 May 2026 16:48:10 +0000
Files and hashes: 1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: 2aGjdGeFuvkm5FETZzajQpBWT7/sc5GaEYBqjc38KNY=)
2: E944914AF0F111E999D61615C4F9AE02.roa (hash: c2ADsvP/ue89PrwzdfQ8AIFJq77Uj0DDTO3n+w1NTsw=)
3: 81DC5974F86611F0A7041971496F56BC.roa (hash: ssQ9BW5dy2boBuORT5QxuakKe2D1nievijkZGHdu+Es=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5571 (0x15c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Validity
Not Before: May 12 16:48:10 2026 GMT
Not After : May 19 16:48:10 2026 GMT
Subject: CN=6a0359ca-14f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:e0:24:6d:e9:6c:a9:bb:b5:f9:e3:7b:f0:
0b:7e:b3:b8:61:e7:57:13:07:d7:4b:d0:8c:0f:29:
90:a5:c3:72:ed:7a:bb:18:30:a6:57:01:aa:0e:a9:
c3:ec:59:81:f2:06:7d:3f:f0:38:7d:26:7c:73:f1:
d4:5c:eb:20:4e:ce:10:c0:13:bf:d3:9c:cd:ae:bb:
04:b3:50:db:16:c2:a2:1d:7e:01:52:4f:23:27:7b:
73:d5:98:a1:18:42:70:f3:e5:e2:10:90:73:10:bc:
2f:0b:45:94:17:f8:1d:94:6a:17:6b:bb:ec:1a:c2:
44:2c:36:9a:8d:5f:ed:2b:44:5e:24:55:0c:30:4f:
cd:9c:b0:d3:c4:26:f5:bf:ed:cd:52:ae:23:f0:f1:
fa:e3:6a:c4:33:8c:4a:97:d0:fd:5d:2b:b3:d6:3d:
7a:cd:34:fa:e9:cd:5e:20:60:b6:42:10:c2:7b:ee:
93:58:25:70:ef:c0:7f:f6:68:01:49:6b:71:38:4f:
06:40:38:a9:dc:51:50:bc:25:b7:14:d2:8e:50:46:
02:e6:3e:fa:f3:b1:55:07:e9:ba:31:7b:6e:14:80:
ba:ed:5f:d2:12:6d:61:c0:1f:64:df:6e:1d:82:1b:
bf:a7:09:c6:c4:8e:3c:03:57:b2:8b:61:29:99:d3:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:D6:FA:27:1B:40:B4:DD:BE:40:00:1A:71:A7:AC:10:7E:F3:99
X509v3 Authority Key Identifier:
keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:12:18:e8:71:14:3d:0f:f9:83:da:ae:d3:0c:28:12:92:49:
32:f7:ee:c8:ce:37:3a:c7:e0:ac:7c:23:74:40:45:fb:35:94:
21:1b:db:2f:df:d0:7b:db:7f:2b:e0:48:36:22:4e:7b:a1:5b:
ac:bd:0c:82:13:e2:72:f0:34:79:7e:67:d1:90:b0:15:52:d7:
80:14:67:d4:de:5c:b3:52:30:99:fb:52:bc:e5:4c:68:0c:23:
ad:2e:73:f9:a1:43:11:92:53:dd:07:de:a1:d1:9a:1b:a5:77:
67:83:fc:fc:84:e1:6e:00:84:94:62:b4:c1:7e:a6:af:3e:6c:
cc:fa:dc:0e:d5:46:cf:7d:52:33:0f:31:e0:73:78:e5:69:0d:
50:bf:cb:57:7f:81:5b:ab:42:fa:f8:e5:54:28:32:65:f7:d2:
4d:dd:c8:f0:61:da:c7:03:f3:da:c3:50:09:60:d0:59:5d:84:
68:4a:57:ee:26:ab:7e:aa:df:cb:44:6d:00:0b:5a:40:eb:83:
1b:8e:67:3a:eb:79:6e:a3:5e:76:64:68:67:d3:cc:e0:d0:23:
db:e9:f1:26:5f:e8:f0:2f:89:61:7d:8f:6a:6d:68:77:c3:cc:
81:6f:03:96:2a:74:8e:60:05:76:ab:22:17:b5:90:d9:96:84:
8c:49:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:53 2026 by rpki-client