
$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json)
Hash identifier: XMHqun6dhw5M36aKcTwPzd6i3++2W1PXmS5ZKe4SveQ=
Subject key identifier: F8:E6:B3:81:11:3D:DC:8F:78:68:92:08:23:5F:E0:D2:C3:13:C6:59
Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36
Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236
Certificate serial: 1239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
Manifest number: 1230
Signing time: Tue 12 May 2026 17:08:47 +0000
Manifest this update: Tue 12 May 2026 17:08:46 +0000
Manifest next update: Tue 19 May 2026 17:08:46 +0000
Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: 0uYRA6fHF9VdFyK/sQZYDXCgZMEA7eV1v21wBVpQi90=)
2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: VX0mY2WD7ZljHbXizsuob/HBTfQ0LiFuSS4MaL/xmKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl
rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4665 (0x1239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236
Validity
Not Before: May 12 17:08:46 2026 GMT
Not After : May 19 17:08:46 2026 GMT
Subject: CN=6a035e9f-301b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:18:ab:5c:2c:5e:5a:83:34:e3:bf:db:a9:
6f:0f:06:2f:f3:4b:f5:44:f0:33:a2:ad:a0:b0:28:
87:50:f6:2b:d1:ab:42:14:90:5a:3d:55:78:14:b3:
cf:e0:0b:b9:8c:7d:e0:65:83:f5:a3:f3:bd:c9:93:
d5:47:3a:ee:91:f0:13:a8:2c:bf:18:9d:5e:70:14:
b4:1f:50:47:24:59:5f:1d:44:63:8c:a8:5c:31:0d:
6e:09:75:d1:90:ec:da:32:55:48:0d:a1:98:bb:6d:
19:b1:9f:70:71:9a:4d:fb:d5:a6:fd:9a:16:a9:7a:
0e:2c:ef:7c:f3:a2:df:0e:01:5d:29:25:6d:c0:2a:
fb:1e:64:ea:a7:e5:9d:71:bc:05:c0:c5:2e:cd:6d:
4b:4c:16:b7:2b:02:f0:a0:a0:84:91:51:61:05:9b:
10:ca:02:cb:20:07:80:6d:37:b2:5c:1f:54:0a:89:
2c:f7:88:7c:41:d1:fe:49:e8:a6:18:b1:a3:59:51:
d9:04:f5:fc:7d:22:fb:4b:ef:5f:63:fd:dc:ac:de:
8a:d9:58:e7:78:e9:ef:17:4d:cf:ec:80:37:df:f0:
62:aa:04:96:a4:f8:b5:f5:d4:95:24:08:99:66:13:
59:29:f7:50:e2:1a:26:e0:de:7b:4d:fe:25:be:36:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E6:B3:81:11:3D:DC:8F:78:68:92:08:23:5F:E0:D2:C3:13:C6:59
X509v3 Authority Key Identifier:
keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7a:bc:1a:33:c4:3a:d5:2a:61:b4:ab:a8:90:c2:cb:88:f1:
b7:cd:2e:23:ff:45:8e:c2:79:e1:28:b0:4c:f5:09:52:4c:63:
c3:0b:2d:35:e1:e8:f8:1b:59:b6:80:35:72:9e:c9:03:f1:f2:
fc:2a:f5:76:08:99:b2:55:33:2e:89:55:76:01:60:8a:2e:a3:
48:12:63:c7:87:67:34:ab:61:0f:09:d9:76:11:64:c2:57:8c:
6b:90:4e:b8:06:01:42:a3:0f:1d:a9:4e:33:8d:13:66:59:b1:
e4:3b:5d:36:2a:ca:d9:2e:1f:61:40:70:9f:42:58:5f:90:06:
35:d2:f5:4c:67:bb:b8:90:c2:7b:2d:be:2e:17:9e:86:af:3c:
24:c7:6b:71:9b:c0:05:18:56:ac:6b:7a:9f:d4:86:03:f5:1b:
80:6c:f4:d3:0b:82:97:1d:b8:8f:e7:94:04:83:b3:0e:44:59:
0e:7e:1b:06:1f:a2:a4:19:f7:d7:a1:9a:34:8b:79:e0:12:e4:
db:1b:70:c6:c7:f3:5f:3d:d2:18:0d:fc:23:2e:1d:7f:5d:b3:
5a:d6:51:f3:11:74:c5:8a:31:d4:6e:4d:5b:13:5f:db:e4:b8:
c2:35:03:ab:6a:a5:bd:1f:1a:12:0a:23:37:2a:9d:7d:a0:9d:
51:e5:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:28:05 2026 by rpki-client