
$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier: uni5FUZCRXqauKdbGXH2xY+yypFVvC3wLmkEsAGrmQc=
Subject key identifier: B0:5D:11:84:15:1A:1D:CE:3E:93:67:CF:2F:08:90:8E:10:43:83:86
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial: 01BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number: 01B3
Signing time: Mon 11 May 2026 04:03:32 +0000
Manifest this update: Mon 11 May 2026 04:03:32 +0000
Manifest next update: Mon 18 May 2026 04:03:32 +0000
Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: V9PHGnT0yRDu3cka1/HAcg+fGgR0ynQoimKsKbB7yPo=)
2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: maTY8uJW9ok2Nd5jKcr1wzbCRMfOdEbNppY27f+QdBs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Validity
Not Before: May 11 04:03:32 2026 GMT
Not After : May 18 04:03:32 2026 GMT
Subject: CN=6a015514-c915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:b9:47:31:1a:88:5a:f2:23:a3:da:35:2a:
d7:4e:87:21:12:93:d1:9c:11:99:57:ed:a7:e2:6c:
ae:20:5e:86:ba:65:81:35:af:a3:36:93:b1:17:08:
38:5d:93:a2:6d:e8:f8:c6:66:ef:3e:f7:92:d5:42:
2d:e6:09:bb:f1:82:d2:9a:19:32:e9:53:87:da:9e:
82:d2:37:19:a4:87:58:4b:e5:7e:77:d7:16:c4:91:
ff:9b:a0:c1:e1:e6:4e:e2:94:82:27:99:bc:27:8b:
ed:de:d6:22:70:81:0e:cc:6f:51:4d:75:6a:2a:e7:
fe:ec:1b:07:cc:42:87:73:6f:9e:aa:6e:06:3b:31:
84:0b:b4:4a:64:f8:ba:6e:c1:59:9f:11:09:ab:f5:
e8:14:6e:4f:b9:bf:b3:9c:b8:55:38:99:49:ac:b0:
87:0c:c7:32:08:61:fa:bf:7b:de:83:cf:b0:48:a7:
e6:16:db:53:d2:a6:b5:6d:63:52:33:ea:7b:76:cb:
92:d6:3c:c9:5c:a0:5a:79:a8:76:e1:8a:9b:99:a7:
f5:cc:8e:6d:07:f6:07:a7:c3:19:f3:ed:8f:5f:73:
d2:18:a0:60:c5:b6:e0:68:e9:1c:8e:89:03:1b:f6:
5a:d0:42:5a:dd:1b:28:69:af:52:2e:ac:33:c8:23:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5D:11:84:15:1A:1D:CE:3E:93:67:CF:2F:08:90:8E:10:43:83:86
X509v3 Authority Key Identifier:
keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:d6:4f:dd:c8:39:d0:4d:39:08:aa:02:a2:5e:99:a7:f0:
16:d3:cc:b4:80:b1:81:af:d3:cc:ad:b3:5f:f0:fb:61:b9:4c:
e5:d7:ed:6a:5f:42:83:0f:41:c3:29:28:3c:52:54:7b:79:99:
1a:c4:31:1d:14:de:49:30:cc:ef:45:75:97:66:96:c7:7e:57:
bd:34:0b:c4:32:8c:d5:4e:fa:96:3d:e3:77:ce:e3:2c:bf:52:
57:bd:ac:1f:41:63:bb:7e:e5:9a:82:a8:7f:b1:16:aa:91:18:
88:0c:81:0e:62:d5:5f:b2:f8:aa:6c:02:14:7e:7a:c0:a7:23:
e5:7e:3e:eb:d5:50:ef:b9:1a:da:ef:27:3d:be:1d:75:8b:7a:
c4:9a:d0:1f:63:6f:79:01:1a:d1:a1:f8:63:fd:74:0b:41:4d:
58:14:0a:c8:6d:03:a7:38:d3:57:72:1b:66:cb:65:02:1c:d5:
cd:9d:65:20:d6:be:4e:48:a0:6d:d0:05:dc:bd:6e:82:c1:80:
1b:66:3b:97:52:7f:0f:eb:f0:df:52:47:8c:2d:b2:3d:37:7a:
2e:c0:00:07:4e:5a:b9:5a:a3:5a:99:d4:9c:2d:0e:c8:cb:5f:
28:9e:29:1b:3f:5f:fd:7f:04:6a:70:18:a5:5c:aa:15:fe:d1:
ab:a3:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:31 2026 by rpki-client