
$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json)
Hash identifier: h6QbO8Eu40ylT1CUEAtf/+m6D7i2hk61b+l5geQ56GM=
Subject key identifier: 0D:32:D6:3A:6C:65:F3:98:07:E6:DB:42:0A:FE:CB:96:A5:F1:32:D0
Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Certificate serial: 189A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
Manifest number: 1891
Signing time: Tue 12 May 2026 16:29:56 +0000
Manifest this update: Tue 12 May 2026 16:29:56 +0000
Manifest next update: Tue 19 May 2026 16:29:56 +0000
Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: 9Q/abrA8XaTtAGzXpVd/Ihqot+y3jS6jFZiwMg2Et+4=)
2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: l5RtQonTXNSBGH8zDtmLZh3WC3KxiK5dhZgCVOyckgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6298 (0x189a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Validity
Not Before: May 12 16:29:56 2026 GMT
Not After : May 19 16:29:56 2026 GMT
Subject: CN=6a035584-cea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:54:24:ed:cc:6d:9b:0b:02:b4:66:bf:5d:28:
f0:a0:d6:64:55:d8:64:44:fa:80:6b:65:0a:30:6e:
5b:e4:4d:4e:3e:b9:20:3e:0f:b6:9a:f8:4e:00:4b:
c4:ee:df:9a:1c:81:ea:1b:cf:16:48:1b:ce:7c:39:
ab:3a:a2:6c:b5:1f:54:59:a5:d3:37:3c:21:ca:6f:
32:29:68:f3:32:7c:df:46:9c:d1:80:04:9d:74:54:
02:33:7e:a6:67:d2:d7:76:fc:7d:7a:65:e6:63:47:
33:c9:29:ed:22:8a:77:ba:d4:81:56:6c:9c:6a:36:
de:bf:5a:7e:f2:f2:93:83:f0:fe:38:cd:51:23:c7:
10:1a:86:f7:d3:1c:7a:b1:7f:06:b6:e1:cf:03:b6:
8b:84:8d:40:7b:6c:09:d2:e8:11:55:2a:da:ee:a2:
26:53:e6:3a:f4:11:90:46:e3:61:3d:b9:af:9e:c1:
1e:18:85:07:82:71:b2:57:a9:9e:f6:3e:3c:5b:bb:
ae:e5:40:ee:28:87:d1:a5:02:59:b9:31:4f:d6:c1:
8c:29:66:d6:9c:23:0a:5d:2f:72:e7:81:60:86:13:
c9:80:41:5d:48:9c:d8:1b:f6:8c:e4:db:44:d1:2a:
f5:ce:ba:df:a3:72:05:d3:81:5e:15:10:b5:36:b0:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:32:D6:3A:6C:65:F3:98:07:E6:DB:42:0A:FE:CB:96:A5:F1:32:D0
X509v3 Authority Key Identifier:
keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:29:20:c5:a7:5c:77:c1:2a:f9:f4:35:07:cc:8a:26:0b:c8:
48:a4:28:34:8d:de:c7:4d:ed:35:77:0b:4e:a5:c3:48:b0:b8:
86:f9:cf:cf:50:48:ad:34:9a:7c:df:56:04:f4:40:a9:c1:50:
a4:bb:31:99:a7:f8:68:85:08:5d:7d:7c:db:39:01:f2:78:a9:
4d:80:ec:3c:3a:76:78:3b:c0:df:e6:d7:54:eb:26:51:90:53:
f3:39:46:89:4e:02:df:3c:a5:17:98:3f:39:77:d6:25:ff:cc:
6b:f0:f8:5c:10:3a:20:2f:f4:a1:d4:ee:9d:2d:1b:37:6a:6c:
01:66:5e:7d:e1:f0:c7:e8:09:2d:ae:27:f4:b5:5b:55:bb:13:
b4:29:ae:c8:ad:50:15:b5:b7:f0:7b:7d:73:ba:5b:74:54:a8:
16:52:cf:20:57:85:78:3c:d2:52:ca:91:e2:f2:4d:64:5b:98:
59:d4:c7:ef:2d:23:4b:31:94:e3:d3:13:db:d7:0f:1e:50:6d:
3f:27:dd:20:68:09:ec:83:b4:9c:b8:d9:f3:8c:10:50:3f:b5:
07:ef:12:e2:f9:82:0e:a0:f3:00:a3:80:ef:97:57:10:f4:a3:
20:8f:36:0d:1c:ce:27:d9:5b:7b:e1:37:47:e3:51:55:9b:db:
aa:f0:33:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:07 2026 by rpki-client