
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier: 0YEeg+Msl5skenvW9hBsykW+8wQzfWHMS2E4hrJKXRA=
Subject key identifier: A4:36:9E:E6:0E:72:60:9D:FA:A4:B7:72:45:22:C0:4B:F2:EF:B0:A1
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 05C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number: 0594
Signing time: Tue 12 May 2026 23:27:23 +0000
Manifest this update: Tue 12 May 2026 23:27:23 +0000
Manifest next update: Tue 19 May 2026 23:27:23 +0000
Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: tkr6CUqCgJdDdKUrzcZpeq04DxzEEHYmhJ8uXcysWP0=)
2: FBBECF1A694111F08D368069C4F9AE02.roa (hash: HO1DGtNQx+OH3SloGIt02Rz1EoCoy8/3rF9m0kcImEQ=)
3: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=)
4: 53B4619407CB11F19B0357131B3D8C67.roa (hash: FE2rPrjsmUgohHBi/GpAcZVW0Hos/Z/JQQ5dDQAETOY=)
5: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: Q6qYKHjV9NmhmzxqH8ayk30H8rtTg6j37bugDkJvn/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1474 (0x5c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: May 12 23:27:23 2026 GMT
Not After : May 19 23:27:23 2026 GMT
Subject: CN=6a03b75b-4133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:b7:8f:37:f2:39:b2:b2:ea:a7:ea:6e:d9:
4f:f4:de:f3:a7:39:97:69:d3:e0:4a:b7:6c:33:9c:
55:1c:62:61:c6:a5:b1:3a:34:c7:a1:bb:9e:c6:27:
17:a4:f9:ca:3c:30:55:d2:41:34:2d:d7:a9:f0:70:
43:2c:1b:96:d4:a5:77:b2:1e:40:fe:e4:34:87:68:
34:3b:ee:e5:84:16:74:e0:d7:62:ee:f8:d2:52:6e:
32:cb:c3:84:32:35:42:90:93:bc:9a:cd:a9:16:78:
96:22:4a:29:37:69:8b:92:0f:c3:55:17:4b:0a:8d:
15:bc:c8:e2:62:81:80:aa:6c:f1:59:8d:ef:63:16:
ee:ad:47:54:af:7d:89:d9:a6:0f:28:d4:32:7e:9b:
02:12:b0:d3:ab:7b:80:25:c4:e5:33:b7:0e:41:a2:
70:aa:0d:6f:8a:a2:86:a5:f2:60:f3:68:71:15:79:
fa:3c:14:16:5f:e4:74:ce:fb:08:59:7b:bc:78:94:
4d:f3:2d:2b:f0:7c:49:6c:ff:f8:70:bd:b9:b5:b1:
f3:d9:dd:64:4a:ee:9f:e7:e5:a9:00:53:19:11:a1:
4a:71:d0:d8:42:98:0b:b2:46:6d:84:34:5c:7a:6b:
b4:27:24:88:4e:c1:9c:5f:8d:fb:b2:85:4d:ae:5c:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:36:9E:E6:0E:72:60:9D:FA:A4:B7:72:45:22:C0:4B:F2:EF:B0:A1
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:3c:1f:bd:1c:07:92:07:66:e6:47:3b:54:16:6f:c8:cd:
47:26:06:a5:49:20:cd:66:46:7d:58:2c:55:85:f9:0f:50:91:
c5:41:23:b6:30:7a:24:76:49:a7:f9:29:ba:3b:c1:e8:06:7a:
4e:8d:ba:f2:ed:de:9f:c6:fe:01:df:2a:24:0c:69:33:de:8c:
27:0f:8c:bf:64:9e:01:8d:81:3b:94:75:2d:a4:b5:28:d6:44:
15:7f:33:0c:c6:9c:5c:c3:3e:22:e0:94:79:81:27:3f:01:f5:
23:95:02:57:b4:63:e0:df:a7:0d:b6:83:e8:f7:fb:bd:25:50:
cb:38:a7:f3:1f:ee:c3:ff:fe:f4:59:93:78:5b:d0:2b:ee:a9:
e0:d0:58:39:dd:63:1b:91:75:fe:17:58:2d:f4:4d:f8:5a:63:
f6:8b:ae:f4:cb:9e:a7:3f:5d:d6:90:ed:e8:af:82:bf:34:e7:
8b:b7:ed:28:89:23:b2:c5:cb:16:96:fa:c8:10:23:11:cb:88:
28:a9:36:c2:72:7c:6a:bf:e0:c7:03:e1:8b:ef:c6:7b:c7:3b:
19:3c:1a:3b:31:a7:8d:75:a1:3d:d1:c8:98:11:7b:f7:e1:91:
09:5b:65:dd:e6:7d:7d:06:79:14:47:72:f8:af:71:c7:3a:7f:
65:69:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:55 2026 by rpki-client