
$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
File: szF8Z90Vsor6OYAEwZ0deLG_3oY.mft (raw, json)
Hash identifier: qYkCFU+C1hVOBdAExrumMI3/AwGWTbnGkoshHjvd8YQ=
Subject key identifier: 4B:E1:E1:13:64:A1:9E:34:91:29:6B:98:11:AA:88:B2:B3:0D:73:7A
Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86
Certificate issuer: /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
Manifest number: 47
Signing time: Wed 13 May 2026 08:31:04 +0000
Manifest this update: Wed 13 May 2026 08:31:04 +0000
Manifest next update: Wed 20 May 2026 08:31:04 +0000
Files and hashes: 1: szF8Z90Vsor6OYAEwZ0deLG_3oY.crl (hash: 0HBwZ7REqd178nLMgjywTVUA44y7QZtc/CWzohWlswI=)
2: DF325558E6EE11F09FA64894636F56BC.roa (hash: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl
rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86
Validity
Not Before: May 13 08:31:04 2026 GMT
Not After : May 20 08:31:04 2026 GMT
Subject: CN=6a0436c8-7eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:42:92:47:35:d5:41:91:9b:db:fa:57:59:
24:85:90:f2:8e:da:ea:67:f3:15:57:cf:bc:b4:e9:
26:2c:ab:23:39:42:de:57:dc:27:01:50:d4:46:39:
d8:4b:18:0a:41:8b:88:91:a1:62:11:0d:79:d4:81:
87:0e:65:59:74:e4:1d:cc:0f:8a:e2:61:f6:4b:7e:
a7:29:c3:be:d0:7a:52:35:eb:90:c9:55:82:ac:8a:
c7:64:aa:83:50:8a:e7:e8:33:19:cb:a0:25:b9:19:
6e:87:7e:8d:0d:52:50:31:3b:b7:a6:0a:fa:2e:b9:
b8:bf:ee:df:fd:8a:4d:fa:43:e8:e2:15:c5:e5:1e:
c4:d7:5c:8d:ef:38:f4:26:97:9e:5b:76:f3:dd:04:
51:64:3c:40:0b:a1:c0:54:b6:db:36:66:2a:d7:6f:
fa:4a:f2:dc:5d:95:5b:ce:eb:57:61:18:0e:ee:84:
df:76:b7:70:11:d4:ad:a6:6a:47:59:df:c3:1d:22:
03:ef:00:32:24:a4:d5:0c:50:17:76:2e:ed:f8:b0:
81:60:17:e6:02:5d:47:07:f5:c9:d3:ee:12:1f:7e:
67:94:69:96:a9:a3:17:3f:75:73:a8:27:0a:07:09:
2c:0c:b3:ea:7a:13:36:e2:db:85:87:52:0e:83:a5:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:E1:13:64:A1:9E:34:91:29:6B:98:11:AA:88:B2:B3:0D:73:7A
X509v3 Authority Key Identifier:
keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:77:1c:92:ab:3f:08:c5:e8:11:a6:54:a4:c7:d9:0c:dc:ea:
da:a4:2c:10:32:cd:5b:eb:cb:15:b2:90:7d:f0:93:e0:6f:63:
c7:99:e0:d3:e8:9a:59:4c:37:0b:13:65:09:3d:30:48:59:bb:
76:61:80:aa:15:8b:d4:6a:ed:83:c6:9c:c1:da:d4:05:0b:21:
6e:53:66:de:83:d5:df:a2:ce:2a:25:bb:d3:f9:18:40:4b:59:
2f:43:ae:b8:88:22:26:ae:21:40:4e:12:37:79:0b:0b:08:85:
04:ee:c8:ed:a8:3f:c9:07:ad:1c:7e:3e:6e:f7:55:6c:26:1e:
38:ed:33:1c:68:4e:5b:60:58:91:ea:00:18:33:f3:3c:ad:81:
9a:b3:1e:9b:e9:e2:43:17:72:08:ab:a3:d7:43:27:fb:fe:11:
46:bc:aa:80:2a:95:f0:15:a4:3a:70:d2:2d:d0:8d:a5:4e:d9:
6d:c6:6c:64:77:40:5a:68:19:6f:8e:ee:52:d9:47:a1:fa:b5:
83:f3:a1:49:89:7f:c6:b5:a3:0b:fd:a0:af:19:ca:8a:18:ed:
13:2c:80:7b:ce:a6:a7:c6:fa:95:40:9d:10:3a:7e:33:90:f5:
63:8f:71:2d:8a:42:0e:95:99:bf:ed:02:be:01:a7:17:2a:33:
9b:e8:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:55 2026 by rpki-client