
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json)
Hash identifier: 7PpQUTApg/3664yRPWxc1yv+JDsVA9nJFQsXNguLxLM=
Subject key identifier: 66:BE:0C:14:76:76:1A:70:E3:7A:B4:5D:E6:0F:52:84:9A:7F:9E:F1
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
Manifest number: 0255
Signing time: Wed 13 May 2026 02:23:47 +0000
Manifest this update: Wed 13 May 2026 02:23:47 +0000
Manifest next update: Wed 20 May 2026 02:23:47 +0000
Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: 9AaRiLSAu3ssXeGUHDG1i3PW2gcCm+w08eF37wW9t+4=)
2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: P3ej5XFQlJcMQQxLttfvW/K/Ryt5xBSLQ4egcs4pQwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Validity
Not Before: May 13 02:23:47 2026 GMT
Not After : May 20 02:23:47 2026 GMT
Subject: CN=6a03e0b3-679d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:8b:d0:b2:91:26:61:78:49:7c:5a:c6:66:
50:3c:ec:49:90:83:43:3c:7a:03:e0:18:d8:17:17:
b9:c2:6e:f8:cb:a1:23:f3:ea:ca:8c:e1:83:04:30:
8c:fb:4f:ad:57:cf:0e:ea:fd:63:32:65:4e:f2:ca:
c4:8e:cc:1b:94:02:90:67:ed:a6:02:c3:6c:98:79:
c5:6e:97:e6:fd:6f:19:dc:0b:8e:ea:93:d9:d5:aa:
db:67:61:18:91:30:54:0e:bd:46:60:8b:b0:b1:46:
79:ab:94:6d:44:15:94:f1:89:e4:d8:59:7e:ff:07:
e6:12:80:f4:8b:6a:6a:67:0e:bd:b5:70:cf:32:a3:
df:1c:a8:e6:6d:50:89:60:07:45:e1:90:6d:9f:ac:
6d:27:5e:f3:08:eb:9c:b3:da:09:2c:28:f3:ba:c6:
e5:45:3d:a5:01:f6:c0:d3:28:32:13:1b:8f:f4:b4:
69:d3:ca:d1:ad:38:c3:d0:8b:13:4e:0f:98:7e:ca:
b6:52:c2:14:34:01:24:81:7e:b9:ca:4c:8e:17:4e:
6e:b4:a5:7c:e0:a1:7d:ba:58:d6:ea:94:3c:30:38:
bb:fb:17:70:54:04:81:e0:09:9b:1b:bc:c6:d3:0a:
86:84:82:43:8b:3e:88:31:43:f8:73:ec:c1:5e:4e:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:0C:14:76:76:1A:70:E3:7A:B4:5D:E6:0F:52:84:9A:7F:9E:F1
X509v3 Authority Key Identifier:
keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ed:75:84:81:48:90:93:f0:fd:aa:67:ba:92:cb:29:f7:a1:
57:db:6c:db:61:45:06:5f:ae:8e:c8:4b:0d:1e:b6:17:3b:a8:
36:60:ee:f5:7d:fe:04:7d:f6:74:6d:f3:02:87:19:11:dd:1e:
87:be:8e:cc:e1:4d:f5:e3:42:0e:ea:cc:fc:84:8a:47:d8:9c:
c0:e5:8f:29:65:cd:e7:4a:e7:62:ea:3a:86:21:3c:13:93:c6:
05:47:b9:5d:4f:b0:33:6e:a8:b2:00:a8:7a:e0:00:bd:9e:c2:
4f:52:b9:c4:c1:f7:99:62:54:26:65:26:73:66:5b:4d:69:eb:
a3:40:08:f5:37:dc:48:23:de:1a:0d:1e:d6:63:aa:f9:b7:2b:
d4:06:d1:29:b5:85:09:05:e2:eb:d2:25:78:a6:d7:e3:05:31:
3f:8d:51:1d:43:b1:1a:ab:64:9f:60:a0:b7:93:6f:7d:44:fd:
2f:d6:3d:3e:85:01:26:d8:cd:fe:d0:5e:19:f8:9e:80:df:2c:
92:41:37:83:c7:3e:ac:1a:b9:76:5d:bb:a6:95:fd:bf:a1:0c:
8c:85:43:e1:ba:70:ea:4f:b2:9f:cb:51:48:de:09:76:8b:81:
db:81:b2:2d:e5:11:b3:22:78:de:cb:ec:d3:be:a8:d2:ce:cb:
58:5e:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:56 2026 by rpki-client