
$ rpki-client -vvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File: cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier: qbek5YmWk6QbWKsMGI06zEzFkg4vr1vkFT0jJWTvM0I=
Subject key identifier: 43:11:3E:95:14:BF:01:F9:9D:D0:F2:7B:D1:EF:E7:F9:22:BC:5B:1F
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer: /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number: 1B
Signing time: Mon 11 May 2026 09:08:46 +0000
Manifest this update: Mon 11 May 2026 09:08:45 +0000
Manifest next update: Mon 18 May 2026 09:08:45 +0000
Files and hashes: 1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: wagQDbsbFhguTLvqvSwPYR8rwR6c4iotZGITvYpPvPQ=)
2: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Validity
Not Before: May 11 09:08:45 2026 GMT
Not After : May 18 09:08:45 2026 GMT
Subject: CN=6a019c9e-6595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:f2:8e:18:d2:a5:09:25:9c:8b:fe:23:24:
b7:56:4a:aa:13:d1:26:f5:ce:86:4e:84:89:2b:9a:
38:87:9e:f3:d3:8a:8e:78:db:bd:d2:34:e5:cf:50:
ab:2f:8e:67:84:12:05:0a:ae:58:8b:e1:32:42:64:
5f:7b:cc:4d:43:c3:08:09:ca:e1:d8:f0:07:e3:9b:
ad:2c:27:b7:13:0c:26:e2:64:0d:ff:85:5a:89:39:
93:9d:3f:56:1f:3d:32:c2:22:23:ec:e2:a8:10:db:
f0:99:cc:29:39:23:b1:62:9b:85:30:9f:dd:a4:d6:
66:7f:ae:53:66:29:e5:c5:55:b5:20:1b:dd:0f:a2:
f4:af:89:c7:33:2b:2f:a8:72:b8:1e:39:43:57:f3:
0c:b9:fa:c5:53:ba:f0:53:6c:91:7e:54:c9:b2:7c:
8a:1f:38:db:87:f9:0e:1c:f9:a7:2f:0f:24:cd:79:
f5:db:92:85:b5:27:af:bf:89:3f:fc:35:8b:f1:cf:
a0:42:a9:b6:95:d8:98:02:1b:fd:02:9c:65:85:1a:
ca:91:11:12:23:73:f9:33:20:80:4a:a9:03:05:51:
d1:af:81:9e:b0:01:cb:c7:ca:0e:06:78:3d:d9:15:
02:30:69:81:21:dd:65:34:55:1f:e8:88:be:e0:a9:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:11:3E:95:14:BF:01:F9:9D:D0:F2:7B:D1:EF:E7:F9:22:BC:5B:1F
X509v3 Authority Key Identifier:
keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:92:db:ed:d7:bb:1c:95:9f:64:ed:7b:d1:cd:eb:25:39:2f:
53:5f:2e:24:b0:a2:ca:a2:97:39:6e:55:17:9a:52:06:5f:77:
8c:f7:c3:e3:db:fd:e7:03:a2:3a:02:f6:4c:97:b2:84:91:c9:
fa:a5:32:9f:70:50:71:2a:6c:2a:c5:8a:b5:9f:41:a3:05:e7:
08:b0:f4:b9:f7:24:50:e9:39:90:05:0b:00:45:31:13:e9:c5:
ac:b4:f5:0f:a3:70:65:2c:bf:0b:14:fe:73:ed:90:72:0e:16:
02:fa:9d:dc:be:70:bf:54:5e:be:b5:6f:21:46:ea:49:1e:5e:
6c:b6:78:c3:6e:46:9b:37:61:82:49:e4:53:f4:d2:c7:de:8a:
09:a5:bf:11:13:a7:75:64:5e:6e:9a:a1:bb:7c:ee:84:fd:3d:
58:18:71:bb:7f:15:f2:9b:d5:23:7f:d8:43:96:a9:13:c4:02:
ab:ca:e6:fd:c7:9c:77:50:c6:b1:71:81:aa:5c:7a:0f:35:96:
68:c6:af:f2:24:f4:de:d3:d8:ad:8e:de:a9:80:11:cf:2f:6b:
a0:6a:bb:65:79:65:c2:5b:08:f4:43:7a:22:a7:e1:8b:40:64:
da:34:0c:79:b9:b0:a6:b4:4f:3d:60:91:8d:77:be:5a:fa:12:
41:05:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:02 2026 by rpki-client