
$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json)
Hash identifier: FToI/5ZBDq+g72YL3ixHCIhtmCM2bd11BzQqhI5dL9Q=
Subject key identifier: 4F:8C:0C:FE:82:33:2E:A8:1A:D3:45:10:33:9C:ED:69:BE:B5:09:BD
Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Certificate serial: 0683
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
Manifest number: 067A
Signing time: Tue 12 May 2026 22:40:05 +0000
Manifest this update: Tue 12 May 2026 22:40:04 +0000
Manifest next update: Tue 19 May 2026 22:40:04 +0000
Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: JVh3SJn+L5+eJiJjIBgZbwKVGh0Zkr3MZzXJNi9e+Dg=)
2: FC2AD5EE3F1E11F1AB154A9A91833773.roa (hash: frhSCj6zrH57k5fmrn6Ce1RuAMTqn30tY/7R+v5CiOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91944AB, serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED
Validity
Not Before: May 12 22:40:04 2026 GMT
Not After : May 19 22:40:04 2026 GMT
Subject: CN=6a03ac45-c79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:f0:52:0f:11:dd:d1:e3:05:4b:2b:c4:b5:
86:f2:ac:ea:76:82:a4:95:35:4e:b0:1a:2b:01:49:
ba:f9:40:2d:4a:cc:df:9c:7a:20:5f:f5:28:3f:37:
0b:a6:91:23:15:59:3a:29:9b:0b:04:21:78:bf:86:
d2:04:69:5c:37:96:ae:f2:99:bc:bf:f8:7a:23:f7:
15:81:5c:73:ed:da:1f:a6:91:68:2a:5d:dc:3e:95:
1a:a5:20:14:6e:f5:6d:32:33:df:a5:b6:4d:89:64:
09:82:f6:65:49:04:02:b9:db:e8:10:a0:07:ee:f1:
fb:51:98:3d:d3:f0:b6:42:df:38:c9:a9:dc:4a:e4:
d4:48:8d:01:b9:d1:d0:9d:c5:08:e8:52:40:84:97:
58:53:6c:44:b3:2a:c1:88:c0:9e:74:46:40:df:83:
b7:54:c6:dc:73:31:e4:1c:bd:4f:1a:6b:af:a5:bf:
6a:32:69:5e:eb:17:83:45:a7:58:1f:e7:5e:ca:1f:
0e:72:9c:30:19:39:64:72:c3:8b:7d:86:a3:70:1c:
aa:8a:8a:3b:80:19:76:16:ea:d8:00:64:e9:8b:36:
0b:f2:c6:bc:81:6b:9f:e5:d5:ed:8c:fe:79:d6:7b:
1a:69:b8:2f:ef:6a:26:95:62:f0:fb:2a:cd:db:62:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:0C:FE:82:33:2E:A8:1A:D3:45:10:33:9C:ED:69:BE:B5:09:BD
X509v3 Authority Key Identifier:
keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7c:6c:b9:46:bf:45:17:c1:01:6d:97:3c:ae:c1:5d:5f:5e:
e9:1a:32:1f:9e:9b:e3:d0:fe:0a:ba:74:1c:db:d1:8a:69:21:
80:a2:4f:9d:3b:04:4f:fb:70:84:62:4f:c1:fa:8b:17:f9:a7:
01:c2:65:b7:2d:f3:c6:65:39:7e:31:2d:e6:ad:f8:28:94:b4:
e6:15:c4:c0:2a:dc:cf:44:52:11:f6:ad:7e:fb:d5:f9:8d:e5:
57:d1:15:bf:d4:4c:02:7c:5b:96:39:99:8c:12:0b:b6:e9:60:
d6:d5:c2:0a:e9:3f:e7:b8:5c:c0:06:ca:34:22:40:59:b0:50:
02:f5:2e:39:a2:16:44:cd:df:a1:e8:95:d7:57:5e:6f:a7:55:
64:10:71:f3:d4:ee:6b:66:2a:2c:d2:87:10:2a:9d:d6:1b:3c:
70:40:f3:3f:a0:ba:1d:c6:14:73:90:35:8c:80:42:94:72:94:
df:d4:be:1e:2d:e4:51:8e:d8:ad:c2:a6:1c:09:f6:6a:78:2a:
cc:b1:72:3b:42:b4:7c:cc:e3:e4:16:20:25:e0:3c:73:8c:af:
9c:77:b7:9b:68:c5:a3:b0:c0:65:37:1d:79:67:42:fc:b6:69:
5c:df:db:5b:12:e8:90:b0:00:1d:3e:f5:42:7d:6b:ba:0c:c1:
af:df:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:56 2026 by rpki-client