
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json)
Hash identifier: K6Eg4UIKJBH/gcZZTa3eanwnoWsUdbE26wyVyWO0HdE=
Subject key identifier: 8F:80:3F:37:84:FC:BA:6C:A8:45:9B:11:B3:51:EB:87:C0:3A:E7:32
Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Certificate serial: 053F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
Manifest number: 0536
Signing time: Tue 12 May 2026 23:36:38 +0000
Manifest this update: Tue 12 May 2026 23:36:37 +0000
Manifest next update: Tue 19 May 2026 23:36:37 +0000
Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: Q1DOeKV4dn77mpJSFZq+VcSEkp75iHQDUTmkFFUSzLw=)
2: CF272560413111ECB71E086AC4F9AE02.roa (hash: B85i9GlcOeiOoR1hQF1a7WIZsOujBEcuH+d9GBIiQdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1343 (0x53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Validity
Not Before: May 12 23:36:37 2026 GMT
Not After : May 19 23:36:37 2026 GMT
Subject: CN=6a03b986-cdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:1d:c5:13:33:56:84:fa:f4:3f:b1:fb:9a:
ee:72:8d:4d:f0:cb:27:71:d2:ae:4d:d3:23:be:c0:
c4:de:bb:d2:51:11:88:67:67:57:66:fe:8b:20:66:
03:49:4b:1d:76:2f:03:65:6a:02:24:da:39:1b:af:
47:39:0a:66:6e:25:d2:cd:b5:1d:ad:09:d2:6e:d0:
f1:a3:9e:d9:7e:1e:cd:db:d9:13:9f:bc:99:e4:67:
3e:d7:39:a6:9d:87:4e:ba:52:68:8d:da:75:e5:d6:
99:1f:2b:43:a7:dd:05:e8:df:74:11:49:18:e5:4a:
e2:40:84:de:96:ae:3b:27:ea:b9:e6:38:ca:b3:d9:
91:5a:86:f5:18:2f:ba:ff:b6:c4:4c:ef:1d:52:29:
9d:bb:cb:8a:1a:96:ff:d9:cf:dd:04:38:5d:de:16:
31:69:31:cf:46:c0:6d:19:e8:7f:2a:fa:a0:bb:2c:
11:9c:54:82:d1:4f:8c:6d:ca:16:ed:84:61:04:d8:
43:db:dd:d2:4d:1b:25:2d:ba:52:b7:8f:16:01:87:
5d:71:59:4b:e0:7f:48:9a:80:cb:a4:da:20:6b:e2:
95:24:3f:22:91:db:90:a5:27:ac:74:04:04:54:c9:
1c:d1:3a:21:ff:45:31:f3:3d:f9:64:4a:5f:d7:49:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:3F:37:84:FC:BA:6C:A8:45:9B:11:B3:51:EB:87:C0:3A:E7:32
X509v3 Authority Key Identifier:
keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:83:cd:e9:4c:1d:1c:b4:1b:f5:15:3d:fc:8f:9c:1d:5d:a4:
d9:43:8d:9b:e6:71:d2:ef:7a:22:8a:37:e9:f8:03:9a:24:03:
c7:68:15:98:3f:82:34:79:bc:33:dd:bd:9c:21:da:56:14:37:
49:e1:83:e1:e6:42:a9:3c:bc:b0:1b:76:97:2c:34:96:93:6e:
d2:50:a8:64:5d:99:2c:25:ce:0d:54:f5:48:5d:87:dc:fb:2f:
3e:23:45:6f:29:1b:0e:51:16:81:26:eb:a9:78:f8:2c:40:7c:
92:49:19:9b:af:51:76:f9:a0:19:04:f2:ce:0a:20:ca:ea:c8:
f5:57:5f:f0:16:d9:ce:1d:f7:7e:58:86:0b:26:c2:8b:34:ce:
07:af:6c:af:d8:36:91:7b:91:cf:32:46:52:19:9e:21:49:52:
e9:1c:8d:c9:ed:29:22:9c:f7:b5:ca:42:fe:af:6e:e8:7f:23:
14:09:5a:68:dc:e2:a9:71:2a:0f:fa:cc:c5:a2:b3:c9:90:97:
15:88:ab:eb:a4:60:f4:a6:3c:7c:57:7b:0a:a0:5f:84:9a:e3:
5c:a0:78:e0:b1:2e:de:0c:e4:31:c2:8a:5a:73:13:19:ef:d5:
9e:6b:14:a3:13:84:37:1b:e2:77:76:74:53:d4:b8:64:a9:33:
a7:d9:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:29 2026 by rpki-client