
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json)
Hash identifier: pkUMdBrYc9O9AhvlzGjeOmtu3lFlB8QaWBjdPERlgOo=
Subject key identifier: 3A:34:FD:96:AE:47:CC:37:DA:BD:CF:5E:78:84:FD:03:B0:62:A4:FA
Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Certificate serial: 3681
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
Manifest number: 35F8
Signing time: Tue 12 May 2026 15:01:04 +0000
Manifest this update: Tue 12 May 2026 15:01:04 +0000
Manifest next update: Tue 19 May 2026 15:01:04 +0000
Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: +PtOoafZBHK8eix7t/J/d0uOug2a/X6sZOeWSp9dKTc=)
2: D5AE1878445411F18F0CA58D8E833773.roa (hash: ZzEqHzGC8O5FdOMWgyAvG6I7/k8xFdsyTDuE7KDBbIU=)
3: 14C7EB3E4A0311F188B4A0B8BF833773.roa (hash: uuHcdBkxccty/weIenIOJopCypBlJDPkgRjWEztGkA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13953 (0x3681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Validity
Not Before: May 12 15:01:04 2026 GMT
Not After : May 19 15:01:04 2026 GMT
Subject: CN=6a0340b0-0c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:a0:21:a2:01:59:e7:75:3c:be:6d:30:fd:
10:f6:4c:d8:db:f9:28:85:85:60:bd:66:a7:f6:e3:
7e:d3:79:75:ff:1c:cd:4e:59:cf:96:7c:7a:6b:1b:
de:42:0c:b3:99:51:fe:89:5b:2b:62:a6:44:f9:ef:
05:98:70:2a:54:77:d5:9f:c3:0b:3e:82:78:74:ca:
41:8b:36:b0:2e:74:c4:76:72:d5:56:5c:26:b2:75:
27:c7:b4:8c:58:0f:8d:ed:ab:00:77:ce:1e:a9:fa:
54:3a:48:c9:b6:ad:82:55:fd:c0:a7:c1:a2:4a:a7:
04:f1:ad:87:a9:ae:7d:e7:1e:ea:7d:ca:81:6e:1b:
65:b8:f0:55:80:48:13:39:09:37:29:46:f8:e3:b0:
16:f5:ed:e0:63:b9:3e:35:72:38:6d:e1:7c:61:f2:
81:2b:49:ed:4f:f9:12:90:01:18:cb:0c:55:5f:f8:
71:ea:73:1f:9e:98:38:23:8b:c7:0a:6f:5a:98:7f:
08:e2:7c:7a:24:b9:ec:1f:c3:80:e7:13:dd:6f:ed:
26:eb:56:e2:c5:62:1a:89:95:b3:6f:a2:18:0b:59:
1b:16:55:22:78:99:72:0b:27:58:ea:fb:45:ee:13:
93:f9:79:68:4f:c5:a3:a6:4c:ce:2d:dd:25:e6:a0:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:FD:96:AE:47:CC:37:DA:BD:CF:5E:78:84:FD:03:B0:62:A4:FA
X509v3 Authority Key Identifier:
keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f4:1a:54:22:51:da:6d:d8:c5:a3:59:ec:17:d0:64:6c:82:
de:cd:75:61:7f:fa:01:07:4b:d3:f9:59:16:94:00:a5:b5:a8:
1a:10:8d:c1:3d:a1:e9:70:1f:a2:d7:c4:43:9f:84:54:52:fb:
71:55:8d:bc:00:93:e9:5b:f7:c1:1c:c2:10:76:89:93:22:6a:
e9:5c:20:30:fa:46:31:17:ed:a6:f0:90:d3:83:22:bf:54:ac:
02:fb:d4:fd:cb:aa:40:73:9f:42:28:f4:a1:6d:4d:64:51:af:
96:84:06:b1:2f:30:69:85:9c:f7:39:2e:24:df:ae:e8:5b:85:
3f:8c:29:8c:71:55:7c:1b:fc:5e:f7:e2:af:19:06:d2:7a:03:
2d:45:9d:01:d7:da:30:bb:5c:65:ed:2a:9f:d3:f8:40:c2:8e:
c3:39:11:6e:68:d0:1e:7e:5e:b1:09:8a:e7:cf:1e:dd:dc:2b:
37:74:79:d2:b2:7e:41:6c:b0:2e:c5:3e:cf:47:59:e4:61:c8:
66:a7:78:51:e5:b1:55:b8:0e:fe:40:6f:fa:ae:37:05:33:21:
01:8d:ab:7a:36:c0:41:df:af:31:e1:de:cc:76:a7:2c:50:1a:
d6:a5:49:a7:46:c1:08:2f:a2:27:cb:b0:51:75:0f:e2:e7:e1:
02:2c:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:28 2026 by rpki-client