
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier: 2xE1bzygBUNhXOEEluAAIlgDfiNs+DvfQIE7/X3Twao=
Subject key identifier: F4:D7:F6:F3:53:9F:18:BD:40:5B:1D:91:89:75:ED:4F:DD:D8:3B:68
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number: 01BC
Signing time: Wed 13 May 2026 03:59:46 +0000
Manifest this update: Wed 13 May 2026 03:59:46 +0000
Manifest next update: Wed 20 May 2026 03:59:46 +0000
Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: jvq+5QmxETv8JzWbNtoUr3tgsb6wjTQUpL/hfu+GpUs=)
2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=)
3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Validity
Not Before: May 13 03:59:46 2026 GMT
Not After : May 20 03:59:46 2026 GMT
Subject: CN=6a03f732-7920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:b7:25:ee:2c:f2:05:2e:37:1e:c6:6f:1b:
90:d9:dd:75:b0:bf:36:8e:f5:e9:6b:37:76:55:80:
38:2b:0a:16:e6:ab:af:b9:86:5a:fb:a7:bf:c4:55:
c2:3c:9a:41:b7:47:45:e5:ed:bd:f6:a2:6b:63:01:
27:e8:13:65:ec:55:89:c8:43:bf:41:d8:f1:ab:db:
f4:6d:86:ef:11:ff:0a:48:7e:d3:4c:4b:8b:65:d8:
d8:fa:38:64:82:2a:74:6a:a2:75:70:65:f7:98:ae:
ee:a7:0b:c8:b2:94:21:ef:97:68:06:37:0a:3e:15:
76:7a:06:89:4b:46:b6:86:79:6a:bb:52:9e:fa:33:
63:6b:bf:47:18:dd:90:cc:b7:bf:20:c5:66:4f:8d:
d7:0b:6e:74:38:e6:4f:39:e0:f2:8a:88:a4:de:96:
17:ea:34:93:6f:4b:61:5c:35:e5:8f:3e:aa:51:01:
61:fa:83:95:c9:cf:dc:d5:b4:4e:65:27:93:90:43:
5e:47:84:e1:a9:26:e8:e6:32:15:c2:2f:a8:a7:31:
7d:1a:1f:37:bb:bd:da:55:e9:19:8b:ea:7f:b7:44:
c0:c5:74:cb:2b:87:d2:0d:98:ec:77:87:2f:30:45:
96:74:ad:81:3b:28:54:00:82:f5:c5:33:aa:9b:98:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D7:F6:F3:53:9F:18:BD:40:5B:1D:91:89:75:ED:4F:DD:D8:3B:68
X509v3 Authority Key Identifier:
keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2f:c5:ae:6f:4d:5c:20:7b:26:f5:c0:2d:f2:75:62:de:09:
40:8c:c0:64:af:6c:34:4a:29:9f:ea:65:f4:37:57:07:6b:d4:
ba:28:d1:55:94:da:9b:39:79:1b:5f:1a:9d:aa:5f:f1:52:88:
a9:82:b3:79:82:d1:01:50:92:64:b7:84:95:21:83:17:88:54:
00:77:f4:a1:bf:67:a6:79:9f:2d:22:b5:63:6e:9f:bb:e4:1d:
75:e6:3d:88:5e:00:bf:79:28:15:54:e2:98:03:81:2e:1c:7e:
cf:59:73:81:c2:97:83:ab:f8:3d:6d:37:57:7a:66:64:f8:26:
20:bd:92:29:58:27:43:96:94:5c:c3:f3:fa:6e:7d:eb:ed:1a:
0c:78:bb:e1:2a:bc:b0:bd:0e:48:74:02:07:2e:22:c4:b0:fb:
1f:ce:02:c7:61:59:f9:18:36:c0:e1:c6:8c:93:79:f7:52:e4:
22:f8:7a:00:90:c1:ca:53:c1:f8:85:82:36:ad:4b:48:3c:00:
b5:76:fc:ad:f4:28:62:fa:40:fc:f9:40:6d:dd:b3:66:4f:25:
2e:d2:9f:c3:9f:0f:8f:07:45:02:04:c4:db:88:f8:76:68:59:
20:2e:1c:8a:57:16:08:21:61:75:51:90:b7:75:bd:da:d5:9f:
13:eb:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:33:43 2026 by rpki-client