
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
File: aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json)
Hash identifier: uRrLFfXH6JmQFmZeJJWtaRUEr8BoKlzIPzYAwuzB9u0=
Subject key identifier: BE:03:1C:39:8D:AF:FA:54:2F:89:6E:A3:1F:19:CA:CE:9A:D6:92:89
Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
Certificate issuer: /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Certificate serial: 0519
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
Manifest number: 04F9
Signing time: Sun 10 May 2026 23:51:43 +0000
Manifest this update: Sun 10 May 2026 23:51:42 +0000
Manifest next update: Sun 17 May 2026 23:51:42 +0000
Files and hashes: 1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: CRO2Ya3ublBCqL2x3DB4JiLiPNRiSz4wBfX5Unk76nE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1305 (0x519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Validity
Not Before: May 10 23:51:42 2026 GMT
Not After : May 17 23:51:42 2026 GMT
Subject: CN=6a011a0f-085b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ee:74:e5:35:34:fd:8f:a1:f8:41:c6:bc:07:
0d:dd:32:34:aa:ba:a1:3f:72:0a:ac:6d:46:71:eb:
1b:45:dd:71:e2:1c:85:23:aa:d5:ac:7c:70:a4:99:
4b:2d:3e:31:a1:4c:bb:24:25:a2:21:8c:88:3e:68:
91:84:19:4a:1d:d0:00:10:dd:5c:b1:ec:45:bb:34:
9d:4f:da:e6:4f:e2:f1:c4:90:cc:66:bd:3f:5a:8b:
09:a2:23:de:fa:71:71:a6:8e:65:f5:58:e0:4e:a1:
3e:7e:74:8b:19:37:d6:ec:6c:f4:54:5c:63:bd:bd:
ed:50:ce:a7:bc:6a:d2:cb:68:61:d1:01:b3:1e:9d:
15:79:6d:c0:84:c7:f3:62:50:3e:fe:16:90:dd:b1:
19:9b:6e:b6:cc:d2:04:a3:b6:59:68:b9:9d:80:32:
39:f9:03:2b:cc:2d:b4:d0:0a:f8:f0:bf:41:7b:41:
15:09:52:8c:30:5f:9a:b0:b3:fc:61:44:af:5c:e9:
64:eb:ae:7e:d1:e7:fe:bb:97:42:37:34:28:85:a5:
b8:76:07:d7:76:86:09:68:cf:cd:37:00:8b:62:93:
88:af:c2:76:b2:53:bc:78:de:b4:0b:bf:c9:3b:ec:
1c:16:84:e1:d9:ac:78:0d:d5:0b:f7:ea:07:fb:07:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:1C:39:8D:AF:FA:54:2F:89:6E:A3:1F:19:CA:CE:9A:D6:92:89
X509v3 Authority Key Identifier:
keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:a3:99:4b:fd:fd:53:43:57:37:9a:2a:4a:30:cd:18:c1:55:
0a:cb:f3:5d:bc:0c:62:c2:3c:4e:0b:01:d3:83:01:9b:30:ed:
9f:d2:3d:be:e5:18:68:38:45:eb:ab:0d:ca:6e:6a:6f:6f:4e:
90:80:54:22:77:a5:b9:06:6a:2d:8f:2d:db:f6:35:28:e0:df:
8f:b2:93:03:37:e1:f1:a9:73:63:a1:74:08:02:a2:d8:bc:08:
29:20:8a:a7:13:02:bf:ea:ee:ed:82:ea:86:f8:7b:00:c8:93:
05:57:37:05:5f:89:62:b6:08:54:80:55:6d:64:d5:1f:05:ac:
d3:96:c8:9f:c5:23:c6:db:d1:09:d5:1a:22:05:86:7f:3e:01:
10:69:ec:9d:6a:eb:32:fb:1c:51:db:fd:85:4d:4b:3f:e2:0d:
ec:65:da:2f:48:9d:60:0b:25:13:a2:3c:c4:65:6e:c3:05:4f:
e5:51:e1:5d:e4:9c:34:64:64:d8:b2:ea:a8:c2:59:8b:af:68:
08:7f:bd:8d:fe:39:be:c3:36:80:65:9c:ed:86:74:16:bd:21:
95:aa:05:01:06:ee:5e:bd:ca:8b:36:fb:3b:00:c5:11:c7:9d:
a6:17:5b:0a:00:7d:da:35:37:6b:ff:0c:cd:5d:26:4a:1e:bd:
23:dd:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:42:53 2026 by rpki-client