
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json)
Hash identifier: vjuO8uzj91uYpLtiAhvsEECQXZ9qlu9AAWHdMc6bCTw=
Subject key identifier: DF:91:E2:34:71:D8:DE:DD:7C:15:6A:F5:50:1C:24:3B:59:C2:56:C8
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial: 0CFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
Manifest number: 0CCE
Signing time: Tue 12 May 2026 18:31:08 +0000
Manifest this update: Tue 12 May 2026 18:31:07 +0000
Manifest next update: Tue 19 May 2026 18:31:07 +0000
Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: LlieCJSBSl7PPcYot4JB/n2t27vsRgoG4pTViec5GPI=)
2: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: XSNUZ0r/o28q/R/sUwKxLrt1L1Gim57J92y6DiX5k8o=)
3: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: UNRqxb3T+0nOQ/GO8zWJElSOEcU0ZScoqyo9xYCh4+U=)
4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: Q/z2xPgEev/jp2CYBsFY4fwnHwuGTUM4Sob54bGfHrU=)
5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: oZ5Fktk/X7IkMniZfmOwOSIMZJUooUAA4uRqYhgv5JA=)
6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: MNLepmkmDKIhV6gh+S8mCUAnPQoTINkDmI9IbqljxRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Validity
Not Before: May 12 18:31:07 2026 GMT
Not After : May 19 18:31:07 2026 GMT
Subject: CN=6a0371ec-c201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:15:8e:5b:35:2d:c6:1a:6b:cd:55:6c:2a:
3d:76:59:46:4c:25:cb:d0:e3:8c:01:cb:11:bb:fe:
4b:74:21:36:21:07:35:13:e0:bf:a3:b2:97:86:1e:
90:db:1f:85:18:77:fd:a2:7c:3b:10:5f:37:ce:2c:
6f:c1:fb:e8:24:2c:87:87:a7:bb:b3:48:20:20:0e:
fb:ae:a0:35:27:b9:53:c9:a2:6f:3f:83:ba:f9:eb:
b0:79:50:95:4a:9b:0c:91:35:1d:31:69:bf:f2:eb:
97:d0:77:b3:2c:de:76:78:34:6d:f0:45:fe:5d:49:
ee:a1:0e:7f:08:3e:93:89:b8:9a:b3:15:dc:b8:6c:
c5:4b:78:c3:fc:4e:74:3c:bd:0e:a7:96:73:bc:64:
23:64:3c:ea:02:8a:76:b6:e8:70:cd:2c:3a:59:0c:
59:7d:ad:3b:80:17:08:b7:48:34:1c:e3:ce:cf:16:
50:43:8c:5d:bc:cc:61:c6:9e:80:55:20:85:82:15:
50:41:a1:51:eb:74:ae:a9:a6:cc:e1:a5:8f:88:77:
73:78:3c:c9:18:9d:48:c8:bd:0d:68:65:a7:7c:45:
fd:8a:0f:24:38:7d:76:58:ee:3a:a7:e1:e9:1a:b0:
a2:57:87:6c:88:22:40:b6:22:6e:fd:16:4c:10:5a:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:91:E2:34:71:D8:DE:DD:7C:15:6A:F5:50:1C:24:3B:59:C2:56:C8
X509v3 Authority Key Identifier:
keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:10:53:e1:d5:92:71:c8:e3:46:08:7c:49:c6:7c:d3:e4:dd:
6f:fb:9f:4d:57:b1:17:9a:6d:6f:83:e6:ef:5b:be:f9:14:db:
9e:b2:0c:7d:b9:6a:19:cc:29:73:2c:be:36:12:f7:fc:75:5f:
6c:c6:35:4a:d2:5c:a8:3d:7c:14:fb:a7:9f:21:90:44:fa:ba:
7c:91:bc:cd:17:7d:64:46:16:e4:a7:1b:b6:d1:b6:79:de:fd:
ae:57:c9:41:35:e8:dc:77:de:a6:1f:e3:80:2c:66:85:e9:be:
b3:be:be:1a:d4:19:35:c0:1d:20:3c:90:24:18:44:24:d8:ee:
f8:7f:cb:ba:97:2e:4d:52:58:b1:b7:91:20:cc:3b:be:c4:75:
bc:3c:2d:90:ce:65:e7:18:1f:80:e3:da:d1:fb:1a:ce:c4:96:
e6:80:af:4f:92:20:3f:26:82:ef:af:7c:ca:e6:6b:b2:f1:09:
54:50:98:53:3e:33:b9:23:8b:63:79:ff:ad:da:de:83:e0:98:
2d:c1:f5:e5:34:3c:83:00:48:73:61:7e:e7:20:34:8b:7b:6a:
c4:53:70:3f:4c:6f:37:b7:52:67:40:85:0a:0d:50:1d:d9:b3:
61:62:3e:7a:41:8c:4c:37:c3:2f:d6:a7:2c:82:d5:6d:10:5b:
da:f9:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:50:14 2026 by rpki-client