
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
File: aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft (raw, json)
Hash identifier: SemFF/REoxUr5rsvbTrAtnCEd9m3Wz0CZLDbAa5NTi4=
Subject key identifier: 67:65:4F:04:C9:0E:B8:14:5F:22:73:09:70:D0:E1:9A:C6:D5:AC:BC
Authority key identifier: 68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
Certificate issuer: /CN=A91A5208/serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
Manifest number: F3
Signing time: Mon 11 May 2026 06:29:47 +0000
Manifest this update: Mon 11 May 2026 06:29:46 +0000
Manifest next update: Mon 18 May 2026 06:29:46 +0000
Files and hashes: 1: aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl (hash: VvFgIdZdFuiXQcsRqGBDTQwANAlY3iAJ+kJbKURZm9s=)
2: FF9C9380E84D11EFBDF0C033C4F9AE02.roa (hash: L6/yynEwdWf1sD2wlmqOrbdnKHzkKjuQTgZ1LmsT/eY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5208, serialNumber=68AD0D0470F6AC6F19C64EEF4094EE0BB5871EDA
Validity
Not Before: May 11 06:29:46 2026 GMT
Not After : May 18 06:29:46 2026 GMT
Subject: CN=6a01775b-870e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:e0:47:bb:4b:19:00:81:04:aa:30:a6:8f:
5f:73:b4:af:e3:47:ae:bb:89:0a:8e:f6:34:8a:93:
ae:24:ef:de:c4:87:e0:54:fd:b9:eb:6e:f7:e9:37:
c0:59:96:5d:09:1e:21:da:83:45:e9:2f:60:61:c9:
2a:60:86:d1:07:55:dd:c0:c1:cd:c4:02:81:a3:1b:
56:b2:a9:b1:c4:e4:c5:41:71:8a:7d:aa:51:ac:f3:
eb:82:ad:82:71:1f:1f:89:ab:dc:e9:2f:a8:94:3a:
51:b4:6f:57:e0:b0:29:3b:42:4b:73:6d:ae:e8:b3:
7c:83:2c:3c:f0:36:00:c4:0b:6e:a5:c2:7d:18:d2:
10:4c:d8:8f:68:d5:83:0d:c3:2f:0c:aa:5f:61:17:
0f:b5:cd:d3:69:4d:62:b7:a3:37:06:a4:4e:17:b1:
6c:ef:7c:c7:d3:2c:53:33:c7:84:9e:df:ed:de:9d:
c7:23:6f:ad:34:e2:eb:99:ac:13:82:c6:e8:c9:77:
34:29:02:cb:e5:68:80:5c:91:20:ee:b1:4d:ce:e0:
d0:76:50:aa:ae:98:49:61:ad:75:69:7f:20:4a:94:
21:61:7e:1f:cc:df:ea:bd:b0:80:fc:60:80:3b:2a:
cc:e4:ad:3f:c5:d3:15:b7:91:82:0a:a9:0b:ec:a9:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:4F:04:C9:0E:B8:14:5F:22:73:09:70:D0:E1:9A:C6:D5:AC:BC
X509v3 Authority Key Identifier:
keyid:68:AD:0D:04:70:F6:AC:6F:19:C6:4E:EF:40:94:EE:0B:B5:87:1E:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK0NBHD2rG8Zxk7vQJTuC7WHHto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5208/9E28557EE4EE11EFB1ED760EC4F9AE02/aK0NBHD2rG8Zxk7vQJTuC7WHHto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:2b:ec:11:20:1f:f6:00:1a:4a:cf:30:4d:0c:02:fe:17:e7:
1c:6a:db:ca:12:64:27:25:0b:df:fe:43:25:64:e3:55:9d:60:
c3:d0:4f:7d:b1:07:17:e3:d7:da:8a:3e:6c:a3:cd:ec:ef:26:
3b:00:da:f3:77:7f:a6:e3:0d:b1:17:18:92:f3:79:a8:0c:4f:
af:8a:b4:50:77:79:d9:1b:18:52:88:e0:91:98:ad:5e:42:b0:
50:6e:4c:a1:03:f3:0f:62:4d:b1:9e:01:e7:4f:98:3e:d8:20:
4c:1d:04:84:84:2f:e6:cb:fa:59:e7:67:9b:15:4d:eb:65:82:
0a:01:5d:0e:bb:f5:70:73:81:ca:01:df:97:98:6b:87:46:d4:
75:a5:30:41:c5:c1:40:cb:8c:9f:f7:41:ad:10:54:fb:bb:3a:
18:b8:30:09:45:f6:98:94:56:85:ad:1a:a9:1e:11:cd:4e:e6:
a1:6e:f2:53:14:ea:53:12:f7:80:3f:41:4c:d8:fd:0c:23:46:
96:18:1f:df:16:e5:d2:30:59:5c:e6:78:52:cd:6b:9e:63:4b:
65:39:f9:2b:f6:ce:b3:ae:07:a5:21:5a:95:5e:4d:43:8d:52:
9e:3c:d8:7e:a8:a0:23:52:7a:dc:10:11:ef:79:0d:0a:6a:ab:
6d:96:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:48 2026 by rpki-client