
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
File: 446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json)
Hash identifier: cB1SfAK0nmPHhqne5seda5+0mXNkMZ19IaynqEk8sHY=
Subject key identifier: 6B:A8:93:11:B7:B7:DC:9E:CE:2C:2D:6A:18:CB:BC:59:94:CC:21:6C
Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
Certificate issuer: /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
Manifest number: 0180
Signing time: Wed 13 May 2026 04:49:09 +0000
Manifest this update: Wed 13 May 2026 04:49:09 +0000
Manifest next update: Wed 20 May 2026 04:49:09 +0000
Files and hashes: 1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: 79Ju2wicfZM5uQUe6DXx7ybOhZRg/SCmM2aebvCFq1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl
rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
Validity
Not Before: May 13 04:49:09 2026 GMT
Not After : May 20 04:49:09 2026 GMT
Subject: CN=6a0402c5-f61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:2f:ff:2d:1f:4c:af:df:bf:95:65:63:40:
e3:00:0a:79:8d:c6:92:e9:71:b8:37:ec:65:1d:6b:
7e:3f:a1:35:93:85:10:bb:bc:4a:29:95:6e:06:e1:
0b:ae:a0:ff:39:06:13:29:2f:c2:fc:ca:25:c6:73:
12:0c:92:d4:46:03:e0:fa:52:00:5f:1f:2c:b7:01:
fa:b2:86:62:d0:8c:44:2b:fc:d2:7e:a5:e7:5c:4c:
2d:a0:8f:b5:19:a1:0d:54:4c:20:ee:db:93:5b:dd:
fd:eb:c5:3e:5a:0c:4e:e2:8c:91:77:83:4a:59:82:
fe:50:bf:9a:4b:48:49:8f:77:9a:c8:6b:af:d0:1f:
6e:42:b0:d2:2b:f4:14:73:f7:69:71:49:21:91:ab:
31:b4:91:5f:77:5a:7a:a0:5c:65:bb:d7:ef:79:c3:
f7:65:7b:e8:a6:51:a3:dc:8f:30:ff:d9:21:83:2a:
2d:e2:42:b2:fe:1c:30:df:88:40:f5:d4:17:ae:44:
66:df:fe:7a:8e:43:ef:39:ab:2a:c8:37:0a:58:cc:
89:d3:ea:e7:20:c4:d8:00:59:a7:c5:72:cd:4e:60:
d1:76:a6:8f:38:cb:0d:cc:eb:f5:97:ff:b0:14:de:
87:0e:81:41:54:4f:ca:0e:6c:b0:40:bd:c1:35:37:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A8:93:11:B7:B7:DC:9E:CE:2C:2D:6A:18:CB:BC:59:94:CC:21:6C
X509v3 Authority Key Identifier:
keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6b:5d:b0:b8:44:33:d0:f0:a8:24:f3:6f:2e:0a:7c:0e:b6:
f5:32:96:da:aa:c0:3f:59:6a:cf:da:57:e8:ff:a0:50:d5:d2:
94:d4:01:a3:3d:fb:99:f3:6d:f8:dc:9d:70:eb:e6:8d:ec:3f:
ec:79:78:69:82:35:19:25:35:68:b7:8c:45:97:17:02:2e:05:
f1:3c:ab:c4:55:af:81:ab:2d:30:71:d3:5a:5e:06:44:27:e9:
eb:2c:cc:68:0d:ee:7a:c8:94:8d:39:63:57:68:bf:88:77:e5:
b0:81:87:0f:86:10:9c:bc:d9:e8:07:b2:d2:7e:c4:19:b3:44:
bc:da:fc:bb:aa:c0:b3:4e:be:3f:b0:a9:c3:66:27:06:89:be:
95:3e:92:37:0a:41:42:37:87:87:9c:63:8a:bb:08:99:d0:22:
40:a1:7e:61:d0:6c:0e:b5:93:98:f8:6b:89:8b:70:d5:1d:11:
1f:ad:c4:bb:6f:ba:8b:39:cc:bc:77:eb:d6:4e:0b:9e:69:4b:
a1:be:50:73:5a:29:4c:31:0a:1a:50:02:b6:04:f8:f5:8d:d5:
ab:55:9f:fc:9e:3d:85:4c:ce:4c:f3:91:dc:55:a4:d1:21:85:
58:34:ce:f2:18:42:fb:98:d3:c6:74:37:5a:20:94:79:19:74:
ba:72:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:15:03 2026 by rpki-client