
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json)
Hash identifier: tVp/4SL3JsvaAJGA/L7OpmP365KALW15Qg/UILSdvsk=
Subject key identifier: 2A:14:12:CD:ED:C8:79:29:E0:CF:B2:42:8E:A8:0B:12:FD:02:E4:3B
Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C
Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
Certificate serial: 0B6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
Manifest number: 0B5B
Signing time: Tue 12 May 2026 19:17:08 +0000
Manifest this update: Tue 12 May 2026 19:17:08 +0000
Manifest next update: Tue 19 May 2026 19:17:08 +0000
Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: SAnWwB2nmkUgVTcTd4t1EzEpuY45NhOPa4uEAM6SkEM=)
2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: UjDA69nI4M+QE5F7/yUCsXl1oguMiov/k5pjEhYxCYg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl
rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2924 (0xb6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
Validity
Not Before: May 12 19:17:08 2026 GMT
Not After : May 19 19:17:08 2026 GMT
Subject: CN=6a037cb4-1a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:5c:52:c8:b2:d8:ac:8b:13:94:99:89:59:
67:14:04:dc:67:8c:7e:c6:e2:f4:ba:ee:81:fc:d4:
b8:7d:60:21:96:aa:43:20:f3:01:58:30:93:58:6a:
eb:2e:73:50:a5:f4:ac:c5:c4:85:57:a1:89:8a:34:
c1:25:4d:83:ff:04:f6:fd:50:a3:f9:31:36:d1:f3:
61:9a:e1:ef:d0:cb:b7:82:3a:20:28:f1:35:38:e6:
ca:31:0d:af:6d:12:b0:4f:5c:7b:b5:08:b9:7f:62:
a9:d5:80:e9:29:8e:63:ab:99:a8:3f:83:92:3d:87:
b6:68:8b:6b:23:77:31:05:4f:7b:55:ab:cc:3c:f0:
31:52:17:4d:ad:1c:06:19:aa:cc:dd:23:e5:39:d1:
76:2b:12:6d:d0:6f:18:70:30:91:3b:53:4b:44:d1:
bf:6f:d1:fd:7e:14:6d:b1:1b:5b:5e:08:16:ea:cd:
0d:b6:b2:48:42:3f:61:51:ff:23:a5:97:b2:b4:cf:
e7:ec:a6:bd:d2:7e:3c:ea:68:6f:5e:45:5a:a6:a9:
3e:ec:6f:3c:f7:14:0c:78:c4:b8:a4:63:44:6c:50:
92:6f:70:c8:67:77:48:8b:65:82:53:9f:03:c8:70:
b4:fd:87:8d:0d:ec:cf:dc:40:bf:2a:48:6e:05:07:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:12:CD:ED:C8:79:29:E0:CF:B2:42:8E:A8:0B:12:FD:02:E4:3B
X509v3 Authority Key Identifier:
keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:18:c3:05:ea:c8:f7:e5:55:2b:92:e9:ee:28:ac:13:96:d7:
4d:04:02:03:20:bc:3e:69:b5:ef:ab:fb:41:a6:eb:66:16:b2:
1f:7e:f7:8c:bb:a7:04:57:1e:19:63:33:17:83:66:8e:5e:93:
07:5a:76:16:80:af:ca:67:1a:c5:66:c0:1b:35:97:6c:4d:f9:
dc:61:bc:93:3c:d4:da:bb:43:63:f4:7a:4a:ae:47:b8:53:da:
c7:49:30:de:2a:a4:23:b5:85:76:be:67:8e:17:be:af:b3:3a:
53:fc:b1:4c:76:8a:96:fb:c1:ea:a3:a7:7f:b1:59:ac:06:ed:
3d:22:ed:8c:a9:74:5b:b6:cb:56:aa:24:a8:8c:11:1a:77:41:
60:d0:34:2b:4d:84:c1:be:a4:8d:6d:bb:0a:6b:4d:6d:92:fe:
c1:8c:b7:86:d7:59:b9:38:6f:15:f2:97:67:6a:41:6b:4b:86:
f9:58:52:2a:1c:6c:1a:96:e0:f0:0a:48:1a:3a:5b:14:92:19:
1a:2f:d8:09:87:2e:e9:91:b4:65:34:59:66:36:7d:71:fa:70:
38:1c:a0:cd:22:d0:19:d2:90:28:d0:80:8c:4e:6c:fa:7b:cb:
47:84:3e:6b:01:7e:86:85:7b:8b:6d:f8:5d:94:b0:b9:0b:22:
50:c2:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:53 2026 by rpki-client