
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier: lVuUd22IhaAP0siqsSeJQsbB0kuaS2Q3aiKONGbgpc4=
Subject key identifier: 95:2E:8A:07:5C:1C:C8:5E:16:1E:62:11:0D:5D:C0:03:D3:C8:6C:D4
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number: 0116
Signing time: Tue 12 May 2026 22:36:09 +0000
Manifest this update: Tue 12 May 2026 22:36:09 +0000
Manifest next update: Tue 19 May 2026 22:36:09 +0000
Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: fmVuvnKkWivWirKqTshxnJ3oYuPLJndBIPaYqhewMIc=)
2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: ASL8/2HCWAJCmthowgFWIUdkitcmGIEB/XyIsZpt42w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Validity
Not Before: May 12 22:36:09 2026 GMT
Not After : May 19 22:36:09 2026 GMT
Subject: CN=6a03ab59-b610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:8a:e2:6d:9d:f0:ba:e8:66:d6:04:5d:2f:
73:09:6a:5e:93:e5:de:89:59:71:8b:37:0a:63:a5:
d1:52:f2:09:aa:c4:82:51:06:d8:ad:46:d6:10:98:
8a:a1:83:77:7c:81:ef:52:55:b9:98:83:fe:40:3c:
df:d1:e6:f8:50:b6:6d:f0:11:5e:be:fd:4d:17:d2:
92:98:d1:90:e3:b7:78:3c:72:77:51:ba:06:b0:a0:
a1:72:ad:0a:0f:19:48:92:99:29:3c:f8:85:b3:58:
ef:fd:60:d8:68:74:0d:11:85:19:42:32:de:54:dc:
9c:d9:e3:91:d1:e6:33:aa:44:e1:e5:b4:cb:2b:5e:
da:ee:5b:93:ff:c8:61:42:63:93:16:a8:6a:e5:04:
cc:9b:1d:d9:59:b7:09:0c:17:3e:09:5a:be:d8:4d:
f3:d4:80:18:ec:cd:78:88:f5:6b:01:60:80:33:65:
c9:2c:55:93:79:44:a0:2f:62:5c:2f:14:0c:f7:50:
76:b1:34:35:28:78:12:09:83:45:f0:85:80:5a:24:
c3:37:64:b6:aa:13:bc:63:9c:f8:f9:e3:8b:d0:51:
b4:98:1e:be:20:2c:d6:2a:c6:56:08:70:16:4b:89:
20:52:f0:9c:50:82:fd:10:25:28:5c:77:23:3d:0d:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:8A:07:5C:1C:C8:5E:16:1E:62:11:0D:5D:C0:03:D3:C8:6C:D4
X509v3 Authority Key Identifier:
keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9c:59:4c:66:87:92:22:e0:d1:b5:e0:97:a7:e8:fc:d8:65:
df:51:a6:02:b9:20:27:39:10:88:af:3b:f4:a0:e0:ff:4c:20:
00:e2:8f:25:ac:74:22:c6:a5:3f:9e:79:54:86:ad:35:7b:dc:
3b:63:f9:89:77:01:5a:63:5a:f7:cf:bd:d6:4c:7c:50:5f:c0:
96:84:fd:cf:e1:6d:5b:82:49:8c:57:55:0c:86:7d:61:5b:ab:
fc:ee:f6:b6:71:3b:5a:6b:67:5d:ad:b2:0a:bf:30:b1:b9:65:
cc:5e:b8:3d:59:55:93:1b:18:fd:99:4c:e1:c3:9e:2e:74:d0:
59:e9:e9:e0:d7:99:dd:88:e2:96:4a:51:52:38:60:70:66:35:
8a:74:37:18:cc:ff:a2:71:9b:0e:35:83:49:70:74:07:97:a3:
c0:c6:4e:79:2d:ba:30:44:6f:47:2e:3c:06:51:e9:4d:1a:1f:
17:12:97:21:d0:47:1f:03:51:9b:a9:d4:75:d1:76:9b:0c:c5:
39:6e:4e:c7:37:1a:5d:2f:4f:c2:1d:43:17:e7:d6:30:78:30:
86:64:ef:5a:be:73:eb:a3:7c:56:a2:4f:91:b0:9d:af:5b:47:
78:55:cd:61:17:7b:b8:50:6d:d6:f7:0c:4a:1e:48:e4:54:53:
fa:8f:8f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:30 2026 by rpki-client