
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
File: r-73ovgxqXVbE7N-tum5HYHoqeg.mft (raw, json)
Hash identifier: +NzQpDUeQqLvO8RYlrMeQY8yTr8sXnQ22TsBgUEFN6Y=
Subject key identifier: BE:C1:DC:73:67:AD:92:4E:52:94:B8:ED:32:AA:04:87:90:5F:25:49
Authority key identifier: AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
Certificate issuer: /CN=A91A6F2D/serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Certificate serial: 068C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
Manifest number: 0685
Signing time: Tue 12 May 2026 22:36:12 +0000
Manifest this update: Tue 12 May 2026 22:36:11 +0000
Manifest next update: Tue 19 May 2026 22:36:11 +0000
Files and hashes: 1: r-73ovgxqXVbE7N-tum5HYHoqeg.crl (hash: VfLD8z84q11H3BTWFDCB7wU7GThJmOk8rUyxHMdE06A=)
2: C17E1DDCBC7111EBB1423E5FC4F9AE02.roa (hash: y/Z27vWa+YdbKdTa4SvdGhrr8xeEuHl0bs5oHTVC4x0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1676 (0x68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AFEEF7A2F831A9755B13B37EB6E9B91D81E8A9E8
Validity
Not Before: May 12 22:36:11 2026 GMT
Not After : May 19 22:36:11 2026 GMT
Subject: CN=6a03ab5c-0943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:38:8e:cc:2c:48:be:14:da:23:03:fc:28:
d2:6e:88:41:fc:50:d4:2e:07:4b:e4:5a:92:52:ec:
cf:b5:a7:90:92:fb:98:f1:a1:d1:25:9a:76:59:d5:
27:1c:5a:dd:22:2e:10:7b:87:87:d5:5f:10:02:ea:
ae:b1:2d:1b:f4:1a:58:a3:65:21:2f:bf:25:fc:fd:
c9:5c:1f:f8:ad:42:45:0f:80:18:1e:25:37:77:5c:
68:5d:a3:4b:04:ce:9e:b9:c7:5a:a7:fc:ea:49:5d:
a6:02:82:ba:bf:46:f4:c8:e3:6e:19:a9:65:64:1b:
70:6b:a5:dd:be:26:59:98:16:19:1f:e1:e1:f4:07:
42:d8:77:70:c8:b4:1c:34:44:96:54:25:8c:7f:24:
c3:00:25:81:f1:bd:61:ba:59:f9:74:78:10:13:ea:
b0:09:21:d4:cb:7f:6c:ee:4a:14:c0:c0:d7:09:ab:
d1:6c:7f:5d:db:0c:1d:6f:ef:af:8b:31:a9:8b:9e:
a5:97:0c:c5:85:b1:eb:ed:6c:24:31:47:69:3d:d0:
5f:1a:9a:b7:54:be:26:89:b4:15:6b:b1:7a:e9:91:
a1:a8:78:6f:5f:42:17:bc:24:ea:b6:18:a3:36:68:
fd:6d:9c:1b:a1:e1:52:14:33:a4:e8:bb:b5:db:9f:
24:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:DC:73:67:AD:92:4E:52:94:B8:ED:32:AA:04:87:90:5F:25:49
X509v3 Authority Key Identifier:
keyid:AF:EE:F7:A2:F8:31:A9:75:5B:13:B3:7E:B6:E9:B9:1D:81:E8:A9:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-73ovgxqXVbE7N-tum5HYHoqeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/FD860F68BC6E11EBB8C64854C4F9AE02/r-73ovgxqXVbE7N-tum5HYHoqeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:08:32:21:71:01:6b:09:53:44:8b:29:fa:74:18:2a:f2:d7:
ea:52:b9:cc:da:50:e1:fd:a5:e6:c5:78:e1:92:c1:19:ea:0e:
0f:6f:62:6c:52:2b:f9:18:84:26:86:7e:eb:2a:23:bb:1c:b4:
2e:8b:79:2c:d9:d0:4f:de:34:b8:ea:51:28:cc:ce:4b:2f:9b:
a4:bf:10:6b:e1:eb:cc:d7:8f:ca:24:64:62:ba:36:4d:a0:d4:
83:94:76:cc:87:cf:5e:b2:a2:ab:15:8e:f6:c9:e4:61:98:e1:
39:62:0a:42:5d:f5:fc:32:10:16:22:23:f2:e4:29:d1:2a:9a:
fa:9c:9e:50:b7:73:f0:c1:08:be:5d:f5:da:9a:e5:b6:c9:55:
41:16:03:a9:21:f8:02:d2:68:94:cf:6c:4d:1b:3f:40:aa:3d:
23:a1:c9:72:32:6b:fc:58:73:88:54:91:2b:19:16:c9:d4:b2:
bf:cb:24:11:c8:d9:f2:d5:ca:d0:6c:18:56:68:a3:ca:0f:55:
af:78:da:0d:49:3a:42:89:c2:35:ee:2e:68:ec:93:be:ee:cc:
65:4f:3d:26:4d:46:3f:c2:85:00:e3:c3:66:53:7c:a2:42:62:
69:28:4a:bd:87:31:db:c9:cd:27:ef:01:01:00:55:75:37:7e:
e7:33:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:28:53 2026 by rpki-client