
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
File: -c2wYYjVT9E3MDC5IMjkRdstPVc.mft (raw, json)
Hash identifier: XsRuDaohhV/vqDy4NgAJbEFE7naIdcbTbefwcCOnbDY=
Subject key identifier: E0:66:7A:D1:9B:3B:99:39:D3:FB:7B:E5:00:23:C4:22:C9:0B:60:CB
Authority key identifier: F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57
Certificate issuer: /CN=A91A99F8/serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
Certificate serial: E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
Manifest number: E0
Signing time: Mon 11 May 2026 06:48:04 +0000
Manifest this update: Mon 11 May 2026 06:48:03 +0000
Manifest next update: Mon 18 May 2026 06:48:03 +0000
Files and hashes: 1: -c2wYYjVT9E3MDC5IMjkRdstPVc.crl (hash: fPfDuKV2vFXMm8KYUh50Kc8P1UD7gFcehm1OrjOmDM8=)
2: C4D0CEECACF611F0AC34117FC4F9AE02.roa (hash: FiHQ8LCYnnxAYhB+CVfO9AnLMeg+kwDxPRYRsj7xuLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl
rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A99F8, serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
Validity
Not Before: May 11 06:48:03 2026 GMT
Not After : May 18 06:48:03 2026 GMT
Subject: CN=6a017ba4-f647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:8c:7a:25:ac:78:94:94:eb:ed:52:01:f8:
e3:28:db:c1:c0:28:07:2f:95:9a:0d:68:3e:6c:9f:
c6:6d:f3:8a:93:f4:ed:27:2d:d1:65:ab:40:45:e7:
60:76:7f:fb:80:5a:ff:03:f1:94:b5:38:8c:79:ba:
86:cd:21:f0:06:c2:a0:4c:2d:db:29:0c:08:0e:2d:
f5:a1:63:f7:4e:de:f0:7d:94:80:32:ea:ad:b2:ff:
41:d8:61:22:73:fe:27:61:c2:f2:c7:ae:86:c1:66:
6d:f5:bb:aa:50:3c:16:0c:9e:49:a5:1c:a7:f8:1b:
15:14:30:ea:3c:63:d8:36:15:38:55:48:3d:ae:6e:
f9:75:04:c8:18:46:49:9d:18:7f:c0:27:f8:72:af:
32:0a:1d:21:6d:4a:6a:82:8f:27:f0:51:74:36:9f:
96:f2:03:a6:66:23:7a:ef:1c:5b:f9:28:e0:8f:e9:
a1:f7:49:b9:12:98:a6:7f:7d:66:5f:99:ca:a2:d0:
af:c8:f5:99:b6:73:8d:5a:25:be:98:3c:3e:67:a2:
7c:df:5e:f7:a2:cf:7b:d0:66:f6:f9:e0:a3:e1:5f:
c6:14:f7:bd:88:8b:09:ce:9d:9c:64:64:0e:7b:16:
31:43:e8:34:56:16:54:63:2a:18:93:ab:22:fa:d9:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:66:7A:D1:9B:3B:99:39:D3:FB:7B:E5:00:23:C4:22:C9:0B:60:CB
X509v3 Authority Key Identifier:
keyid:F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:22:29:c4:33:5d:64:4a:a3:e2:e3:9b:fc:32:a0:70:ec:e1:
33:22:2b:68:e6:d9:9d:c1:2a:29:0b:fa:1b:fa:b4:6e:8e:e8:
b3:d0:37:1e:f4:1b:52:ec:a1:4a:f2:ff:18:85:92:49:c3:97:
5f:0c:14:4b:22:2d:0d:80:04:5e:8e:57:d9:fe:fc:f7:da:f8:
9c:2c:36:27:0d:18:2d:53:24:44:51:c8:d9:69:ff:e2:8a:9d:
eb:4c:1f:95:5f:00:40:03:d5:a2:ac:5a:2a:bf:90:3f:5f:10:
ab:f3:87:32:45:64:a4:84:f4:56:33:2d:1c:63:14:2f:21:2d:
e4:d7:dd:18:50:a0:32:64:a4:67:6f:ba:f0:76:66:1f:a2:4c:
45:d3:97:e7:53:89:cb:ec:22:bf:37:af:0b:c7:3b:19:55:8c:
fe:3f:7d:79:1b:60:e1:ad:c4:f5:73:84:f6:88:8b:95:a3:04:
82:d8:69:da:ff:cc:dc:17:93:28:84:54:77:22:a2:b6:e8:cd:
eb:01:c8:01:4f:a4:67:06:38:fc:55:e9:03:4c:fa:c6:63:2a:
6e:d1:1f:2f:16:fd:fb:1a:58:f9:ff:9f:7d:15:18:a6:99:c9:
f5:9a:a2:9c:ab:bd:02:9d:44:e0:bd:b8:81:09:4a:6a:42:a4:
70:ca:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:33 2026 by rpki-client