
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
File: t3KDxTMROjkeMdlFJxhqz4OZol8.mft (raw, json)
Hash identifier: lOHkKBYXsQxGSpse7pY1GbkHbBZfGiKZfaW0dfHJhGU=
Subject key identifier: E9:B7:5C:6F:C6:5F:34:B8:08:D5:33:FB:86:38:B5:A6:16:70:0A:9C
Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F
Certificate issuer: /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F
Certificate serial: 0BBF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
Manifest number: 0BAF
Signing time: Tue 12 May 2026 19:05:49 +0000
Manifest this update: Tue 12 May 2026 19:05:48 +0000
Manifest next update: Tue 19 May 2026 19:05:48 +0000
Files and hashes: 1: t3KDxTMROjkeMdlFJxhqz4OZol8.crl (hash: worDlqhGQbuOUOOoxxcHeEMl03LEmfp2mFjky8N47ek=)
2: 02F1850E45A611EA81CD145AC4F9AE02.roa (hash: Xbw7WiHhcCBz0XR3p/8uG8mYkaVvHlya0CN2TyJVfiE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl
rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007 (0xbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE4B, serialNumber=B77283C533113A391E31D94527186ACF8399A25F
Validity
Not Before: May 12 19:05:48 2026 GMT
Not After : May 19 19:05:48 2026 GMT
Subject: CN=6a037a0d-4e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:14:98:43:e6:c9:49:38:c3:13:ff:0a:7a:
f2:79:88:5d:1b:d8:23:9c:42:3e:57:fe:e4:9a:4c:
ea:0c:e1:b8:8c:2a:d1:59:5f:c1:7e:56:d8:c8:f5:
9a:19:1a:e9:a4:72:24:58:db:1e:89:b5:ce:b8:a1:
00:5a:fb:c1:bd:71:63:c8:ed:1b:15:e3:e7:ac:9d:
06:93:36:44:a3:46:93:eb:2a:73:9f:00:c7:da:af:
d4:47:67:92:c9:3b:b1:f1:5e:79:aa:20:8d:eb:cd:
29:94:f3:41:71:2d:d9:5a:14:df:57:8b:45:75:89:
e5:6a:c4:13:0b:22:3f:06:3f:1d:e2:7d:e0:f3:08:
3c:e2:5a:2c:cd:e3:11:dd:bd:44:12:f5:a1:11:95:
06:7b:3f:2e:ba:35:cb:17:68:db:6d:ce:e6:45:6c:
e2:75:92:47:a6:85:b4:7e:38:5a:a1:57:66:cb:3e:
c9:cf:ea:64:e6:35:ab:87:ca:56:be:e1:22:d7:d2:
02:fc:89:d8:eb:8e:58:56:f2:c7:33:97:d9:a8:7f:
43:65:15:df:d3:85:93:56:29:ee:91:9e:9e:a7:38:
70:de:ee:73:cb:65:18:24:b8:e3:64:c9:61:7e:15:
98:39:cb:fa:5b:17:90:02:c1:85:dc:a6:d4:e4:52:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B7:5C:6F:C6:5F:34:B8:08:D5:33:FB:86:38:B5:A6:16:70:0A:9C
X509v3 Authority Key Identifier:
keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:e2:3d:dc:ac:db:eb:ea:ce:84:03:98:78:fa:95:3e:62:
01:62:fe:8a:b1:cb:b4:50:bd:66:54:b7:41:86:26:5c:6e:19:
e8:d3:c6:49:71:cf:ec:0f:e2:f8:eb:1d:b1:07:ed:9a:67:1b:
5d:f9:50:47:1c:c1:ff:8d:b4:65:a1:f9:dd:11:c5:23:29:97:
1f:14:96:ef:85:a9:51:9d:1f:b9:04:06:c1:92:68:5b:f4:cc:
3a:68:36:eb:b8:cd:af:3e:4b:82:a7:c7:50:cc:44:b9:bf:a3:
02:b4:90:4b:1b:28:7a:9b:e2:53:89:52:2e:1f:76:37:e4:c8:
ee:32:60:76:bb:58:e5:06:9e:5c:65:04:7d:a3:3e:94:38:f7:
c0:f4:62:8b:f1:7d:5e:cb:df:2b:24:47:37:a6:bf:cd:63:64:
75:7c:b9:17:61:18:30:c2:f0:e7:5f:9d:9a:b3:d8:11:c6:cd:
61:05:03:3e:f0:0f:5a:5d:05:5f:ac:fc:33:d8:8d:0e:47:1c:
7d:fc:a5:33:3f:e0:45:bc:0d:30:88:e0:79:59:f9:c2:28:48:
5f:19:4e:58:9e:29:72:2c:e9:44:b6:0b:2f:de:d9:21:04:1d:
20:33:6b:54:23:90:20:15:ba:0c:05:68:02:73:ad:ff:8e:eb:
88:98:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:40:10 2026 by rpki-client