
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json)
Hash identifier: 9B/EWCUkMjbfh6g3xC4vdYKKTePARi64nIiSIuZyfiQ=
Subject key identifier: E6:DD:E8:53:FC:20:C9:22:16:3A:B4:57:25:7A:CE:E2:C8:B0:17:8D
Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Certificate serial: 0709
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
Manifest number: 0700
Signing time: Tue 12 May 2026 22:08:56 +0000
Manifest this update: Tue 12 May 2026 22:08:56 +0000
Manifest next update: Tue 19 May 2026 22:08:56 +0000
Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: 2gLw8dyMiE6lKnwOS1gEGse+F37I7N//G7Zm11RrY6Y=)
2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: Psgba/J6D2Rc4QvTasd4fTFxXwiZJRSLuDPikpsNKlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1801 (0x709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Validity
Not Before: May 12 22:08:56 2026 GMT
Not After : May 19 22:08:56 2026 GMT
Subject: CN=6a03a4f8-581b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:08:24:08:39:b3:04:cc:8b:2b:bb:d4:00:
c7:94:f1:b1:65:39:9f:cd:b7:3e:37:08:f7:80:84:
4f:1a:5f:51:e2:e8:f1:07:35:e1:e8:60:35:8d:dd:
6d:32:75:63:4c:5e:98:b5:1f:51:4f:cd:ea:b9:7d:
8f:35:47:cb:99:f1:06:7b:12:49:68:3e:b9:2c:3b:
53:7b:ad:b8:db:7b:da:3c:58:9c:a0:ce:e5:ad:7b:
3f:bb:54:83:0a:a0:e8:72:00:6e:00:3b:e5:9a:6c:
a2:77:84:29:aa:11:99:5f:33:47:6e:bb:bb:e7:81:
fd:21:6d:4c:52:88:41:94:d3:c6:9b:60:73:a7:ec:
fe:0f:c0:00:6e:be:80:66:f8:9c:86:40:d4:01:f7:
25:76:0b:89:2b:43:1a:f9:58:67:18:18:46:5c:5f:
6e:fc:c0:c3:2d:90:b0:b5:e9:4e:f2:4d:3b:a5:2a:
81:bd:0d:73:e9:b5:65:4c:34:a1:44:54:b8:c5:a6:
60:31:de:e6:a6:14:a0:8a:25:f7:e0:9b:e7:8e:5a:
15:02:36:6b:8b:db:13:d7:59:af:fd:d8:21:10:20:
ee:3d:10:97:3b:f2:ec:72:34:18:ad:8a:01:d4:b6:
1b:94:88:bb:2f:70:9d:a8:ce:ae:a2:ae:23:45:2c:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DD:E8:53:FC:20:C9:22:16:3A:B4:57:25:7A:CE:E2:C8:B0:17:8D
X509v3 Authority Key Identifier:
keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:72:d2:3e:8d:88:41:95:96:a0:f2:b2:fb:40:b0:99:01:95:
59:c4:db:9e:6f:40:1e:e8:36:41:99:b7:a0:30:bb:e2:e9:c0:
82:6f:38:02:33:40:1a:9f:f4:99:d4:90:18:ae:c0:8b:22:72:
e1:c5:24:fb:3d:ae:8a:ac:9d:4a:12:0d:8d:d1:f8:1b:10:59:
45:c2:00:11:2c:29:1e:8d:15:8d:57:b6:e6:ce:13:e8:a5:41:
c6:93:1c:a4:5b:fc:83:e4:4c:56:53:75:76:2c:c0:45:c8:e8:
4a:09:ca:5b:0d:7a:b2:0e:26:41:43:94:38:e1:d7:87:c1:3e:
7a:55:97:ab:84:55:59:d9:bb:82:16:19:a3:74:56:57:b4:a7:
70:08:94:0a:c2:4e:bf:0e:6a:b7:3f:cf:83:99:a2:80:09:c3:
d1:22:0c:4a:3a:63:98:9e:8a:47:04:72:1a:30:48:d3:c6:cd:
1d:a6:fb:68:5a:c2:f7:da:36:67:ce:d4:29:97:a2:6e:e9:79:
ce:fe:f7:17:c2:11:0d:7e:7b:c2:78:60:ce:84:72:09:33:05:
eb:57:f2:71:90:a8:f8:95:6f:db:86:88:77:54:ef:2b:42:f3:
c4:a2:9e:88:90:0d:75:00:00:49:2d:99:ef:be:47:32:87:64:
0d:e1:58:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:37 2026 by rpki-client