
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier: X8TbcbMOGADaquDY+cm5afHFdtyxAC7HEEgVjLe8mpI=
Subject key identifier: 68:6D:B5:83:7B:DD:B2:C8:3B:D9:B0:49:6D:9C:7B:FF:BB:7F:3A:42
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number: 0323
Signing time: Wed 13 May 2026 01:16:40 +0000
Manifest this update: Wed 13 May 2026 01:16:40 +0000
Manifest next update: Wed 20 May 2026 01:16:40 +0000
Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: ulfFUjWTlsNUBz4EavpYqdhO4XtEVNpv/qiPLk9wtuE=)
2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: 9Ep6t3AG8CiRPlIf3Yv4Y03998NV9+HGAvq1KC0HiaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Validity
Not Before: May 13 01:16:40 2026 GMT
Not After : May 20 01:16:40 2026 GMT
Subject: CN=6a03d0f8-6522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:0d:94:39:3a:9a:45:ba:67:94:66:a9:a0:
7e:c3:f5:96:1d:1a:29:b5:36:e2:b3:76:82:f7:4b:
5c:54:49:89:ba:bc:67:cb:56:40:bc:45:ed:cc:5e:
2e:40:db:f4:20:f5:d2:75:b5:1a:b6:82:67:44:cf:
a2:c1:4e:b4:2a:36:d9:8c:9b:db:d3:bd:d6:b9:5a:
c3:3b:a9:d2:71:ec:de:7d:f8:ed:62:85:71:ac:71:
05:7e:f8:fb:13:f6:81:56:9f:f0:76:7c:d6:fc:15:
ab:56:26:db:c4:62:37:5d:e5:6b:52:dd:80:ac:50:
21:ab:f0:74:e2:9b:d7:d2:2d:64:fa:33:d3:ef:da:
ea:46:ed:b9:56:76:a1:46:b8:d5:bb:a4:65:de:3f:
e2:45:e0:4e:eb:64:38:5b:24:7f:0c:22:3f:3b:c4:
91:ba:f9:8b:7c:ac:44:ec:49:27:bd:1c:29:44:d9:
a7:56:57:0f:3d:93:a2:98:92:73:05:d5:dc:a3:71:
ee:41:b2:16:47:fc:56:da:7f:5b:4c:31:59:c7:60:
5f:cf:ff:6d:a4:c5:4a:48:22:62:3b:bb:aa:71:aa:
5c:97:32:01:5a:56:2a:70:40:a2:79:a2:32:52:81:
42:28:c5:c8:78:ba:29:bf:d7:b5:a7:02:b0:23:e2:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:B5:83:7B:DD:B2:C8:3B:D9:B0:49:6D:9C:7B:FF:BB:7F:3A:42
X509v3 Authority Key Identifier:
keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bd:fc:3f:9d:46:58:b9:c6:7d:a0:26:5d:12:d4:61:49:ab:
fe:41:4b:29:71:d5:ce:71:24:a3:82:a9:7d:62:41:6f:e1:23:
f6:96:70:6d:e4:98:0d:12:d3:40:ed:a5:9a:71:98:c0:fa:11:
08:16:60:14:c1:db:2f:a5:e1:7a:f8:9e:a5:04:7e:15:11:aa:
c5:08:08:a3:f4:6d:33:60:01:ff:43:2d:40:31:52:1d:34:00:
e7:29:d5:78:a1:cf:75:b8:d1:b0:69:71:21:32:fc:5b:3f:e8:
17:cb:b2:b5:c3:fb:76:53:d5:bc:8e:49:61:f0:f5:66:f8:80:
d8:cf:b9:d3:40:69:2b:b7:50:be:7d:5a:91:77:2c:43:52:bd:
2d:e0:aa:f6:bd:be:95:9e:3b:68:f7:ef:10:43:44:bc:52:5c:
95:ff:26:39:1b:aa:c3:01:d8:b8:33:3c:38:6b:92:44:f7:f4:
b9:4a:d2:3c:04:ab:69:39:13:2e:c9:bf:67:ec:0e:1e:40:1e:
16:1d:d5:75:ca:98:1c:53:f8:09:79:eb:55:e5:52:16:f4:c4:
c6:98:02:a8:50:00:f7:f9:df:87:e0:bb:7d:bb:20:bc:b1:b3:
b5:a2:9c:18:82:5a:a2:d9:c8:62:b8:d5:84:c9:7f:bc:e6:f6:
db:da:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:23 2026 by rpki-client