
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json)
Hash identifier: uI0RlzTAo40rbzjuShNnYJbVjPS8Sww+mL7S3EZ3niE=
Subject key identifier: 16:FA:E6:BE:26:8A:2E:BA:C7:15:AF:CF:EC:ED:6E:6F:9F:33:D3:B3
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial: 0572
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
Manifest number: 0562
Signing time: Tue 12 May 2026 23:29:17 +0000
Manifest this update: Tue 12 May 2026 23:29:16 +0000
Manifest next update: Tue 19 May 2026 23:29:16 +0000
Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: CW/Bunk1P/Z2X8/GjyLnT21DRhyFrULUYgEe4JMNS64=)
2: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: baibuYWIpr+G/3yWYzUEd75gq0D9onuWC061QPJtxB0=)
3: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: AcOK+or8IBRyx2MYpgbbtYCs/ZUAEOaOnVDcLAu/Hbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Validity
Not Before: May 12 23:29:16 2026 GMT
Not After : May 19 23:29:16 2026 GMT
Subject: CN=6a03b7cc-79d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:b4:c8:7f:7d:59:5e:f9:4a:20:84:ba:ee:
b6:66:fd:a4:4d:fd:ea:37:7d:66:0f:b8:0b:98:46:
13:88:62:af:91:7a:d8:4b:92:37:aa:7d:07:1c:f5:
54:47:20:47:15:fb:01:99:27:93:21:68:bf:c0:0a:
0d:9b:f8:21:dc:64:89:3c:be:54:65:f1:a1:2d:ea:
03:7a:fd:3e:8d:12:5d:d3:9e:c5:89:19:19:da:d0:
18:02:85:24:da:c3:2d:92:6a:c1:18:11:8a:7b:47:
ac:a4:01:23:ef:e4:09:62:d5:0e:84:97:9d:e0:c4:
0d:5c:a3:96:0c:81:cc:56:db:2f:5d:a3:6c:d8:bd:
16:e2:0c:15:43:9b:ca:63:74:9d:a8:4a:be:f7:55:
c4:93:f3:87:51:2b:d6:47:e2:c0:d6:e9:20:81:fe:
9d:0c:60:c0:eb:82:a4:1e:78:b7:0e:4d:da:61:95:
73:a7:52:a8:9a:66:64:9b:04:33:cf:5a:a5:3d:08:
88:8a:b0:8e:8d:8b:7f:9e:74:75:8e:70:05:ac:bc:
92:da:a7:ec:0b:a4:f5:a8:15:50:63:37:f0:ea:3e:
c9:a5:df:71:02:7f:bd:e3:b0:3f:ba:14:20:81:1a:
bb:e5:a4:09:a5:b6:ad:2e:f9:d8:ca:36:39:75:c1:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FA:E6:BE:26:8A:2E:BA:C7:15:AF:CF:EC:ED:6E:6F:9F:33:D3:B3
X509v3 Authority Key Identifier:
keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:60:72:31:d6:2b:0e:10:ac:3c:d1:64:67:d5:58:c8:ad:42:
fb:4b:5c:62:91:e8:51:c0:05:54:eb:4c:7a:0a:30:a7:a4:e4:
e9:04:07:08:2e:c4:5d:da:18:63:87:f4:17:50:70:f0:84:6f:
a2:e9:69:a7:c7:5a:c9:dd:45:6f:43:35:3a:78:51:4c:cb:0f:
73:35:04:2c:3c:bc:fd:bf:5f:c0:92:02:f6:c1:ef:a6:4c:8e:
5b:71:0c:5a:06:7d:a4:62:3c:dc:83:3c:f7:4e:8b:93:ec:1b:
a3:2c:7b:f7:75:f0:5a:46:9a:b8:0b:e5:03:48:96:fb:a9:55:
da:43:96:a7:bb:bd:69:70:42:91:f8:f8:4a:ca:34:8a:f8:3d:
8e:52:11:b3:ef:64:c0:59:8a:8a:c3:f6:d4:5a:2e:74:1c:ff:
58:92:04:16:0f:df:87:7e:28:f1:55:8d:96:a8:cc:db:05:0f:
f2:e7:7b:f0:1d:9d:ca:24:ff:9f:2d:50:d9:15:b2:4d:8c:62:
ee:c9:fa:ad:80:c6:76:6c:6a:13:7b:9e:6d:75:9d:b6:6d:79:
a3:d8:85:b6:64:41:76:68:5c:26:10:42:d2:d3:4c:c2:75:fa:
a6:cb:ac:16:d4:5a:43:5a:16:b8:9e:e8:fc:c2:d7:00:ef:e0:
e5:c2:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:42 2026 by rpki-client