
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
File: bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json)
Hash identifier: UqfevMC0U7oiCcjfkLpUPYSyUn4katm0n5lZ/QalaD0=
Subject key identifier: 99:1D:2A:61:6F:5B:52:87:12:2E:25:12:8E:2F:22:E4:93:C1:0B:9A
Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
Certificate issuer: /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
Manifest number: 4E
Signing time: Mon 11 May 2026 08:27:12 +0000
Manifest this update: Mon 11 May 2026 08:27:11 +0000
Manifest next update: Mon 18 May 2026 08:27:11 +0000
Files and hashes: 1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: n7W1lz/aMQ8l9F2IdhKMKhCwzR8Bu0ihrxKrAUxYuKk=)
2: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=)
3: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Validity
Not Before: May 11 08:27:11 2026 GMT
Not After : May 18 08:27:11 2026 GMT
Subject: CN=6a0192e0-f653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:5f:8a:16:38:c9:20:9a:ae:57:48:9c:29:
53:e0:db:df:55:16:0a:73:6d:fe:b2:81:dc:71:61:
6c:64:da:df:c0:5a:48:85:2a:a5:a6:66:7d:28:77:
3a:53:de:94:1d:c7:b0:90:ec:ea:d8:9e:dc:60:a7:
4d:f6:6e:81:97:78:25:73:fc:28:bf:53:a8:46:5c:
44:81:86:95:59:dc:8f:be:ed:e6:09:9d:43:99:d4:
4d:28:c5:26:8f:6c:99:74:0a:bd:3f:27:a4:60:6b:
06:9f:22:b2:70:19:37:68:92:6a:5d:4d:dd:fa:af:
7f:b9:0f:13:b6:db:7f:fc:69:b3:e1:45:37:5e:03:
7d:cc:f3:d9:9b:b0:a1:c8:47:e4:8e:e4:16:ed:ed:
8c:1b:e2:ef:4a:81:c1:5b:80:2b:f6:e9:ca:16:db:
1c:0d:87:b4:82:aa:3c:a1:d6:aa:aa:35:a2:ec:22:
78:36:3c:99:dd:81:cf:1b:c5:24:c4:84:e6:71:05:
37:1b:96:fe:98:57:8b:c2:76:e9:2e:ac:57:cc:b5:
38:ce:3c:2d:0b:6b:d0:c4:5e:56:e9:ff:8d:ad:c9:
97:4f:d2:0d:2a:93:db:87:8e:ba:cb:8a:12:2e:08:
cc:7c:b1:3c:a8:97:7b:4a:64:9f:86:7f:59:62:35:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1D:2A:61:6F:5B:52:87:12:2E:25:12:8E:2F:22:E4:93:C1:0B:9A
X509v3 Authority Key Identifier:
keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:70:c3:e1:93:b5:d1:26:b9:ae:7a:8d:82:63:e1:ef:6c:4a:
12:a9:77:41:e2:2c:28:ec:9d:3b:93:b1:40:92:0e:de:88:cd:
d5:62:24:79:4c:f9:6e:d1:98:90:c6:f0:4a:2c:ea:4d:27:cc:
dd:f9:5f:02:30:c0:35:2d:fb:7e:ed:4b:d9:4c:f5:20:97:b6:
eb:70:07:37:42:04:f1:3f:7c:fd:01:ca:59:64:b1:a8:36:3b:
f0:71:9d:a5:d3:de:c6:cb:b3:62:8c:48:70:96:4f:5e:de:44:
aa:90:a3:85:39:e9:c3:a4:94:73:b9:8b:57:4c:08:0c:7c:29:
fe:45:3a:c3:a6:5e:2a:b2:fc:78:62:4a:d5:6d:4b:0f:92:c0:
0d:4b:9f:ab:aa:48:2f:e3:e8:10:bf:f9:ba:b4:77:c4:7f:f1:
c6:7e:35:f7:3b:77:19:ed:e9:23:c5:8f:57:3e:35:18:76:b2:
a5:20:83:b0:d1:55:b5:7a:df:39:18:32:97:e1:f3:55:0b:68:
ce:af:cf:05:30:71:53:9c:bd:e0:8b:2d:e4:bf:d2:ae:2f:61:
e2:28:9c:b3:c4:d8:ca:6c:11:84:07:00:8d:61:f4:93:e2:99:
e5:0b:d0:5a:93:04:4e:16:ca:5c:bf:ef:4b:86:8f:de:66:4e:
56:67:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:36 2026 by rpki-client