
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File: 0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier: KiRiKlUa7R59xAAuptyu87JRGsJf9nKxm3jzjaYjYeE=
Subject key identifier: C6:9C:1D:FC:CF:20:54:E1:C7:0C:BF:61:1F:F9:D5:6A:A9:99:44:F9
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer: /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial: 348E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number: 347C
Signing time: Tue 12 May 2026 15:19:34 +0000
Manifest this update: Tue 12 May 2026 15:19:34 +0000
Manifest next update: Tue 19 May 2026 15:19:34 +0000
Files and hashes: 1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: MQPw5lythLI+EJgy49MMLd/0L9xk2s/8HJ1R1Eo5fdg=)
2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ej83i8NuEYKasou7W/9D745hYaGsqd2oMKEiRlHzF4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13454 (0x348e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Validity
Not Before: May 12 15:19:34 2026 GMT
Not After : May 19 15:19:34 2026 GMT
Subject: CN=6a034506-ad50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:fb:a4:7c:b9:05:da:bb:77:73:90:c9:76:
15:f1:98:d2:d4:19:3b:f1:18:a5:71:d5:70:60:50:
ac:c8:86:aa:bc:56:a6:37:37:1d:7d:5a:e7:e3:b8:
37:86:6a:eb:f6:b7:8b:04:72:b3:50:d4:7f:19:1c:
bc:58:90:6a:05:4a:4b:bc:9f:65:4c:d8:eb:9c:c0:
c4:cd:76:36:d2:e8:9c:d1:c8:08:2a:6c:07:b5:2c:
ac:f8:b2:0e:5a:70:07:e0:fe:39:b5:e1:d6:ad:54:
6a:ee:76:d2:c3:d7:a4:75:ca:ce:da:ba:07:9c:f1:
d8:91:c4:46:49:3e:c3:6e:9f:34:13:12:f5:c3:ea:
f9:7a:73:79:39:2a:77:5c:ef:4e:11:c4:7e:52:44:
ad:c5:c6:70:ca:ec:27:46:76:17:7d:59:76:1a:c9:
e5:ec:3b:35:e6:30:c4:56:48:8a:da:91:bb:7d:44:
0d:38:f0:1f:dd:0b:4b:a8:48:eb:93:dd:29:56:25:
43:a8:4a:ae:72:0c:93:7b:81:f5:17:7a:53:19:32:
76:fa:ce:82:a6:d3:44:90:c0:7a:22:6b:df:a2:a7:
12:da:23:06:be:0c:a5:b8:cc:43:b3:08:69:8f:90:
6f:22:78:e3:e5:a1:8f:f5:a6:9a:b7:93:6b:15:80:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9C:1D:FC:CF:20:54:E1:C7:0C:BF:61:1F:F9:D5:6A:A9:99:44:F9
X509v3 Authority Key Identifier:
keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:87:47:a9:e8:87:df:e5:44:19:02:20:a0:de:06:b5:95:c2:
56:fd:a4:6d:b0:95:e4:8d:9f:81:4a:aa:5c:a7:00:b5:e7:4f:
6f:d9:3b:ce:86:ef:8c:b6:93:4f:22:c1:b4:7d:cf:20:3e:cb:
5d:ed:0d:83:76:30:47:c5:30:99:d2:77:76:0b:49:33:d3:02:
be:a4:89:04:bb:5f:c1:95:d0:dd:22:37:f7:f0:b7:25:bd:48:
22:90:e9:0e:d1:5a:93:84:90:5c:21:95:97:c5:d0:a9:b4:fd:
20:06:58:64:e3:a8:72:27:ae:13:14:38:2d:f6:85:78:9b:74:
e2:c3:86:b0:66:bf:98:99:df:0a:ce:b2:f9:19:67:42:3d:84:
2f:4a:33:51:b7:eb:cd:39:af:af:f6:8b:a4:65:5b:7e:34:d1:
0a:48:94:05:f7:b8:af:56:51:25:0d:3b:11:4d:97:b9:79:f9:
58:86:37:71:18:b3:df:5e:8e:8b:0e:64:95:b4:6a:ec:53:8f:
fa:6d:8d:be:d9:f0:9f:2f:3d:81:f9:0e:b4:85:0f:e5:02:7d:
6d:79:66:08:a4:05:fb:56:99:2e:a2:35:65:00:cc:0d:c1:dc:
5b:5b:93:86:c9:94:89:a6:27:8c:e8:52:3a:ae:58:ca:a2:fe:
ac:a8:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:21:15 2026 by rpki-client