
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier: PgoB/8WCHOiaAXBqy+VXkuMhLh34XzWNUuisW6dRnks=
Subject key identifier: 16:42:CD:AE:C2:EA:94:B1:AC:2F:74:C4:6A:B4:98:BA:AD:4F:43:EC
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number: 01EE
Signing time: Mon 11 May 2026 03:21:07 +0000
Manifest this update: Mon 11 May 2026 03:21:06 +0000
Manifest next update: Mon 18 May 2026 03:21:06 +0000
Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: MQJbFdeJ3FhB3RUP4kvxahkO5ZbYjUqYGBPZZikXGcc=)
2: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: Dn+JL4IFF8F6udJCXJBfFR0N/JW0riYqK/noh4aF+Rg=)
3: 71014290D87411EE97234F5CC4F9AE02.roa (hash: 6S2UbDPQhc0s/ttHg30hgcMezorQYndA+hy2IrwcJyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: May 11 03:21:06 2026 GMT
Not After : May 18 03:21:06 2026 GMT
Subject: CN=6a014b23-3966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:d2:dd:e6:5c:0f:00:d0:62:d8:4a:4c:6a:
a0:62:95:76:d0:4c:52:d7:8d:0d:eb:a6:aa:05:b3:
e8:b2:38:4b:14:89:0e:2b:8e:67:59:7b:02:ea:a4:
7f:3e:ab:b5:ed:e5:37:63:d2:57:38:1f:39:57:ce:
bd:62:76:0d:78:f4:c9:ab:3e:7f:84:67:7e:4d:4f:
f1:aa:e7:c7:fb:13:14:a8:98:40:1c:fc:d7:df:31:
14:f2:6f:53:65:03:70:c4:e0:b2:fa:74:44:bf:1d:
d9:f5:a0:2b:6c:18:59:a7:fa:e1:4d:9d:2a:e2:7f:
ec:6d:55:35:d1:eb:7c:23:36:fa:db:03:57:88:ad:
77:ce:2d:c4:aa:b6:e8:17:ef:01:8b:52:52:5c:71:
fe:2c:bd:c8:93:f6:b9:8e:d4:9d:43:54:4e:a1:7e:
98:08:17:ee:70:37:c5:98:15:e7:d6:2b:df:7d:04:
7d:7a:5e:d2:1c:d2:0a:a6:05:28:41:a3:65:1f:8e:
55:88:72:e8:8a:93:fd:f3:48:39:9e:08:25:c9:ad:
27:3d:49:5e:23:59:38:7d:ba:6b:0f:0d:59:fa:7e:
c5:4c:6e:54:64:78:62:ea:a1:56:ae:3a:91:9f:4e:
68:73:22:99:2c:c8:45:62:d9:6a:2b:75:13:1e:0d:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:CD:AE:C2:EA:94:B1:AC:2F:74:C4:6A:B4:98:BA:AD:4F:43:EC
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:2e:b9:7d:15:db:ed:00:e4:cb:3c:6e:05:27:4f:c5:50:9e:
aa:e4:38:76:7c:77:3f:2a:a4:6d:67:8c:b0:e5:e2:3c:3c:e1:
84:cd:f5:80:79:3f:6b:14:7b:a9:8b:ae:3f:e3:b0:82:f8:7c:
56:e7:20:23:16:6d:bf:88:06:0f:cd:6d:7e:f2:c7:9b:35:c2:
66:52:ff:b6:e8:aa:6b:2c:eb:71:01:0d:8e:51:f0:34:ec:72:
7f:5d:a0:e3:01:91:a1:5f:d8:e4:ce:bc:ad:b4:b5:0b:0a:d8:
25:fd:7d:ac:4c:35:cd:84:2e:95:f2:07:a3:09:e4:ef:10:b0:
66:84:a7:f4:f6:b6:31:9b:91:f9:0c:04:c9:5c:a0:ed:a3:6f:
bd:a5:14:57:9c:19:d8:8b:1e:52:38:43:c5:ef:01:bc:88:59:
a2:74:b4:56:9e:dc:85:7a:6e:60:1c:46:2d:7e:31:43:3e:1b:
19:f3:41:87:b8:c4:bb:0d:c4:59:e3:76:54:98:d0:50:67:49:
67:36:c3:ed:38:7f:7b:60:3c:74:f1:ce:30:6e:c7:cb:ad:5f:
bf:20:ad:2e:49:9b:3f:7d:f8:02:3a:78:18:3c:73:72:d8:02:
88:78:3b:71:c2:53:4e:28:87:5a:5e:9b:35:66:1a:bf:b6:e4:
40:fe:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:40 2026 by rpki-client