
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json)
Hash identifier: /b2Ycq9qjhbGopbORe6VOvys+PCe2lCz3og+MMOEEa0=
Subject key identifier: DE:AD:65:61:C2:C0:5D:5F:D9:F1:EB:ED:99:3B:BF:78:F6:09:2F:22
Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Certificate serial: 0F9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
Manifest number: 0F83
Signing time: Tue 12 May 2026 17:33:59 +0000
Manifest this update: Tue 12 May 2026 17:33:58 +0000
Manifest next update: Tue 19 May 2026 17:33:58 +0000
Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: 1qiH+C/GAo+TfKHKwUCUEd/rntQZbWTPnC01RUb7Dz0=)
2: 64554290C9F611ED9853C583C4F9AE02.roa (hash: agpfPSJGjVQ5csFAXUqTBwmD9lbAU8gkO4ush2slIeA=)
3: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: mUPMtWwzY3i1DNxfpfsJiEN2KmimOV1tl1pdhwHNds8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl
rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3997 (0xf9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Validity
Not Before: May 12 17:33:58 2026 GMT
Not After : May 19 17:33:58 2026 GMT
Subject: CN=6a036486-be02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:ae:91:1b:28:db:b5:e9:00:9e:02:1d:14:
f1:85:21:4a:be:f2:50:f3:4f:25:de:84:8d:da:be:
64:3a:63:02:50:10:e9:e5:5b:79:86:4f:67:dc:47:
dc:37:46:06:6f:09:e3:a4:90:f7:a6:06:6c:df:d8:
2b:f1:76:a0:ce:8d:51:d0:8d:dc:c1:6f:57:89:81:
69:3c:a6:bf:a2:71:43:61:a4:5b:36:7f:11:40:9d:
52:b1:8e:72:45:dc:72:32:50:5e:96:70:fd:05:7a:
cf:1e:c4:55:35:31:8c:ee:9c:74:49:2f:42:04:83:
ec:94:a8:84:2d:b1:4e:a3:50:90:4d:8d:5e:8f:57:
65:d0:82:ac:dd:86:72:16:a1:c5:5d:cc:99:0b:9f:
33:e1:8d:aa:67:54:f8:df:c3:86:7d:1e:ba:7a:ab:
cd:91:1f:b7:1a:9f:19:c6:5e:68:5c:8c:4a:ea:e0:
f1:46:b5:a5:90:42:10:41:dd:f8:31:d6:fe:bd:a2:
01:43:8f:02:9d:6a:9e:5f:2a:54:be:14:b0:db:b3:
d8:4d:3a:2e:7b:39:83:6d:cd:3d:a3:57:00:ba:b4:
b0:68:12:11:c7:11:2a:2f:1a:e7:90:68:b1:53:65:
fc:80:af:99:26:42:87:4a:65:52:89:83:65:66:4f:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:65:61:C2:C0:5D:5F:D9:F1:EB:ED:99:3B:BF:78:F6:09:2F:22
X509v3 Authority Key Identifier:
keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:5d:86:de:8a:ec:8c:5d:7b:ca:c6:b9:e2:a6:d0:54:9b:0a:
26:3b:0b:25:9f:34:3d:d6:a5:06:fd:96:15:b2:7e:67:2f:55:
52:0c:57:ca:40:78:81:ac:64:9f:9a:af:c5:31:9f:2b:df:72:
5a:b8:61:f0:b6:d7:9e:76:1c:7f:27:05:37:d3:51:18:c8:8d:
a2:f5:7c:0c:3a:61:61:f4:f7:cf:0b:3e:a5:2e:a3:b3:1b:56:
d3:b1:98:ab:d0:fd:6d:28:7c:d7:8a:3d:79:dc:65:e5:d6:64:
0f:9d:de:f5:73:de:8f:e4:eb:90:8d:96:f3:ce:69:32:4b:10:
31:81:db:90:be:cf:ab:c5:4a:02:80:f2:a8:62:f9:7b:9e:26:
34:41:91:30:8b:4c:8b:42:a9:f4:6c:d7:41:95:33:2d:22:12:
ad:d5:c8:98:ab:ad:79:28:28:08:78:4a:2b:51:a6:38:9e:97:
25:33:42:d4:10:1b:2d:a8:9a:6d:61:f2:78:09:97:29:b1:8c:
1b:e6:3c:01:1d:b8:7d:17:1c:70:03:73:54:cc:8b:8e:8f:31:
26:9d:df:0c:0d:4a:89:ec:bf:c3:10:b0:48:bf:7b:7a:b6:79:
32:6e:28:3e:77:16:a5:3a:ed:c9:1d:bc:ac:51:27:8a:47:39:
a2:54:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:46 2026 by rpki-client