
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier: ptnW4FA0QPyyFHZhecEudK/ccCkM0km7bRTwcAoX0nA=
Subject key identifier: C8:28:86:54:24:71:75:AD:6D:7D:84:A1:C5:AF:AD:28:6F:38:AD:07
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number: 012F
Signing time: Wed 13 May 2026 05:38:31 +0000
Manifest this update: Wed 13 May 2026 05:38:30 +0000
Manifest next update: Wed 20 May 2026 05:38:30 +0000
Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: 5hYc+jsuGUMnKgf8T6WU/ooMudVbaF91JeSD1Zv0reU=)
2: 35525B92845611EFB053C341C4F9AE02.roa (hash: nap5DwScCHSxl7+vobvju05szU4kvHjXe5lhp9A3q7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Validity
Not Before: May 13 05:38:30 2026 GMT
Not After : May 20 05:38:30 2026 GMT
Subject: CN=6a040e57-dec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:4c:34:36:87:f0:f4:da:00:1b:9d:84:19:
bd:16:5b:c7:b4:aa:58:5b:68:e9:37:b8:e9:31:46:
e0:b8:2a:14:59:32:88:b1:c7:0a:cd:bc:7d:84:a4:
32:ee:62:36:aa:25:fa:ed:ef:5d:3f:2e:71:29:77:
ec:d5:1a:c2:cd:9a:32:70:ec:b0:95:db:8c:87:c4:
54:8d:c3:2e:72:43:18:0b:13:68:f4:8a:82:e8:45:
56:a3:65:76:94:a6:5a:c9:bb:52:fa:ba:55:60:d6:
e6:e9:c6:0b:d0:c0:6c:e9:5a:83:7b:af:c7:0e:fb:
3d:74:b4:0e:80:9e:48:c5:28:6a:f4:96:e4:93:f9:
06:3c:51:87:98:7d:90:42:f2:89:61:70:17:94:9c:
d9:ca:91:53:76:2e:2c:57:33:b6:70:5c:cd:8c:70:
03:e9:85:b6:6b:c5:64:c6:d8:05:76:dd:b0:43:99:
fa:61:9a:1b:14:e2:52:e7:73:9a:e8:b4:58:3b:c0:
ca:20:01:3a:ed:c5:f3:b8:3b:df:9e:49:1d:c0:8e:
3a:10:82:f0:d7:38:48:96:9b:65:5c:8f:c7:b3:bd:
7c:83:a9:b2:64:9b:f9:59:73:aa:ef:67:b0:f2:57:
43:4a:92:53:f2:36:e9:c0:10:1e:b4:07:e1:c1:a7:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:86:54:24:71:75:AD:6D:7D:84:A1:C5:AF:AD:28:6F:38:AD:07
X509v3 Authority Key Identifier:
keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:d8:83:80:3c:60:ff:b2:47:40:91:bc:74:53:54:29:41:7a:
fe:b3:9b:0e:e4:30:8c:d0:53:48:fc:b0:9c:1d:55:26:05:1f:
6e:93:9f:aa:4e:c9:57:0a:21:1f:59:0b:dc:77:94:d3:ec:87:
ce:ae:92:80:80:5c:8e:f3:36:e8:9b:c7:f1:23:2f:c0:27:02:
4c:99:24:dd:4f:99:ec:d9:82:33:47:b0:1a:ed:60:d5:e9:92:
52:dd:36:fd:51:e9:fa:f7:ad:3c:09:97:4c:42:a0:e8:59:33:
e7:d8:f4:fc:4c:13:f1:73:be:f9:33:bf:77:cf:9b:b8:e6:ac:
d6:e7:a4:48:a7:52:11:4b:9a:28:ff:43:72:98:1e:9f:24:4a:
62:8f:14:0a:cf:3e:70:f3:46:84:fc:43:e3:dc:9b:a0:39:09:
3c:2a:e3:8c:02:15:7d:90:cf:c5:f6:39:19:01:83:67:e0:62:
a3:f1:18:55:24:06:b1:1d:fd:9f:48:34:9a:42:22:d5:7e:6f:
06:00:1d:e7:2a:00:6e:8f:d4:a2:ed:c5:19:b3:20:3f:9f:b5:
b8:e9:23:ad:3f:c8:2a:0e:8b:ba:6e:85:45:91:c7:62:79:d2:
a9:f6:91:54:c0:98:57:83:fd:83:8c:7a:41:83:d0:bd:6b:c6:
c8:bc:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:07 2026 by rpki-client