
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft (raw, json)
Hash identifier: 3r1hnB9gEFrlvTu+Getqw+x71HizMhFkvYOaGCVMFYw=
Subject key identifier: CC:1F:FC:BC:D7:C2:42:7B:6F:BB:14:BD:E0:D6:86:8A:84:E8:01:9A
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial: 0334
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
Manifest number: 031E
Signing time: Wed 13 May 2026 01:22:04 +0000
Manifest this update: Wed 13 May 2026 01:22:04 +0000
Manifest next update: Wed 20 May 2026 01:22:04 +0000
Files and hashes: 1: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl (hash: 47idQC8CbZ8zam+ZByczeyTUUYl1Wx2wJdX0vICSuXo=)
2: 1BB90D46DABA11F0A08D9BA06CD3641D.roa (hash: 7sE/4U476Hc/mgcr6agMQHrBpEwfsvBVQ9XVXdE0iPw=)
3: F2FD03E4CB3211F08B73F33CC4F9AE02.roa (hash: XbDlXjkT6B/0pKZNJe/T0DRFMQ69K8sgLZCTuOzQfWs=)
4: 97FE22F2DA4B11F0BA2C614F91D3641D.roa (hash: meSaXfy9Mn0t+YNYp1oUPT5CPQbfKIf4ebcPD5fFufY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Validity
Not Before: May 13 01:22:04 2026 GMT
Not After : May 20 01:22:04 2026 GMT
Subject: CN=6a03d23c-884c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:32:89:72:ac:1e:68:4f:0d:d3:e4:e4:d2:
89:9b:3f:48:4b:52:e0:0b:35:a3:ea:98:64:3f:76:
7a:0a:ac:fd:15:11:b1:17:e5:c7:8d:e2:8f:8c:d6:
85:fd:64:eb:13:c1:f5:40:5e:99:ae:c1:ad:bc:98:
90:f4:e9:01:67:ee:33:a4:40:a6:cf:94:f7:9a:bb:
de:01:21:8e:30:15:c9:11:f3:cf:99:8b:49:6d:d6:
b8:95:16:24:ba:db:5c:44:61:3a:f6:df:89:e0:3c:
ad:6c:2a:70:3d:38:bc:8c:91:42:a4:c8:93:a0:31:
a5:02:16:b5:fe:36:3a:c1:35:83:aa:a7:9e:75:43:
a4:b5:67:38:e2:5a:f3:d6:7a:ec:81:3c:ca:e6:d0:
2f:20:94:4b:c7:94:58:91:ef:a1:d9:ce:fb:c8:c7:
45:38:75:0a:62:0c:1e:b6:24:8c:e3:cf:ab:b2:ca:
ee:8b:e1:44:d4:dd:0c:9b:1d:de:56:9b:3a:57:7a:
80:74:c9:15:10:75:30:e3:75:ba:01:12:f4:4a:29:
84:97:8f:8a:f2:4e:3f:b7:ab:07:04:a3:c1:d8:5e:
0c:4f:9f:23:6e:95:bc:ac:bd:97:8d:23:06:bc:4a:
1f:4d:0b:fc:ac:ec:bd:fc:b8:32:2f:18:c5:d7:c0:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1F:FC:BC:D7:C2:42:7B:6F:BB:14:BD:E0:D6:86:8A:84:E8:01:9A
X509v3 Authority Key Identifier:
keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c6:ee:a1:f0:1b:a6:5a:5c:4c:f7:bb:db:e4:ef:99:33:59:
82:f2:78:84:8b:e6:02:d5:d7:ae:6f:6a:f2:36:4f:94:c4:99:
47:d2:09:61:dc:4b:de:2a:ff:ed:58:3e:9a:d2:97:20:93:d0:
1e:3e:f2:ec:bc:7c:b6:ac:17:4c:9d:b5:0a:5a:5a:a9:fe:c8:
b5:99:ef:f0:3f:d2:06:14:48:40:c9:7b:4d:2b:40:bd:43:83:
38:a5:6d:6c:99:44:73:18:c9:3f:bb:fd:9f:39:79:1a:b0:37:
bd:c6:03:81:71:6b:a2:a2:1d:00:f4:23:3e:1e:1e:a7:84:7d:
96:e4:03:f7:c2:35:a2:78:61:8e:b4:08:c8:7e:47:95:aa:a6:
c9:36:33:bc:c1:ab:b6:a2:72:5a:a1:dc:a0:4e:f6:9d:ba:ef:
87:0c:3f:df:76:b8:5e:05:3b:41:68:a1:0e:24:4d:58:c6:3c:
79:de:bc:be:96:8b:98:65:b5:34:0e:23:f2:da:b4:1d:09:fd:
53:cd:aa:a6:96:f9:fe:7c:07:4b:e5:4f:f4:70:d1:2c:95:c3:
1a:bc:bd:c9:a6:43:48:95:17:96:e9:cf:69:64:9b:fa:47:f3:
33:a3:d9:15:6e:8e:23:e5:2b:2a:54:b9:c5:42:21:a3:49:43:
c7:d0:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:16:16 2026 by rpki-client