
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json)
Hash identifier: MF97YW034TsJrSvBbJI3ErVOSaZLIyRTMMlE1snsFwA=
Subject key identifier: FF:94:70:AC:75:6E:9A:CB:09:CC:33:ED:E3:83:6D:9E:77:2B:DB:F4
Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Certificate serial: 0DD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
Manifest number: 0DC8
Signing time: Tue 12 May 2026 17:56:00 +0000
Manifest this update: Tue 12 May 2026 17:55:59 +0000
Manifest next update: Tue 19 May 2026 17:55:59 +0000
Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: FldowceXwdR/RhKtX/YFJBeLR2YNFrFUimvxM2FdRnw=)
2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: 5UiluviLkvdmrPxj6Fg50iGwlauvTqLugtpFjTJWRPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3543 (0xdd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Validity
Not Before: May 12 17:55:59 2026 GMT
Not After : May 19 17:55:59 2026 GMT
Subject: CN=6a0369b0-18a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:f3:07:0a:0c:cd:80:91:dc:c6:ed:00:db:
2c:85:91:b1:2a:fc:a5:e0:2a:86:b9:ae:4c:9b:b8:
25:85:79:9d:38:60:48:33:65:ab:09:f7:56:41:af:
b2:19:40:90:7e:4a:81:10:be:a3:7d:0e:b9:44:7a:
c0:c0:6c:e2:3c:39:ad:8a:d4:b7:4e:17:33:78:93:
ab:5f:a5:a2:3b:48:a6:a5:c6:cd:a0:3e:8a:f8:5b:
6d:de:4c:da:0a:03:40:20:58:88:1e:7a:a8:f8:55:
00:c3:d7:06:6b:57:d5:7f:c3:1c:11:1b:48:40:1c:
7c:b7:79:3b:69:05:9a:cf:fe:57:45:57:b9:74:a7:
d2:47:d7:95:51:70:6a:ee:e5:01:bf:98:80:4c:cb:
21:a4:d4:c2:3d:40:eb:e7:55:a1:49:8b:75:05:c6:
07:0e:b7:66:21:ec:b7:00:dc:0e:32:e5:5a:48:3c:
89:45:42:ec:b6:08:17:21:03:fc:b5:27:56:92:d0:
e0:cb:23:c6:2b:cc:62:ee:1c:80:47:85:3f:e7:8c:
cd:1c:47:d6:1f:f5:0f:15:7e:b4:63:3c:fe:c5:0a:
bb:7c:f6:3e:c9:44:22:e6:de:02:f8:35:37:b8:5d:
aa:dd:56:6e:e0:fa:f5:07:a7:a6:ee:36:37:5e:f8:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:94:70:AC:75:6E:9A:CB:09:CC:33:ED:E3:83:6D:9E:77:2B:DB:F4
X509v3 Authority Key Identifier:
keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:82:38:9d:54:6f:97:4f:07:86:c0:55:aa:cb:b5:08:8e:0a:
e1:d4:5d:61:11:1f:6c:8b:8c:06:73:d6:a0:1d:79:43:82:d2:
dd:ce:e6:40:fa:8e:4f:5b:1c:f2:61:36:b7:bf:b7:89:77:eb:
3a:c1:cc:f1:c3:1e:d5:c3:fa:d8:6c:9e:8c:2b:73:21:63:94:
66:10:59:df:e3:d2:70:4a:69:f4:fc:86:5a:4a:71:3c:ad:af:
17:f2:2d:a8:ba:83:09:e5:69:e1:e4:e8:bc:dc:72:b8:ad:6b:
6a:df:62:5e:3d:67:fb:2a:0e:4a:32:55:0e:c6:63:f8:5a:3c:
a5:62:fc:54:a3:d6:98:bd:a0:a2:c0:b5:8a:98:7e:4d:2a:9d:
aa:2a:45:87:68:7f:4a:01:0d:55:e5:7e:b8:12:85:a0:ea:1c:
35:11:bc:37:c3:91:72:05:17:9a:ab:91:d1:0e:dc:95:19:4c:
4d:fd:af:26:65:f3:b8:65:17:ab:62:65:d3:74:8b:89:f6:ba:
6e:81:56:09:e4:97:cb:c0:bc:05:48:55:8c:c9:75:9a:5d:f9:
4b:b2:16:d4:7f:a6:a3:29:7f:20:81:76:50:0e:6f:d9:20:c1:
ef:ec:45:f8:2f:17:90:c8:40:87:60:12:cc:40:e3:1c:4d:cf:
6a:4d:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:25:00 2026 by rpki-client