
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json)
Hash identifier: 6BnMvT4ZcLw1fk6xv4uR6OxBmPCZiHuaPnpgVtj3Baw=
Subject key identifier: 7D:B7:A9:16:45:FE:B4:D5:08:89:B2:58:0C:BD:47:BB:4C:49:7F:21
Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
Manifest number: FB
Signing time: Wed 13 May 2026 06:23:29 +0000
Manifest this update: Wed 13 May 2026 06:23:28 +0000
Manifest next update: Wed 20 May 2026 06:23:28 +0000
Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: 9DIcj2cVptttkbuE7XB/Ktgs47/WwnEaGq88jJuMlNM=)
2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: 8qLxul8XuxEVwOeqRrW614nwBywey9BFtI58Up/eWgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Validity
Not Before: May 13 06:23:28 2026 GMT
Not After : May 20 06:23:28 2026 GMT
Subject: CN=6a0418e1-7672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:61:73:46:db:99:09:f1:eb:ef:3c:4b:bf:
98:ce:dd:ed:18:95:a4:43:d8:e2:26:66:ca:6c:9d:
cb:e8:88:c4:7d:71:c4:d8:73:e0:ae:09:09:33:e1:
c8:42:af:cc:95:f4:47:3f:6d:9e:f4:48:1a:22:db:
57:3d:9b:95:87:1c:5a:cb:f5:26:14:04:7a:d6:de:
5e:15:5e:0b:8b:8f:ee:1d:90:38:83:76:25:d4:06:
23:72:0d:7b:1d:92:d3:32:8d:84:ed:a6:26:74:cc:
4f:aa:6d:41:af:91:03:68:01:7b:20:1e:89:0c:1f:
0d:02:b4:cc:09:f9:d1:4c:e4:98:94:29:be:96:c2:
56:02:10:98:f0:a6:b7:37:69:47:07:15:0a:11:e6:
6a:cd:d4:b0:56:0a:63:1c:7d:05:af:ca:4a:10:2e:
16:10:51:e8:c4:e5:8f:c7:30:c6:b3:d6:b0:81:46:
8b:88:f4:c2:cd:7f:cc:7f:c1:aa:b1:97:08:df:5e:
72:2c:d6:19:2f:1a:3c:3e:9c:d7:b9:e5:c6:da:28:
78:16:25:3b:94:35:00:6a:ac:61:ca:58:21:0e:d3:
c0:a6:d7:a9:0a:6b:89:0f:d1:ff:49:ef:48:ff:6e:
46:37:fd:d1:61:03:77:58:83:53:cf:48:f7:65:5c:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:A9:16:45:FE:B4:D5:08:89:B2:58:0C:BD:47:BB:4C:49:7F:21
X509v3 Authority Key Identifier:
keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:53:66:ee:bd:04:cd:d9:23:35:98:e3:2d:fe:bc:56:9f:0a:
77:6a:c0:f7:b2:a5:4a:86:f9:4e:c1:ca:29:d7:70:9f:fe:80:
33:ab:9f:ba:8c:77:8f:8f:c9:ac:5b:74:5a:53:eb:12:4c:ce:
ec:78:1e:2c:d7:15:ec:94:af:11:0a:c4:6a:2f:99:ee:ad:26:
6e:4f:97:db:89:aa:c9:72:89:c0:b4:d3:71:d9:26:88:16:2f:
f8:ff:66:0e:9f:0f:98:3f:e0:8a:f5:1b:8f:78:45:2b:ba:08:
f7:d5:b6:21:72:c1:9e:64:8f:de:d6:81:4b:70:92:36:a9:d8:
2b:fe:e5:6b:b6:92:a5:56:a2:93:fd:2c:05:62:10:8c:4a:ed:
85:8e:03:3b:26:e5:b7:9a:67:c9:b4:d7:64:9b:cc:11:80:30:
65:83:74:f8:ca:9d:c2:a0:17:66:e8:30:99:de:14:69:70:d6:
f0:71:5d:f8:d2:2a:f3:45:8b:fa:28:98:0a:cf:fd:c2:d9:e0:
61:a3:bf:7c:6a:03:48:c0:7e:61:0f:5f:e3:ed:a1:18:9a:ca:
0b:b8:d4:4d:88:7e:92:25:7e:43:96:64:dd:44:66:62:c9:ec:
d8:5f:06:a6:e5:33:34:f7:1b:37:31:b1:fc:6c:92:e6:1d:bc:
b9:99:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:16:12 2026 by rpki-client