
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier: XsPvJPVfeY5/qxjy+SX7he+mcM+iMZF+nPrfY1TzGhM=
Subject key identifier: 17:15:0E:66:2D:D7:A5:5D:FF:A4:23:85:08:CE:2A:7F:22:D6:49:41
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number: 0231
Signing time: Wed 13 May 2026 02:40:48 +0000
Manifest this update: Wed 13 May 2026 02:40:47 +0000
Manifest next update: Wed 20 May 2026 02:40:47 +0000
Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: aacrPfRY+AAqrSNG/LMCtkkhDNEa/KkN7VFzRQOMhEI=)
2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: 93lqVQhsdgkNqe+QLKSt6rzwX0cHhLHTkYfLV3iVFU8=)
3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: 5THegraPgMqqp6VrhQyR4hOqJ9d+jYAhvqCx1inYwhs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Validity
Not Before: May 13 02:40:47 2026 GMT
Not After : May 20 02:40:47 2026 GMT
Subject: CN=6a03e4af-04c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:dc:49:54:14:71:3a:db:22:6f:10:ad:5a:
b0:98:aa:61:fc:34:0a:2a:14:7b:0f:08:2b:74:41:
b6:16:6e:5d:7f:36:d8:e5:fa:8c:2e:f0:dd:e3:10:
13:9d:ee:71:c5:00:a9:79:a6:1a:99:be:8d:f0:97:
da:58:5d:7d:08:75:ab:e2:0f:a4:df:62:14:ef:87:
fa:60:60:71:3b:22:b4:37:b6:a6:c0:07:3c:65:59:
ef:de:9f:58:e5:ad:48:68:1f:32:66:9f:de:4a:96:
79:d3:5c:88:42:3d:09:7a:84:c0:7d:f3:c8:7f:0f:
a4:d2:86:0e:93:d1:28:3f:ce:42:6c:2f:09:bb:46:
94:8f:4d:e6:f3:15:52:ba:dc:5f:55:7f:92:34:40:
e7:4e:29:77:1b:25:62:6f:f3:a4:80:21:2c:5a:52:
b6:88:cf:6d:75:8e:85:2a:6f:ec:6c:6a:59:f5:7f:
32:b0:59:5c:a0:1b:3f:62:30:bd:2d:fd:63:c5:ec:
cc:1f:f1:59:48:a8:b0:a9:21:ce:08:3f:61:cd:2b:
c2:bd:2e:3b:59:44:c5:53:bb:1e:a7:56:7f:47:84:
39:f6:f2:c7:f7:cc:5a:33:df:dd:82:d4:1a:68:95:
b9:e6:72:b0:09:f6:cb:d6:58:1d:2b:5e:88:21:b8:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:0E:66:2D:D7:A5:5D:FF:A4:23:85:08:CE:2A:7F:22:D6:49:41
X509v3 Authority Key Identifier:
keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:77:8e:1c:35:fb:5c:97:4d:76:fc:8f:fc:22:73:a1:15:50:
33:fa:76:49:fe:31:62:10:8d:94:9f:4c:8e:38:59:75:85:aa:
d6:15:3e:1f:45:ea:70:12:7a:e1:0a:0f:ff:1a:cb:38:de:95:
70:0c:d9:5f:fc:26:22:46:39:b7:f2:94:c0:e7:ac:60:6a:eb:
00:6a:72:37:25:da:bc:c9:4e:7e:f3:76:c6:5c:4e:5f:ea:a4:
1c:e1:2c:8f:94:1e:e0:4b:97:ce:c9:2a:24:10:68:c6:08:93:
cf:16:2b:06:06:63:0a:91:56:bf:e1:b0:89:a7:ff:be:3c:38:
80:70:dd:e4:36:7d:70:e3:63:81:9d:98:66:59:e5:71:12:7d:
f0:6c:a7:97:b7:d7:85:60:af:a6:17:9b:0f:e3:ae:3d:1f:5a:
b2:e4:c1:5c:cc:06:d0:46:7f:cb:c1:8c:8a:d4:4d:55:94:a0:
7c:92:c1:9d:da:e5:26:b9:3d:2e:5c:1e:e5:09:26:a0:e8:19:
1b:f2:88:aa:dc:c8:2e:21:00:67:4c:f3:40:94:e2:da:29:99:
eb:5d:5a:22:a3:88:e2:00:fa:b3:de:b2:35:3d:f6:74:94:86:
2a:4c:f7:35:b8:79:3d:9a:08:ec:40:3d:12:0d:4c:a1:89:d7:
6a:4a:07:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:50:45 2026 by rpki-client