
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json)
Hash identifier: d5Z15irjoonIIhqppFRd8e3a/78AEeJGxogcRZTHqhY=
Subject key identifier: 33:D3:F5:DC:EC:D6:1C:37:16:61:39:6B:A3:3C:B9:46:62:90:86:32
Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Certificate serial: 0C8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
Manifest number: 0C87
Signing time: Tue 12 May 2026 18:37:27 +0000
Manifest this update: Tue 12 May 2026 18:37:27 +0000
Manifest next update: Tue 19 May 2026 18:37:27 +0000
Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: W9BGQQLhILFGpdP76MmcAI55XuEMAiYXWWU4I/7Eu9c=)
2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: jueT/sEIfGhcIX+lfDsoQuvBQ/fe7qQfDHT4nVQj/TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3215 (0xc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E
Validity
Not Before: May 12 18:37:27 2026 GMT
Not After : May 19 18:37:27 2026 GMT
Subject: CN=6a037367-34d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:1d:1d:5c:da:6c:0c:b8:20:4d:09:55:e8:
f2:98:5c:2f:84:6c:06:65:73:59:f8:2c:65:e3:89:
6e:6a:6d:35:8d:b0:96:88:67:cd:72:f5:3c:81:a4:
60:bf:24:75:cb:fe:ec:af:1b:f3:32:e2:77:f2:82:
4d:e4:2d:ec:da:72:ae:96:1c:d9:fd:1a:c1:9d:db:
52:6b:bd:30:37:31:51:de:e3:5f:28:58:3d:f7:d3:
d1:b1:db:f2:b5:24:51:6e:de:21:e4:73:97:d7:a7:
a2:cb:10:11:e0:50:17:69:a7:10:07:65:cf:42:62:
2f:25:e2:a0:82:b7:1c:bc:cb:6b:bc:5a:52:45:81:
bd:4d:62:ad:87:2b:ee:36:98:01:8c:0d:8b:08:63:
51:d9:1e:f6:10:4e:2f:f9:e5:bd:da:23:68:4c:ba:
21:ba:53:ae:8e:f5:29:c1:e3:5b:d5:36:49:42:2b:
d5:21:bc:b9:b6:2e:d6:60:3b:cb:2a:84:82:94:54:
9d:7f:21:ae:2c:7b:c6:86:5f:cd:9a:1a:56:6b:76:
b1:f6:95:b8:a7:fc:07:99:2d:4d:c7:d7:69:19:17:
e6:0b:15:ae:ba:b4:a5:77:91:ff:62:99:36:8c:93:
56:a4:17:4e:f5:d1:f9:af:3f:b3:7c:23:1e:3d:1d:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:F5:DC:EC:D6:1C:37:16:61:39:6B:A3:3C:B9:46:62:90:86:32
X509v3 Authority Key Identifier:
keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8a:3f:7f:31:ad:9d:1b:5b:ce:c3:d0:7a:0f:fe:03:41:d6:
95:df:b0:b4:df:db:6b:4f:0d:60:aa:da:e9:f4:fa:1d:7d:83:
d4:b1:a9:f6:02:d2:82:4d:b2:8e:47:a6:74:7c:00:fd:5d:b6:
fc:7c:36:be:47:11:f3:c3:63:f6:3c:02:32:c5:82:e6:a0:73:
89:c5:33:76:55:70:c4:9d:82:12:07:5c:86:a4:fc:59:63:fb:
29:ae:f4:f3:8c:d6:fe:1f:16:ef:27:e9:e2:e3:4a:1f:fc:79:
66:d9:85:96:b9:3b:c3:d6:38:4f:94:e6:d2:0e:e0:bf:4e:3e:
81:5d:50:1f:a2:91:72:53:b0:fd:42:8f:35:90:70:ac:4f:4c:
44:bb:03:f0:d7:d2:73:5c:4b:a8:41:2d:5b:21:36:46:0a:88:
71:e5:9b:54:06:1f:2a:c4:1e:ad:0b:5b:a5:4f:22:d6:66:cb:
e2:ef:5a:d7:54:89:f4:eb:61:6d:8d:6d:cf:d7:88:ad:97:03:
45:6f:ae:f3:78:a2:ce:0b:a6:b3:aa:c3:72:45:cf:9b:4e:91:
a3:a8:b0:92:15:40:de:3b:36:95:61:aa:cb:5c:da:4c:18:3e:
c7:42:cf:ab:35:34:ff:9e:72:be:c4:16:1b:d8:19:49:8e:3e:
3e:65:ed:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:55:46 2026 by rpki-client