
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json)
Hash identifier: IM5VMxY0+MJ5ZBluHP5ZqrN6WAYwO/LU7wWpSBZRThc=
Subject key identifier: 26:A1:34:0C:CE:C1:85:C9:50:A8:4C:4A:CE:1F:4C:35:E2:28:53:DE
Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Certificate serial: 1B27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
Manifest number: 1B18
Signing time: Tue 12 May 2026 16:17:14 +0000
Manifest this update: Tue 12 May 2026 16:17:14 +0000
Manifest next update: Tue 19 May 2026 16:17:14 +0000
Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: 5kyMTkIYB2wG+XK77I77+wJEdpeqll3ZVvcGgLTAr58=)
2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: vU7FtIOGdlgFzN2R+Yvnm21XMTi9xqbV3l1GIS0tOqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6951 (0x1b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9161, serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211
Validity
Not Before: May 12 16:17:14 2026 GMT
Not After : May 19 16:17:14 2026 GMT
Subject: CN=6a03528a-9ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:94:f5:37:8b:eb:c2:2c:ee:e2:b4:3f:26:
1b:03:31:56:f5:da:38:35:e9:01:bc:45:77:9c:cb:
9e:41:3f:6a:f1:1d:c0:6d:f4:12:04:09:55:25:c6:
29:ac:30:63:1e:09:0a:12:5d:39:de:15:20:f4:58:
b9:a6:20:72:8f:ba:7e:d8:b2:9d:ae:7a:c0:94:e9:
b9:86:97:0b:cb:89:fc:c2:ab:71:cd:22:85:cb:3d:
3f:49:7a:a6:a8:c0:95:dd:0d:51:86:dd:d8:a6:1a:
08:bd:6c:ea:d6:ba:83:d6:a9:9d:de:c9:22:aa:3e:
f7:d3:dc:31:92:ed:dc:3c:84:c2:fb:c3:85:98:1f:
13:d0:e4:59:75:9e:e3:67:61:4a:a0:29:bf:15:63:
ad:84:ee:2d:1f:99:f7:85:7b:91:05:4b:a8:48:83:
9c:10:b0:f2:75:37:1e:80:7b:ab:92:10:44:1a:bb:
f5:1e:0b:c1:83:ca:4c:30:1a:1e:47:2d:40:12:d4:
72:06:ac:db:51:10:77:9a:43:81:8f:0e:b5:13:9d:
00:b8:56:22:ee:d6:54:e2:c6:8f:6e:73:40:07:6b:
bf:9f:2b:f3:23:ce:16:9d:07:e6:51:bf:06:62:b0:
4b:25:e0:72:b4:67:a4:03:2a:40:63:2e:78:49:5e:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A1:34:0C:CE:C1:85:C9:50:A8:4C:4A:CE:1F:4C:35:E2:28:53:DE
X509v3 Authority Key Identifier:
keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d5:cc:bb:a0:8a:d9:dd:a0:ea:a4:67:1c:ca:75:69:ae:c8:
84:fa:4d:e9:53:d6:e6:3a:32:a7:a6:c0:35:e5:6b:08:5d:c0:
67:0d:73:d6:0f:1b:67:7f:b4:b0:97:92:64:22:db:5a:3b:fa:
7c:d6:89:5a:be:7b:55:80:6c:39:4b:76:04:04:c7:63:e1:99:
2f:ae:a2:36:37:f5:05:af:7c:c7:e0:5a:c1:6c:4f:45:19:a7:
22:c3:13:66:ca:91:43:d2:81:14:16:82:eb:2e:53:3e:c8:a1:
fd:dd:8a:cc:99:64:41:68:8e:42:8e:e1:cb:72:0d:e2:7e:f6:
f3:c0:4d:49:3f:85:c3:31:19:ae:58:15:3b:1d:8e:a7:ad:8a:
41:de:65:ac:bf:cb:58:c6:82:37:1c:78:7e:da:cf:4d:3d:80:
eb:cc:6f:80:da:0a:9b:9f:83:e7:d9:a3:8c:dc:d3:70:38:51:
b4:90:7a:65:c8:b7:a6:ca:23:41:98:81:a8:60:7d:a5:d2:bc:
25:86:5f:2a:2d:5d:0e:ed:30:23:bd:ba:23:27:db:c3:ef:bc:
d5:fc:fa:5f:72:c9:a6:f3:65:3d:9f:22:3e:7f:9a:27:43:1f:
1d:e5:8c:ee:1d:63:3d:af:4a:9b:fd:47:c4:9a:37:f2:3c:b5:
35:f7:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:59 2026 by rpki-client