
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
File: US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json)
Hash identifier: xqOJjfVF96SqJ+F6lHMwroK9ocbQqYVm6V83PikCJ2k=
Subject key identifier: 2B:89:97:0C:7C:26:8E:8D:98:1E:23:C5:6F:A4:D7:A6:40:74:4F:8D
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial: 05D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
Manifest number: 05C3
Signing time: Tue 12 May 2026 23:13:28 +0000
Manifest this update: Tue 12 May 2026 23:13:27 +0000
Manifest next update: Tue 19 May 2026 23:13:27 +0000
Files and hashes: 1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: 3D/B1GdbGIG0/Vm84cv9QuR/gKMwWGyqTTPLFBVMrQM=)
2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: u3v0nvDMzptv0Bv0++6upWHNRBc+BH3ns60gSH838+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Validity
Not Before: May 12 23:13:27 2026 GMT
Not After : May 19 23:13:27 2026 GMT
Subject: CN=6a03b418-73de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:c5:42:21:b2:a7:38:79:58:37:69:c7:7c:
f2:e7:9e:70:cf:41:e7:52:bb:8a:31:50:69:1b:c3:
a9:0f:40:2f:30:79:67:1c:15:93:f1:05:80:cc:90:
69:f4:dd:c5:8b:94:8a:cd:a9:fd:55:3b:d9:0b:9a:
43:0a:33:b5:bb:fb:8c:07:65:58:b8:34:33:ff:11:
35:d6:b5:c3:9b:e5:21:8d:22:86:34:fa:33:ff:31:
48:5a:4d:a6:5f:c0:36:39:84:2b:4a:58:75:a9:d3:
51:bb:2e:44:2f:fd:07:d7:1f:7a:7f:75:e3:0f:95:
2f:e3:88:f0:27:e4:09:70:8a:a4:13:20:c2:d8:f8:
26:0f:2a:e9:19:85:d2:a4:02:fc:62:70:b5:d8:62:
a8:ed:7c:37:c5:01:a2:27:81:af:cb:18:c2:0a:12:
ac:df:39:8e:57:17:d1:bc:0c:26:36:e9:d5:73:86:
43:99:df:64:a8:68:85:70:2a:b8:6b:79:8b:91:3e:
3e:60:60:48:fe:40:de:13:43:02:da:78:45:05:d3:
6d:ba:a5:be:22:97:80:48:43:5d:24:c0:7c:d5:7b:
66:91:14:63:74:e1:61:ba:ce:9a:bc:38:a7:5e:a3:
96:05:f6:cf:9d:75:06:bc:cf:9b:b6:12:26:8b:de:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:97:0C:7C:26:8E:8D:98:1E:23:C5:6F:A4:D7:A6:40:74:4F:8D
X509v3 Authority Key Identifier:
keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d6:6f:2c:57:48:fc:80:b3:0e:e5:bc:80:40:93:3b:73:c2:
38:16:56:bf:eb:fc:13:fe:70:23:c3:0d:ee:eb:56:9e:0b:75:
8d:bb:60:0d:28:1c:da:cd:05:f3:78:d3:a4:3e:7e:89:73:8c:
fc:8e:d0:79:91:21:83:86:01:1f:9d:02:65:7b:1e:d0:58:da:
8b:de:be:89:88:54:b3:f4:c4:4a:69:9c:35:ea:f6:73:c8:3d:
c9:fc:1d:f6:65:ab:48:8b:e8:4e:46:6b:ab:c8:7c:ba:2b:a5:
95:a6:25:db:87:c1:90:ae:8e:86:93:9c:0c:59:68:5b:50:ff:
43:1b:d0:9f:0c:49:9d:fd:44:e0:c8:d0:67:e8:23:a0:53:c1:
2a:ee:69:4a:48:62:93:39:9c:f0:6c:81:3c:8a:0d:2e:66:e0:
cb:39:96:03:8d:52:75:5d:ed:c6:2a:1c:ae:4b:ec:49:5a:d4:
e9:21:6d:df:95:f9:6a:14:88:9a:5d:34:93:26:b8:fd:c3:34:
08:25:58:80:6c:39:c8:7f:c4:5e:ea:c1:d5:01:b7:7c:dc:b4:
6a:c6:f4:55:08:c4:80:0d:09:05:e7:61:f2:19:e1:31:ff:0b:
b0:9d:2e:5c:46:d4:7a:1b:44:98:6e:14:68:d1:a3:bc:0c:c6:
69:4f:0e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:22:06 2026 by rpki-client