
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
File: sRoiVto9XbOPPn6bWct0YsnnsqY.mft (raw, json)
Hash identifier: HAA4hKZv/zQIXQVU678pCR6y3PcbiX8HqtoCR0130Rg=
Subject key identifier: 4F:CC:16:A9:EA:A1:C9:A8:9D:07:E8:87:5C:CD:97:F6:25:19:14:21
Authority key identifier: B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
Certificate issuer: /CN=A91CCCF4/serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
Manifest number: 43
Signing time: Mon 11 May 2026 08:38:14 +0000
Manifest this update: Mon 11 May 2026 08:38:14 +0000
Manifest next update: Mon 18 May 2026 08:38:14 +0000
Files and hashes: 1: sRoiVto9XbOPPn6bWct0YsnnsqY.crl (hash: c2YKUBFxhGqP6jyp0Zbci42YXOuD73hiSA/4U9173Yk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl
rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCCF4, serialNumber=B11A2256DA3D5DB38F3E7E9B59CB7462C9E7B2A6
Validity
Not Before: May 11 08:38:14 2026 GMT
Not After : May 18 08:38:14 2026 GMT
Subject: CN=6a019576-618a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7b:1a:6b:92:fa:90:58:38:57:47:15:06:0b:
89:1f:a3:00:bd:82:25:e3:02:68:51:5a:39:a9:1a:
17:4e:56:0b:22:9c:29:cd:94:a9:1d:8c:54:c6:b9:
15:e9:fa:e6:a6:a9:f0:ec:6e:f3:5f:95:36:8a:55:
9b:ff:fa:6a:3b:6b:11:f6:e5:15:b7:37:e5:63:cd:
37:bd:2c:56:ea:79:d0:70:24:e6:06:8e:6c:cf:f2:
36:c0:8a:d3:46:52:b0:41:a0:e6:85:37:96:01:82:
c6:5a:50:9d:20:76:59:d9:84:b0:06:49:47:0b:2d:
e0:96:52:88:e4:e4:50:d3:1d:83:82:62:3e:a2:67:
7c:ba:e8:29:bd:30:05:1d:be:35:be:5c:69:13:b6:
50:81:04:26:91:e0:54:90:f3:b2:1e:2c:b5:53:87:
24:b5:86:27:83:6b:9a:e9:9f:1a:9c:35:0a:ea:bb:
2c:22:b7:43:e8:bc:ed:f6:5c:bd:eb:d9:7d:11:76:
71:68:50:de:35:47:93:c3:1f:a5:4c:ca:01:67:3b:
c8:d5:e1:35:9d:5d:d6:e2:cb:fb:24:e6:2a:52:ff:
1d:fd:f6:75:26:d1:3c:98:63:38:0d:10:5f:d6:f4:
2d:b6:0d:27:4c:6a:87:f4:4b:41:a7:b7:84:52:75:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CC:16:A9:EA:A1:C9:A8:9D:07:E8:87:5C:CD:97:F6:25:19:14:21
X509v3 Authority Key Identifier:
keyid:B1:1A:22:56:DA:3D:5D:B3:8F:3E:7E:9B:59:CB:74:62:C9:E7:B2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sRoiVto9XbOPPn6bWct0YsnnsqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/A2441BD8F0F111F0BD6DF555436F56BC/sRoiVto9XbOPPn6bWct0YsnnsqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:09:36:c3:57:6d:68:e5:49:a6:03:d6:36:13:62:ea:5b:38:
04:b2:19:f5:fd:03:13:79:83:20:02:ac:96:90:ab:7c:22:4a:
4e:f1:20:d3:aa:6f:3c:8b:9d:53:0a:13:10:ca:2d:da:6c:80:
cb:0d:0b:95:dc:b4:58:e7:f2:79:6c:c8:05:69:7a:99:aa:5c:
ba:85:cf:0b:b0:de:80:aa:1c:d4:42:5d:7a:23:d7:9b:54:bf:
06:b5:38:cf:5d:fb:3e:ad:1e:3e:66:08:71:ba:63:3a:5b:11:
d7:d2:7f:bc:bb:40:73:6e:5c:34:30:d5:f0:f2:15:7d:72:78:
41:ae:ce:81:0f:e6:69:13:99:b1:8d:b8:7d:fa:48:c9:6f:bc:
53:a5:49:26:8b:f6:4f:fd:84:6b:86:14:b2:2c:04:3b:4f:24:
c8:5b:e1:89:0a:b4:59:dd:67:e2:7e:fa:f8:6f:b3:0e:97:19:
35:2c:2a:27:03:3f:ea:e7:95:c6:84:9d:9b:ba:a6:cf:fb:d8:
77:be:ec:e1:a1:0e:c9:0a:6d:8c:6d:49:e5:0e:4e:42:39:31:
dc:c0:5d:20:56:d9:42:c2:48:3f:ab:cb:ec:2b:0c:d9:73:4e:
3d:d4:2e:ce:b4:53:b7:ab:9b:c8:2a:2e:bd:4f:7f:1b:9f:f0:
64:c9:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:05 2026 by rpki-client