
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json)
Hash identifier: d/LZNshbtjSbeqENcaGMlqJ/RNpnQ+cmczmehDS0PS4=
Subject key identifier: FA:91:06:CB:5B:5E:AE:A5:B6:8F:E6:12:1A:15:7F:83:05:AB:A6:58
Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Certificate serial: 0518
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
Manifest number: 0518
Signing time: Tue 12 May 2026 23:42:47 +0000
Manifest this update: Tue 12 May 2026 23:42:46 +0000
Manifest next update: Tue 19 May 2026 23:42:46 +0000
Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: BosUdi/BKwfiJoMHwHQuWLtvQ0iDeooFUUNQeto/rGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Validity
Not Before: May 12 23:42:46 2026 GMT
Not After : May 19 23:42:46 2026 GMT
Subject: CN=6a03baf6-c6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:1d:21:b4:ce:71:23:eb:f8:4e:52:f5:04:
03:4d:ef:12:9a:78:19:b6:9f:20:c1:f2:50:96:b4:
3b:6b:2b:1f:46:27:fa:59:70:4f:10:96:0a:b1:97:
6e:ff:b6:68:5d:e2:5d:c6:07:30:74:8e:59:1e:65:
a6:ed:af:3e:a7:57:7a:e8:67:1c:9a:7a:5b:0b:dd:
ab:28:9c:74:4c:b6:6e:85:f4:c1:b6:7c:f4:57:3b:
e2:71:f1:1c:3e:53:8c:f3:4b:4e:0e:5d:60:8b:d7:
58:53:38:f7:06:1a:cc:83:68:74:7a:45:f5:21:61:
8d:c3:9e:b7:56:6b:9e:02:ac:c5:59:d6:11:56:3c:
d3:db:99:ca:48:ad:78:25:4b:02:bf:d6:dd:9d:ee:
09:66:c0:b3:c2:69:1d:fa:21:86:48:ca:6f:22:f1:
ca:cc:9c:dd:54:c7:ad:ca:17:72:8a:2a:65:90:e7:
64:e6:93:da:c9:93:27:5a:04:65:71:24:14:e1:6c:
4f:fc:3b:4c:ab:b5:55:65:68:d1:88:ae:9b:ce:60:
21:e3:31:61:4f:cb:5c:20:9e:11:5f:97:d5:a6:93:
46:6c:fe:40:fd:08:4c:33:4c:98:80:74:dd:ae:60:
06:99:13:b5:23:e5:79:d7:d9:4e:e6:29:e3:2d:0e:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:06:CB:5B:5E:AE:A5:B6:8F:E6:12:1A:15:7F:83:05:AB:A6:58
X509v3 Authority Key Identifier:
keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:88:f8:ae:fd:07:b2:8b:88:7c:a9:bb:16:e8:02:67:b9:1c:
f0:0d:0c:be:11:7f:1f:f8:98:8c:69:a1:e0:6e:6d:97:e6:30:
08:e2:95:9d:81:8b:0d:ef:93:df:57:e6:a4:02:dd:cb:97:29:
da:0f:e3:98:a1:49:24:eb:70:7f:f9:95:c3:d4:87:38:94:8b:
65:3e:78:b5:05:4c:20:3b:23:8a:a2:e5:4c:e7:8a:a5:e3:47:
3c:5b:6c:63:9a:ef:55:6d:9d:ac:e1:67:92:29:1f:9b:61:04:
7e:78:d6:89:ee:c5:51:97:54:da:b9:cb:7e:13:13:62:39:41:
0e:e7:1a:f6:0b:14:35:15:a4:56:02:b1:2c:84:bf:6b:7f:91:
b1:29:9a:85:ac:e0:52:53:de:ae:7c:41:7e:5f:db:b4:2a:c0:
0c:e8:97:7d:6e:fa:02:95:7c:50:20:54:b0:28:e7:c0:72:09:
45:2a:0f:96:1b:6d:03:79:f1:7d:bc:a4:a7:cd:a9:6f:62:6d:
cb:22:a7:86:35:b1:30:6e:bc:7e:ba:2a:16:67:d7:30:89:fb:
c0:88:f2:33:b9:21:ad:26:2f:d7:96:85:9c:61:c9:51:7a:34:
58:0b:bb:69:8e:91:26:53:6a:fa:49:89:47:fc:c9:b8:6c:48:
e2:8e:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:43 2026 by rpki-client