
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json)
Hash identifier: l0/Ku5ie0+bu0WRjbTPPGAPQF+i59EVQImrN/NY4rdE=
Subject key identifier: 88:EA:9C:2B:3C:F2:32:2E:3E:6E:D4:EE:BA:85:2A:C6:E2:17:B5:E4
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
Manifest number: 0222
Signing time: Mon 11 May 2026 02:49:25 +0000
Manifest this update: Mon 11 May 2026 02:49:25 +0000
Manifest next update: Mon 18 May 2026 02:49:25 +0000
Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: FAv85KBExp0hU3HhfdtYJ8Jzxgq3aUXwqiMUBUQv6qI=)
2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=)
3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Validity
Not Before: May 11 02:49:25 2026 GMT
Not After : May 18 02:49:25 2026 GMT
Subject: CN=6a0143b5-fe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:42:5f:46:36:d0:58:39:ad:cd:9c:43:45:
f1:1d:73:3e:e9:a9:2a:b8:83:b5:74:0c:08:be:cf:
e0:3a:1d:ff:c9:85:21:d7:27:1e:19:9d:67:9c:0e:
84:12:a3:0d:d4:c6:e6:77:b8:6f:a0:a1:06:47:2c:
01:0d:d7:83:d4:b3:5f:27:34:8e:fa:69:62:10:77:
51:9e:91:a2:8e:0e:9a:96:d4:2f:c1:99:dc:4a:73:
50:1a:2a:57:8a:95:3c:ef:d4:19:eb:61:77:30:ad:
72:85:ed:0c:44:9c:7d:8d:bf:bc:8f:90:4b:d2:2b:
e4:8c:33:c3:e0:aa:a0:57:b9:75:b2:aa:36:af:e6:
39:f7:55:58:2d:78:3c:79:b1:69:8a:e4:ad:36:c6:
8d:f4:c1:df:c2:a0:05:8a:65:2a:0e:89:90:97:66:
0f:99:f4:a4:9a:5a:2d:f1:de:65:90:cd:56:f5:d0:
36:57:56:99:2e:c6:06:75:b4:85:a1:6d:b1:aa:59:
61:af:fa:5b:66:29:ea:e2:00:67:dc:fa:f6:b8:44:
f6:30:c0:d6:f0:cb:a9:93:f1:d8:4f:e5:7c:4c:0d:
ed:dc:8d:d9:b1:a0:73:f6:71:a9:8b:23:7a:9a:b8:
a5:c5:ff:47:6c:81:d8:d3:cb:c3:a1:0b:bc:a6:ae:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EA:9C:2B:3C:F2:32:2E:3E:6E:D4:EE:BA:85:2A:C6:E2:17:B5:E4
X509v3 Authority Key Identifier:
keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:00:15:80:4d:eb:55:8b:6d:7c:86:9b:2d:77:df:b5:f7:00:
05:37:c3:b8:e8:3b:c3:56:3c:4b:3c:51:01:30:cb:c1:ce:99:
e5:49:6f:3c:30:c9:81:8f:28:34:44:25:86:31:d6:9d:e9:fa:
38:82:84:f4:55:04:1a:6b:47:83:c0:e7:f7:dc:26:a6:86:5b:
d5:80:e4:01:6d:1a:43:c1:13:2a:00:d9:5f:f0:15:f2:25:26:
7c:c3:90:56:ab:d6:93:6e:5e:e7:92:c2:75:57:1f:d1:4a:73:
67:d0:29:df:8e:6b:4a:fb:dd:a2:38:70:fc:3d:0c:6b:ed:ec:
b4:17:5d:9e:0d:15:80:3c:4b:14:f2:6a:64:bb:f8:62:a2:fa:
d9:c1:fd:b7:d0:e0:73:fe:ee:83:36:f2:08:79:72:cb:10:c0:
1a:e6:8e:39:f0:9a:78:69:27:b4:81:74:76:a4:8d:3f:11:2b:
1b:e9:78:25:23:0c:8e:ac:80:8f:68:80:53:99:f0:c0:f2:9d:
5a:09:fa:33:a9:a4:df:00:fa:57:88:d0:1b:c8:f5:e8:8a:bd:
ca:88:9f:12:9e:29:a4:c5:92:45:62:2a:18:f9:21:bd:01:71:
90:3e:f2:80:76:f5:f2:f0:23:de:f8:02:7f:cd:18:88:0e:b5:
1b:dc:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:16 2026 by rpki-client