
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json)
Hash identifier: DRd3D/vmsD6E1UGsTXxkbrtjfd+hZyxQWB64I31eWsI=
Subject key identifier: C8:8E:F9:0C:F3:C6:D3:69:F7:BF:81:B3:7D:3D:F3:D2:8A:09:D6:DD
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial: 19A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
Manifest number: 196F
Signing time: Tue 12 May 2026 16:25:39 +0000
Manifest this update: Tue 12 May 2026 16:25:38 +0000
Manifest next update: Tue 19 May 2026 16:25:38 +0000
Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: mWqYyCwGx/UHG0CPbsMnkUFaebt/oSgCrNtNemuugys=)
2: A6ACA298858911E88026B416C4F9AE02.roa (hash: xvpQufWbZtoOPenCGqByU4W+/Qf1CoRrTb220/EylgU=)
3: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: aHUYKJz3swuqsMEmIFAJ0GsRrZYFSKs8JsA+7j3SS9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6565 (0x19a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Validity
Not Before: May 12 16:25:38 2026 GMT
Not After : May 19 16:25:38 2026 GMT
Subject: CN=6a035483-57ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:59:e3:c7:85:76:f8:bb:bb:3a:96:65:36:
22:ca:09:b5:dc:da:7b:b7:5f:45:8a:a9:5a:d7:9f:
a1:9f:4d:80:9d:85:c9:a0:3b:d4:60:69:04:5b:e8:
c7:d6:16:32:72:e7:11:f0:61:89:96:16:2b:a6:96:
3b:41:73:ab:71:41:8d:95:72:56:f4:fc:3c:2b:45:
b7:94:65:34:9d:a2:de:4e:f6:57:1a:1e:07:e7:87:
e9:da:59:95:d1:76:90:4e:5a:6d:ca:b6:1c:cb:5b:
a9:45:94:03:ca:cb:3d:41:25:ad:5d:d2:f2:f1:3d:
4b:98:88:64:7b:e2:28:bc:d9:be:d0:b2:d9:87:3c:
f0:7e:6a:bc:bb:41:a9:e5:9d:79:26:e4:0c:1f:d8:
ae:4f:d3:b8:b0:21:f5:13:e5:ff:da:67:9a:a6:ea:
4a:37:c0:9b:48:af:de:35:13:b3:ac:37:cf:72:d2:
3c:cf:c1:81:18:e3:ac:7f:c6:fc:28:0b:ac:ad:0e:
66:90:61:6f:24:dd:82:b1:a4:9a:ef:f3:35:41:a3:
62:4d:54:c8:d3:8c:0b:ae:62:d4:06:66:6b:16:c8:
0f:17:82:9d:9e:51:c8:9a:61:91:63:7f:b2:96:46:
d6:94:16:51:04:99:ff:f6:35:6f:3a:fb:9a:9c:11:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:F9:0C:F3:C6:D3:69:F7:BF:81:B3:7D:3D:F3:D2:8A:09:D6:DD
X509v3 Authority Key Identifier:
keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ef:0e:d6:f5:f8:f9:07:f7:6f:fa:81:da:ca:ed:68:b8:de:
6f:d2:05:b8:a3:d1:a8:53:71:f4:d8:11:9b:2c:ad:3d:4b:28:
f3:16:55:30:f9:dd:5f:15:18:3c:a2:37:c4:24:d5:b5:24:1d:
51:99:fd:8e:9c:54:b6:16:ec:a0:2e:45:97:72:c7:56:06:2d:
28:da:7f:fe:ce:89:5c:07:34:18:9f:e4:d0:1d:a8:88:8d:86:
69:47:82:82:9f:8e:8e:2a:7b:43:d9:a9:2c:fd:c1:0a:1f:06:
9f:df:b2:09:ef:75:c4:58:6c:7b:c9:a9:e7:7a:d5:48:37:e2:
0e:bf:7a:f1:50:02:e5:17:ab:36:7d:f5:70:ca:bb:7c:12:db:
b6:ba:ad:a5:57:d5:d9:01:14:b7:6c:00:22:4d:e1:3e:e4:c4:
44:29:4d:4e:1f:d6:11:6f:49:d5:46:a9:d8:69:81:f6:dc:36:
9e:18:a1:39:81:fb:0e:91:71:c2:3f:27:61:5e:86:ad:b1:a2:
17:fd:15:df:c2:94:4c:e0:a3:3f:cd:f3:09:40:47:c9:2c:ec:
92:e8:ee:80:22:c9:b8:9a:63:4f:94:0e:01:80:e4:a6:a4:c4:
aa:13:8c:2c:ee:41:b8:a3:20:a3:d7:de:17:60:fb:5c:ea:80:
46:42:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:03 2026 by rpki-client