
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File: 97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier: IS3nxmRYmRuwkB5nE8TeUtGKY3JOAbuh1lktD2qcHBQ=
Subject key identifier: 82:1B:A1:65:0C:87:4A:9B:B8:C0:18:DF:F0:15:04:B0:B8:AF:81:BB
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number: 028C
Signing time: Mon 11 May 2026 01:50:33 +0000
Manifest this update: Mon 11 May 2026 01:50:33 +0000
Manifest next update: Mon 18 May 2026 01:50:33 +0000
Files and hashes: 1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: cpaE4y9ub0AcB8od/+N+04cJkQo0M0FUrH6OsOoYaEc=)
2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: PQz0xbKbyiBo1K+6lX1c97d5j/JyzQaM1t6G0/g1HBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 01:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Validity
Not Before: May 11 01:50:33 2026 GMT
Not After : May 18 01:50:33 2026 GMT
Subject: CN=6a0135e9-2a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:77:57:01:6c:af:9c:6e:17:f6:b3:b0:1f:
46:35:f2:55:95:f2:0b:23:80:3b:1b:8b:38:b5:c4:
22:c2:67:3a:e9:78:f0:d6:48:d5:df:b2:1d:87:61:
c0:bf:77:64:53:bf:df:30:de:b9:25:64:9a:aa:1e:
62:91:0a:7c:bb:07:90:60:a1:fd:a5:0d:71:ad:a1:
24:e7:54:1f:31:bb:d4:19:0a:71:14:7d:9a:a3:bb:
6f:12:1d:12:a2:38:c8:19:f7:37:f3:1a:05:5b:11:
9f:fa:5c:d7:ea:c2:29:08:89:27:bd:d2:1e:85:31:
ec:46:8f:93:0c:05:8c:2a:47:3a:5c:06:62:70:c7:
5d:79:4c:2f:82:d7:21:f2:7d:2f:c1:4d:9e:05:fc:
f3:c9:25:a6:8a:19:f8:2f:bd:65:28:8c:12:18:ef:
9c:ea:c7:50:15:a9:7a:49:44:dd:44:8f:a8:76:1c:
a0:bd:f9:99:27:a5:f7:d7:97:5d:41:57:2c:8e:50:
59:12:f4:3b:63:7e:34:96:9f:f4:b3:e2:b9:69:cb:
3f:08:10:d6:c9:64:70:6d:b6:fb:f6:b5:87:87:13:
26:55:ef:71:1d:6a:c2:77:5f:f3:c2:8d:88:df:6b:
b1:ce:93:88:60:3d:0c:fb:ce:10:46:35:9d:ef:57:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:A1:65:0C:87:4A:9B:B8:C0:18:DF:F0:15:04:B0:B8:AF:81:BB
X509v3 Authority Key Identifier:
keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:db:9d:ee:8f:85:15:b8:7e:9b:28:1d:f1:49:f8:76:bb:2e:
75:72:37:2e:2c:0a:93:98:fb:2f:17:64:07:d5:d5:dc:7b:df:
48:a0:7e:c0:1a:0e:34:39:4b:25:ea:40:4d:0c:f9:d7:95:90:
31:55:8d:04:d3:59:d1:f9:6b:de:f4:05:fc:20:2b:14:ed:8f:
82:e5:06:76:89:2e:4c:10:dc:50:80:ce:2e:58:ce:0a:c0:66:
fb:e9:42:6c:86:8a:12:ee:bb:26:83:46:df:32:86:bf:b0:79:
71:ed:18:f0:11:61:af:3f:2b:d3:91:82:62:24:b7:66:40:10:
21:a4:3b:a9:22:13:3b:c2:f6:6b:ab:12:5a:b3:46:ad:a9:4a:
6b:77:d8:ce:e9:ee:31:a3:25:7d:84:d8:38:fe:22:93:b5:2b:
38:fe:7d:95:e1:4c:b9:26:5f:96:a6:9a:95:69:6d:4b:3c:8b:
5d:76:5c:47:7d:6f:34:28:e5:7e:19:23:3a:ea:0b:f3:c1:52:
e8:0b:ac:69:dc:b5:31:57:e3:9c:ea:d4:39:70:47:79:50:61:
79:c7:1b:68:42:8a:78:fd:ff:a1:50:8a:2a:30:97:4b:90:b5:
68:b2:e0:20:bb:01:35:69:0e:17:9a:f4:a2:55:ba:f2:e8:a6:
35:cf:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:42 2026 by rpki-client