
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json)
Hash identifier: moSpdJaLnaMBqt6FePS+eorh1D//Vv8qc5RUEna7OXc=
Subject key identifier: 07:60:02:E0:90:88:22:BC:89:D0:0C:1B:A6:5E:8D:B6:05:DA:33:B8
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
Manifest number: 0174
Signing time: Wed 13 May 2026 04:46:43 +0000
Manifest this update: Wed 13 May 2026 04:46:42 +0000
Manifest next update: Wed 20 May 2026 04:46:42 +0000
Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: VdRBZBkk8UG/RliB8mkWV2wAbbxRPqLKH72EkRNsH0c=)
2: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: 2X6rU+Jt1kusg1IcBqKvM06CQwBTBfrmqQ7drmfa1tQ=)
3: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: fPiQQSxTOwbdMOV255D4bAXvgu9GO9QsaMcZ6OWDgrU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Validity
Not Before: May 13 04:46:42 2026 GMT
Not After : May 20 04:46:42 2026 GMT
Subject: CN=6a040233-579c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:70:ae:67:68:19:d7:d2:d1:de:68:d4:66:
f0:1e:29:28:f9:b9:c2:3a:a7:8b:b5:48:06:ed:5c:
f3:5a:4f:89:98:80:84:d4:e8:f3:0b:2d:88:a6:ff:
4b:59:d6:93:6c:9f:57:0c:a9:c7:4a:11:65:52:ef:
b1:85:c4:ca:88:09:85:49:c8:75:c0:29:96:db:fa:
09:5a:28:84:9f:3d:58:75:a3:54:03:21:fa:91:26:
19:70:1a:fd:fb:2f:48:eb:3d:9a:06:c3:3e:47:2d:
c6:5b:1d:d8:49:02:ef:e1:08:3d:c7:02:c4:72:bf:
f9:75:ca:78:42:78:62:96:eb:c5:72:bb:f1:d8:d1:
b4:76:07:cc:90:ed:d0:55:21:72:31:48:a6:34:ac:
c2:08:d5:63:a0:66:8f:bc:2c:49:cb:20:2b:30:fa:
8f:05:fa:f0:ed:88:f8:cd:f5:96:8e:f1:0a:51:ef:
b7:2c:11:c5:14:18:3b:76:d8:e6:96:ea:7d:90:48:
c9:21:d2:31:87:2f:d6:0d:ae:2b:ac:a3:ca:ec:15:
0a:bf:c7:93:77:f1:c4:e9:c1:6c:a2:1c:48:97:d3:
ed:5f:47:2e:16:3a:cc:35:06:40:b0:c1:1e:6b:c0:
d2:3e:29:98:d2:62:e4:5e:cb:fc:67:e3:ff:bb:d9:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:60:02:E0:90:88:22:BC:89:D0:0C:1B:A6:5E:8D:B6:05:DA:33:B8
X509v3 Authority Key Identifier:
keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8f:e8:29:4d:1f:82:4e:f7:33:91:59:74:20:ea:c0:3b:1d:
51:d6:86:4d:d5:7d:56:f6:12:15:9c:9e:e7:f7:72:a3:78:3e:
03:fa:6f:3c:a8:e9:21:85:6f:3d:06:82:db:bf:49:e8:82:77:
9c:25:cf:fb:88:96:51:ea:84:6f:70:8c:23:83:62:a2:f4:08:
aa:1b:c4:f8:df:43:8d:ac:d6:28:3e:e6:12:e8:4f:9d:be:bd:
e0:37:1c:9a:fa:6f:a7:c2:0f:c1:03:5a:1e:1d:ee:c5:22:af:
ea:32:6b:37:d2:b9:e6:ce:8a:63:56:5c:74:50:15:1d:20:f4:
05:ea:7b:33:7c:92:94:dd:02:6c:56:f8:12:f5:4c:b3:97:86:
d6:9b:e7:5e:14:b0:71:6c:56:dd:f7:f6:aa:ca:6c:93:f6:85:
24:a2:55:0d:f4:bd:f6:de:07:45:e4:1b:74:b8:c2:80:24:08:
6c:1e:6b:49:bc:5a:0e:bc:b0:03:3d:3e:85:8e:4e:14:80:94:
a3:72:0a:ee:bb:ec:9c:89:7d:b9:ae:08:9d:e3:0d:2c:5e:82:
c3:0e:86:2e:d1:0f:4a:d4:d4:c4:52:aa:21:e5:69:a4:30:9a:
88:81:d3:0b:f3:b3:d0:c8:27:f7:4d:aa:e7:d0:37:1a:25:3e:
08:ed:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:49:38 2026 by rpki-client