
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
File: AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json)
Hash identifier: jewsxAdHYHnarYEjz+qhpejJOiEttG8IdhorQAHdwJ8=
Subject key identifier: 5C:70:A2:8D:35:1E:98:FC:32:70:34:D9:A2:6E:7D:1E:60:4A:18:C4
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Certificate issuer: /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
Manifest number: 012F
Signing time: Wed 13 May 2026 05:59:38 +0000
Manifest this update: Wed 13 May 2026 05:59:38 +0000
Manifest next update: Wed 20 May 2026 05:59:38 +0000
Files and hashes: 1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: ThuL4txCeVFBPa+8nJ4JQ4l6+1PTkEPHbJYjKxmIXn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Validity
Not Before: May 13 05:59:38 2026 GMT
Not After : May 20 05:59:38 2026 GMT
Subject: CN=6a04134a-bc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:55:57:1b:ae:f5:89:8f:7b:00:fe:47:0f:
1a:a6:a6:df:46:69:14:63:a6:ba:83:1c:51:f2:3a:
a5:3b:54:1a:96:55:a4:23:a4:a9:34:f5:bb:23:c3:
3a:97:17:ff:32:8b:ab:b6:a6:ce:be:78:47:55:40:
d0:71:17:ac:2c:11:23:91:16:3a:30:91:d9:1d:07:
6a:d3:be:fb:78:26:ae:c7:41:1f:d1:58:30:98:31:
78:c2:b5:82:8a:ce:1b:26:43:b3:f8:d8:6e:f9:d1:
3c:17:32:d9:0f:51:ab:57:d4:2f:65:d9:6b:4e:dd:
7a:3c:96:f5:4c:ac:22:31:75:cb:d4:8a:0b:f0:f9:
02:bc:40:56:cc:13:31:e9:aa:a9:c0:8b:3c:24:09:
87:a8:c9:11:1b:9f:a6:b0:52:c4:be:db:e7:ac:88:
fa:92:10:2d:db:be:58:b9:af:cb:00:70:40:5f:7a:
bb:7a:58:60:a1:2e:41:e6:05:68:bb:cf:51:4a:17:
ba:43:30:64:38:3e:df:ad:e1:93:d2:e3:12:1f:d8:
76:33:34:33:be:5e:48:d2:24:9b:f6:d3:6e:34:23:
d6:54:8b:cc:47:39:f4:ea:24:bd:f6:35:27:b6:65:
1d:7a:e7:2f:88:d2:05:b0:91:3e:03:2c:7d:36:f5:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:70:A2:8D:35:1E:98:FC:32:70:34:D9:A2:6E:7D:1E:60:4A:18:C4
X509v3 Authority Key Identifier:
keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:41:d4:97:b1:db:ba:4f:c0:c9:98:49:68:39:8a:ca:5d:e2:
6e:5c:be:de:01:60:10:f3:09:18:cc:37:28:b6:18:27:f9:4d:
69:68:cc:ee:7c:64:41:7e:b1:ec:dd:e9:cf:35:21:3c:89:cc:
c2:8b:14:56:92:43:56:f6:56:59:3e:07:0a:78:f0:32:ee:f1:
4c:87:b0:57:7c:57:5e:e2:59:4d:4b:5f:43:5a:65:dc:99:c1:
09:2c:e3:36:f3:c1:bc:51:bc:cc:72:7e:1c:c3:9b:a8:40:03:
3b:0b:01:72:1d:3a:4a:34:76:82:b1:82:ff:bc:f4:3b:df:71:
4f:59:a3:f0:09:57:d0:0e:73:5b:02:4d:d0:dd:0f:e3:f3:3e:
0b:31:ab:25:69:6b:f9:a2:40:1f:e1:3b:b9:4d:ad:f7:35:a6:
6a:ac:46:d1:47:a8:14:4c:65:a2:96:13:05:d1:3a:ca:2f:90:
4f:65:57:31:fb:6f:d3:c2:92:38:64:1c:47:c4:03:cf:9c:37:
9e:17:e4:a5:87:82:43:15:df:9b:20:df:bc:cd:55:87:26:37:
83:e6:c7:b8:dc:0f:0a:c9:71:89:74:10:81:d3:60:96:f9:64:
aa:86:34:36:74:f7:f7:6e:e6:8a:fd:95:da:c8:f7:54:69:e0:
f4:01:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:57 2026 by rpki-client