
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
File: CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json)
Hash identifier: atuP4agopuEiq7ZcLIFjSiy32kYdzD8g8GccL0QgteI=
Subject key identifier: 01:FE:BC:6B:78:D5:5E:08:A9:4B:63:50:E7:DA:8A:11:5F:01:92:1E
Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
Certificate issuer: /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
Manifest number: 0141
Signing time: Mon 11 May 2026 05:24:35 +0000
Manifest this update: Mon 11 May 2026 05:24:35 +0000
Manifest next update: Mon 18 May 2026 05:24:35 +0000
Files and hashes: 1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: cnkcwdOl//7wgn/maj0R8YBjoBP5lPtDCqGPLN+ZKtE=)
2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: Cz53IM9XrwFo5eiOhKbMpefJ/4LPJaT0jFu6dU8OhL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Validity
Not Before: May 11 05:24:35 2026 GMT
Not After : May 18 05:24:35 2026 GMT
Subject: CN=6a016813-2852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:20:02:63:20:ff:8d:46:11:11:c4:78:e7:
30:cb:34:00:4b:85:36:e1:8a:21:31:56:14:32:19:
39:4f:30:d1:42:2f:d6:2d:41:62:12:c8:82:d4:c6:
cf:0b:59:2c:98:c8:63:0a:e2:39:c5:7d:74:b9:fa:
b1:5b:5c:82:cf:71:5c:9b:35:5a:23:80:ab:e2:d9:
90:7e:7e:3a:be:70:74:cb:51:7b:7e:82:d1:41:93:
30:e9:c3:08:5f:f1:0d:df:83:42:92:4d:38:df:d7:
61:45:86:05:b6:89:d7:6c:01:34:f1:05:2b:c3:5a:
75:56:9b:ee:82:72:8c:2c:8b:ed:3d:60:c4:79:54:
10:29:70:6d:81:12:44:56:22:c8:8e:38:9c:f5:46:
a2:ea:02:f7:80:fb:ac:ff:96:10:91:89:3c:58:a3:
29:b5:18:95:97:e7:ca:ef:78:19:26:9e:58:47:bb:
31:55:2f:e7:3d:32:28:b0:98:65:ec:56:74:e4:8b:
bc:1e:70:52:60:b5:71:e1:e6:40:a9:69:84:b1:45:
39:ab:38:44:35:64:99:b3:45:5b:6b:79:ce:dd:f4:
0a:5c:f0:44:6b:cd:f1:63:78:76:af:40:b4:52:3f:
25:85:51:46:b0:8b:0a:a1:e7:5a:ba:15:ab:eb:23:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:BC:6B:78:D5:5E:08:A9:4B:63:50:E7:DA:8A:11:5F:01:92:1E
X509v3 Authority Key Identifier:
keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:50:e1:5b:f7:c0:cd:97:25:b9:cb:a0:83:6b:af:d5:d3:34:
c7:ae:fc:57:70:00:a6:6a:ba:f0:57:8c:ad:0d:ad:1c:de:71:
49:f3:98:f3:e7:88:68:cb:2c:fb:ab:9d:75:dd:6c:11:d3:4a:
d7:a8:3b:dd:80:05:9d:de:0c:a4:aa:f9:fb:d6:26:80:2d:d6:
23:93:00:21:ea:6f:a9:d3:c5:5a:0c:85:be:03:83:25:98:22:
e6:18:11:14:96:ab:8e:56:91:df:c8:1f:f1:4c:ec:22:fb:e4:
41:37:9f:6f:ac:3d:4c:2b:f0:43:ee:21:58:2b:c4:1c:87:16:
4e:38:4c:bd:94:2e:83:83:5f:62:00:aa:2f:28:87:fd:44:9f:
99:0a:ba:c7:98:46:75:06:9a:7b:8a:c6:d8:3b:91:96:bc:a5:
3f:a4:07:5e:4f:5e:ad:03:86:e5:74:d8:d2:71:bb:c9:80:d2:
cf:0e:6a:17:d4:6a:ea:6f:ac:51:99:09:35:75:99:46:39:87:
f4:4f:ef:15:0a:45:90:8f:a3:32:a4:ee:63:20:eb:16:ec:7e:
4d:74:05:72:69:ad:79:16:3e:41:31:a9:84:14:70:c8:75:4c:
fb:e4:d8:61:81:98:2a:cd:4a:13:d8:c1:0d:02:4e:d3:68:7d:
4b:6a:82:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:33 2026 by rpki-client