
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
File: 60yRrrkBmKp9PHgiHY4Ytwdd77k.mft (raw, json)
Hash identifier: sew023n80PmoSiSSXE0veiniXw1sTTSz+yFLeCQPVd8=
Subject key identifier: 69:18:BB:A9:59:62:89:D0:B6:A0:D5:E9:A7:B0:6F:87:BC:B4:4B:83
Authority key identifier: EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
Certificate issuer: /CN=A91D0F0F/serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
Manifest number: 9E
Signing time: Mon 11 May 2026 07:29:05 +0000
Manifest this update: Mon 11 May 2026 07:29:04 +0000
Manifest next update: Mon 18 May 2026 07:29:04 +0000
Files and hashes: 1: 60yRrrkBmKp9PHgiHY4Ytwdd77k.crl (hash: nShk/LDYa6sY2rJaV5CANx6MbfJbwOo5qpD2ze6FHN8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl
rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0F0F, serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Validity
Not Before: May 11 07:29:04 2026 GMT
Not After : May 18 07:29:04 2026 GMT
Subject: CN=6a018541-0569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:d9:80:a8:25:11:ab:ec:d0:80:ea:80:68:
32:7c:52:61:fc:b1:45:65:a4:c5:25:47:56:6d:e5:
d4:1c:23:fb:3b:02:3b:66:a5:eb:b2:2e:73:07:3d:
f1:94:7b:c6:c0:0c:4b:df:12:41:1c:36:51:14:78:
30:27:47:4e:91:03:68:f1:69:07:a9:f3:ba:06:d8:
16:7a:71:77:77:49:6f:17:52:75:e4:71:fb:dd:d8:
12:80:cb:74:8c:5d:5e:33:1c:d7:e1:93:fb:8b:16:
b7:21:cd:3f:12:52:e9:cc:2e:2d:5c:e0:68:98:a2:
f5:e8:a1:eb:64:a8:39:35:0c:41:19:9a:77:04:02:
0f:a2:2f:a7:a2:eb:9d:83:40:2c:c6:0c:e9:dd:9e:
53:d4:29:d3:5b:c4:d8:b9:14:03:22:35:31:b2:7c:
d4:1d:3a:05:cc:3f:08:80:34:3f:a7:b8:d7:55:b6:
05:5a:cd:9c:c2:50:a6:7d:58:c9:7e:9c:42:ee:5a:
cc:16:31:5c:1d:8f:8e:33:7c:53:78:11:8b:b6:98:
04:b2:08:b1:55:74:25:62:11:5a:c9:50:06:02:43:
38:37:ea:4d:43:2c:75:93:bc:9f:58:12:9c:4c:1a:
bc:82:ee:40:9d:cb:5b:58:ca:ea:1b:c9:8b:e5:af:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:BB:A9:59:62:89:D0:B6:A0:D5:E9:A7:B0:6F:87:BC:B4:4B:83
X509v3 Authority Key Identifier:
keyid:EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f4:88:39:7f:57:df:45:16:97:72:6e:c4:ca:c2:8f:7a:1c:
88:47:a9:ca:12:6d:f6:16:1a:70:b3:69:b7:34:08:5e:12:7e:
c4:cf:1a:da:30:04:53:b6:0c:ee:3d:b8:50:e8:bf:44:2e:bb:
a1:42:1d:39:07:1e:3b:10:d3:aa:69:39:32:a8:80:0a:69:f5:
6e:6a:b5:ea:2f:4f:f5:47:fd:2f:e0:ae:54:f8:d7:b6:c1:d9:
30:9b:ba:ee:2e:4a:61:1b:21:48:e5:c9:bb:3f:c6:99:40:14:
33:8c:1b:df:71:04:ab:df:de:fd:4c:82:2e:16:34:1e:49:b4:
5d:52:4c:2b:f6:62:f0:66:68:fe:47:e7:db:26:25:83:e9:6a:
4c:d4:68:c8:6e:d3:60:d0:88:1b:a6:38:06:ed:97:d4:0f:d8:
1b:6b:6e:50:26:9f:2e:8c:d6:73:9e:9d:da:0b:2d:b8:80:f9:
38:13:5c:37:62:a7:64:8c:d0:4a:2d:0e:39:8a:9a:ed:dc:82:
b4:12:49:49:0c:e4:6c:00:f0:85:09:cb:a7:ee:ea:21:e4:e0:
a2:ba:a9:9a:9f:10:59:42:b9:21:74:d4:4f:6d:03:9c:77:1f:
f7:68:95:f4:3f:a9:d9:67:d8:0b:db:c2:83:e5:7a:eb:fa:e0:
d4:72:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:46 2026 by rpki-client