
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier: pCfFXXdzjUILymp5En7sdvh0KQNC/LJ2dr567Yz+X44=
Subject key identifier: 6E:EA:6D:BB:28:C4:17:48:0D:5D:B7:2F:74:6A:5A:95:9E:C7:23:A5
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number: 0311
Signing time: Wed 13 May 2026 01:20:50 +0000
Manifest this update: Wed 13 May 2026 01:20:49 +0000
Manifest next update: Wed 20 May 2026 01:20:49 +0000
Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: L1wxfVyQ+K9ji3gMWQs7eFsh8Y5AyPU4ltspZaectDY=)
2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: ME7+zEz0Jsw4n7cBlOx4YfFdzfleALyDaomuxZAGAFI=)
3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: bDrcCfIunOv3Ox8MoCryqHWYdLJQz+jVsJlwtnaxXwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: May 13 01:20:49 2026 GMT
Not After : May 20 01:20:49 2026 GMT
Subject: CN=6a03d1f2-6584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:04:34:b4:8a:7a:d0:36:82:d4:ca:a9:84:
a3:d0:ef:b1:b2:87:d0:c2:b3:60:65:30:32:f1:5a:
2e:47:c8:dd:ae:4e:ea:b7:5b:dc:10:10:40:e9:fc:
cb:3b:d0:9b:2a:1e:9e:8a:50:7d:84:60:a7:b4:eb:
87:bc:fb:06:47:50:0d:96:70:6a:86:cc:7b:73:c2:
9d:ee:a6:3f:07:64:0c:1b:0c:6d:c2:a8:2b:c8:ab:
0b:53:ed:d1:62:b6:73:48:1b:77:5d:45:b8:ad:a7:
50:a9:08:b3:53:71:b3:ac:c9:84:03:8a:cb:10:89:
c1:59:22:d3:5a:a8:6f:4b:12:96:2a:1b:dd:b0:e6:
3f:f7:3e:bf:69:61:25:84:7a:36:31:b6:44:c6:5f:
00:c9:da:46:fd:6a:c6:b1:bd:43:7a:91:b7:b2:33:
00:9c:39:13:ea:21:3d:e4:2a:21:e7:06:be:b6:fa:
17:ae:32:03:11:35:18:a2:e8:39:7f:2b:85:d2:cc:
1e:97:59:07:27:60:b8:f7:5d:04:19:3e:81:b8:f5:
63:d1:5a:ce:07:20:b5:12:cd:94:04:3b:20:31:2f:
8f:46:49:be:15:f3:84:c8:8f:6f:db:0c:ca:71:25:
74:75:de:a2:09:0d:90:0e:f0:4d:b7:fa:c3:24:4d:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EA:6D:BB:28:C4:17:48:0D:5D:B7:2F:74:6A:5A:95:9E:C7:23:A5
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:9f:11:70:40:ee:a2:5a:22:05:6a:bc:94:ae:cf:f8:48:32:
b5:c0:aa:02:a4:1f:73:e9:3a:1e:b6:bc:c8:37:c1:86:bd:2f:
95:57:8a:12:35:4f:65:ef:2a:ba:1a:f0:1a:42:c0:0a:f7:36:
b3:b5:a7:ae:03:13:ff:89:87:56:e9:74:f5:59:7f:f1:4c:94:
52:e8:2a:bd:e7:69:c5:14:2b:d3:0b:74:0a:d1:7c:77:47:e2:
cc:95:50:83:aa:e8:f6:ad:ac:bd:71:71:41:43:72:72:7e:0c:
33:9d:ee:7c:46:2d:bb:a9:19:61:49:d5:db:4e:52:2c:36:89:
2b:d0:71:02:f0:2a:6f:83:b1:4a:fd:0c:91:1c:5d:d8:3e:c6:
bf:a3:a4:d9:7e:38:e6:23:0a:e3:77:29:b4:14:bb:3f:4a:5f:
90:3e:71:5d:f1:b8:00:41:df:4e:1c:39:88:ba:0f:ce:3e:9d:
d1:d7:3c:5c:ad:51:84:f4:ec:84:1d:34:e0:5c:4e:fa:fc:cc:
7e:3a:66:9a:2a:c9:e3:6d:eb:31:c8:fd:6f:f1:2d:5e:fa:d8:
a9:5b:16:6d:fe:f1:4b:cc:29:71:2d:f1:21:72:4c:4f:c1:7b:
cb:2e:54:1b:65:87:25:cd:da:00:66:ac:5e:16:76:30:c8:eb:
8e:01:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:30 2026 by rpki-client