
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File: fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier: 2cuPnhbQWOSt4JI5Y+o03C9tyHsOaDkZaWl8MjRc39A=
Subject key identifier: 84:04:E5:EF:1D:EF:85:72:49:E8:DC:FA:BA:A0:0A:1A:28:2F:C3:BB
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer: /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial: 0994
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number: 098B
Signing time: Tue 12 May 2026 20:04:47 +0000
Manifest this update: Tue 12 May 2026 20:04:46 +0000
Manifest next update: Tue 19 May 2026 20:04:46 +0000
Files and hashes: 1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: eL/A5yjMfZrtv2CMjWx+O6vkbDFjaoI9TVnyk0bSk5A=)
2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Validity
Not Before: May 12 20:04:46 2026 GMT
Not After : May 19 20:04:46 2026 GMT
Subject: CN=6a0387df-d690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:57:b0:64:1b:a8:72:28:42:99:bb:7b:24:
24:70:ac:6b:2f:38:82:ca:5b:c4:33:5c:16:f2:21:
f9:af:12:2c:b8:d4:c5:29:7c:eb:e6:f1:fe:ee:64:
fd:42:08:99:97:e8:82:a8:f2:a1:74:5f:e3:ab:78:
3b:6c:62:2b:7a:a8:db:8b:54:9b:7d:23:ec:da:c3:
7d:a1:57:3a:a2:92:37:25:0d:4d:c7:0f:39:0f:e9:
ed:c4:24:5f:bc:c0:24:c8:c1:0d:59:82:87:22:ac:
ae:8e:04:95:c4:7a:49:d2:8c:d2:cf:ef:5f:da:3a:
65:8b:fc:fd:2f:2f:19:2b:e2:cc:0a:d7:0e:58:8e:
49:d5:e3:b7:29:8d:3f:4b:e3:53:dc:59:6b:db:b9:
25:fd:18:c4:61:a6:2c:bc:02:6b:ca:f9:ac:bb:d8:
e3:ad:81:6e:df:a6:ae:b5:bf:25:60:2a:36:3c:c1:
28:13:27:eb:d0:2e:87:e9:ac:79:d5:7d:fa:83:3a:
63:7a:fb:39:0c:c1:2e:8e:ea:ec:d5:ba:01:00:55:
79:39:dd:6e:bd:70:b0:5f:91:ac:1c:f3:15:35:49:
96:8f:14:5b:9b:e0:08:50:9b:92:82:5e:b9:47:3a:
52:e5:af:3b:ab:cb:53:e0:ca:86:b7:4f:85:5d:49:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:04:E5:EF:1D:EF:85:72:49:E8:DC:FA:BA:A0:0A:1A:28:2F:C3:BB
X509v3 Authority Key Identifier:
keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:eb:2f:e8:14:36:0b:b5:87:16:79:f1:f4:71:26:aa:2c:54:
b4:16:c8:a4:7b:30:3b:89:9e:f7:54:70:37:87:a8:b8:dd:0d:
a9:79:df:d9:61:4d:35:ae:07:f4:67:7c:97:a9:40:bc:f9:c9:
89:ef:28:cd:88:6e:9d:34:4c:7e:1f:b9:72:4b:40:31:46:ba:
7c:f9:be:fb:ee:8e:e3:35:53:13:18:cc:bc:c2:65:2d:ae:3b:
7d:69:9f:70:c9:be:5a:29:3f:95:dd:69:68:35:1d:78:64:f7:
a5:8b:ed:ca:64:d8:aa:31:1f:e9:6a:87:78:48:f9:89:16:2d:
39:03:7b:b6:b7:64:b0:72:06:55:3e:b8:74:99:d2:3a:0c:9b:
e5:83:a7:68:d8:a1:6b:45:e6:b7:03:c8:4b:38:01:fa:68:1a:
96:cc:28:9e:53:8e:a7:35:3f:1f:a2:f2:32:63:d3:b1:f9:3c:
1e:c9:bc:9d:9e:76:39:0a:54:ca:24:1e:e4:80:c4:af:da:ca:
76:ca:fe:29:5b:92:ac:a0:99:2f:61:4b:e9:4d:c5:97:75:4e:
61:69:7c:73:3f:0e:eb:55:fa:fc:3d:73:b9:53:81:40:f5:5a:
81:ec:e4:d5:f6:d9:6a:b8:2c:39:25:9a:1b:52:27:af:d9:b6:
00:d5:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:17 2026 by rpki-client