
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
File: A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json)
Hash identifier: 15xJUuM/B+/KaPlkfZ5lkJzzbOWgcJKez0fz1SSS/2E=
Subject key identifier: C6:2E:75:51:6C:7B:D2:09:99:13:60:9C:BC:AF:11:70:23:5F:E8:98
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial: 1213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
Manifest number: 0FCC
Signing time: Tue 12 May 2026 18:00:37 +0000
Manifest this update: Tue 12 May 2026 18:00:36 +0000
Manifest next update: Tue 19 May 2026 18:00:36 +0000
Files and hashes: 1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: lC3J1MNg0FT8UfIFzmTQzS97d5oEqxyzmqFLvp97na0=)
2: E488CB52488411F1A76D824BAE833773.roa (hash: qhaH8hoZ7tVtazODqWTolG7825j3uFyDHOdp/v3oj+8=)
3: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: 0DCItTKdRW8XZxl8sAeRR6hAdfjknJyDauG3M3/Il7w=)
4: A9143A3E3D3011F1840321399B833773.roa (hash: /RuqksQao8o50KEgm83KBXICWI2fVkEC7/vnZ1SYUBc=)
5: F13EB484826311F092F0144AC4F9AE02.roa (hash: ZX0BPvm3ZccbnU4W+sAxEu9U4Vf2A6ExRaPUqSkMI+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4627 (0x1213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Validity
Not Before: May 12 18:00:36 2026 GMT
Not After : May 19 18:00:36 2026 GMT
Subject: CN=6a036ac5-bbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:ee:f0:a5:74:02:e7:54:e1:f2:27:22:62:
7a:f4:a9:f3:cd:25:b8:02:0f:1b:c9:75:85:e0:5c:
0e:2e:7a:d7:0c:fd:d4:c0:9b:fd:91:53:e6:6a:d8:
6f:0c:19:a5:90:74:18:d7:cf:43:00:95:1f:76:b7:
15:78:84:1e:5e:5f:39:79:40:b6:d0:8c:12:66:35:
3f:29:b3:97:62:07:05:af:cf:86:de:48:57:6a:05:
66:58:7e:ca:0b:16:54:8e:31:20:47:19:b5:63:52:
83:92:b6:08:38:0d:b3:20:4d:b3:f7:31:f6:10:b3:
89:df:43:b2:2a:fa:dc:6d:d7:b1:e5:8b:54:3e:4b:
d4:3b:0d:da:06:93:b1:fc:a5:cf:7d:f8:51:1b:b1:
4a:a1:2d:9c:51:ae:5a:22:12:15:23:77:e2:8d:76:
af:67:fa:aa:d2:95:46:6c:cd:07:45:56:4d:83:26:
f2:9b:cc:d8:1a:80:99:71:42:e5:be:98:55:31:42:
64:30:93:16:8e:44:70:e8:0f:b3:95:9b:81:c6:fb:
51:0b:06:a3:8f:f4:52:07:c5:38:0b:d8:83:fd:72:
78:55:4d:0a:0d:47:43:ba:58:26:ee:27:61:c0:c6:
6e:b8:c9:bf:85:37:a1:68:ce:75:23:2d:77:2b:c3:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:75:51:6C:7B:D2:09:99:13:60:9C:BC:AF:11:70:23:5F:E8:98
X509v3 Authority Key Identifier:
keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e4:8d:9a:ef:f4:12:ee:52:3d:40:ba:d2:77:2f:6f:f0:3f:
40:d0:be:dc:5c:fd:ce:fc:13:ec:3a:a7:ee:8b:af:bb:67:7f:
79:97:c1:4b:77:58:85:c5:2a:72:72:3f:6f:4a:8c:f0:11:00:
8e:81:5d:ea:08:d5:dd:ef:50:56:c1:df:0d:21:e2:d9:32:23:
00:ad:f8:b4:5b:6e:fa:c7:6a:17:02:33:20:f4:59:d6:59:33:
5b:f7:3c:53:30:35:1f:86:d0:9b:7e:c8:d9:21:54:36:e5:70:
ad:ee:ff:19:79:88:6f:52:7d:bb:53:6e:06:d9:48:c3:bc:1e:
fe:f2:f8:88:2c:e7:70:05:1a:ec:0c:12:91:60:82:96:ae:ef:
1d:c8:ca:cb:23:51:6a:e7:ec:52:08:90:a7:a4:7c:6f:c0:94:
eb:77:c6:86:41:34:c5:99:db:7e:dc:5f:db:94:39:01:b4:b1:
fc:a5:3b:01:b0:80:ff:b6:46:f4:3d:89:02:00:ee:9e:b3:94:
32:f6:30:ca:f2:c4:a7:a0:96:5c:32:62:e5:5e:d6:48:d6:f1:
05:18:c9:96:ee:53:81:cc:f3:9a:c9:37:b5:c3:ed:6b:ce:a9:
f1:f0:f3:e3:8d:d9:b2:28:43:4b:ce:19:7a:b8:bd:87:c6:e2:
d7:36:fd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:22 2026 by rpki-client