
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
File: iX261kcCN4pu4YYw4Yv3Whcpgmk.mft (raw, json)
Hash identifier: uv6FM960VZE0faJUDODN3rYcbQP+ogEBmG2Arh3hy+c=
Subject key identifier: 3D:E1:D6:FC:98:68:93:E4:9B:97:3C:FD:6B:46:F5:4C:D8:14:0F:DA
Authority key identifier: 89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
Certificate issuer: /CN=A91D8117/serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
Manifest number: 01B5
Signing time: Mon 11 May 2026 04:05:55 +0000
Manifest this update: Mon 11 May 2026 04:05:55 +0000
Manifest next update: Mon 18 May 2026 04:05:55 +0000
Files and hashes: 1: iX261kcCN4pu4YYw4Yv3Whcpgmk.crl (hash: bHZLGI43qErC+FwduMj6ZLFQAxInY55MjEt41ZU4rgQ=)
2: D442A7A0BE2E11EEAFAF1934C4F9AE02.roa (hash: RzTaCvSWMhcAn1QVwJbuqA3HBhTH7/SoovljwgVLgeA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8117, serialNumber=897DBAD64702378A6EE18630E18BF75A17298269
Validity
Not Before: May 11 04:05:55 2026 GMT
Not After : May 18 04:05:55 2026 GMT
Subject: CN=6a0155a3-13b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:9d:3c:08:cd:4f:9b:d0:c6:e3:4d:27:a7:
1d:48:59:b1:bc:82:1f:aa:9d:68:5a:cd:7c:b7:d4:
ff:8d:8a:98:30:9e:24:15:d7:ca:09:97:e0:24:32:
4f:39:d9:12:4c:1c:0f:2e:96:95:c4:cc:8f:6b:7e:
db:38:f8:f4:ee:11:89:30:6e:96:34:4e:69:d7:75:
64:47:57:03:55:cc:b8:bc:f6:32:27:39:3f:7f:ac:
d2:68:01:55:7a:54:42:72:ff:8d:a2:b8:3c:6d:a5:
12:56:42:8b:5d:e4:95:61:16:8f:d2:0c:0f:dc:e2:
3a:95:29:cd:03:4d:95:3b:cb:29:65:00:46:80:6a:
bf:5d:d3:a4:4d:0e:41:6c:b5:66:b5:e2:35:03:d9:
44:0c:93:ba:db:a6:9a:e9:ad:c8:65:0c:39:7c:a6:
90:50:55:a7:c7:f1:38:3e:af:30:fb:a0:a9:00:d4:
bf:cf:bf:ed:f5:5d:c3:2c:5c:9e:04:1b:02:dc:50:
4d:93:32:75:64:27:81:1a:01:ad:9b:75:dc:4f:8d:
9e:73:e4:86:66:9b:b1:03:00:fa:f8:eb:fd:9e:7e:
bd:a5:1d:24:e5:ad:9d:63:d2:8c:81:c0:8e:30:5f:
40:7c:37:07:c6:46:90:e5:dc:e0:9d:c3:8e:cf:b8:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E1:D6:FC:98:68:93:E4:9B:97:3C:FD:6B:46:F5:4C:D8:14:0F:DA
X509v3 Authority Key Identifier:
keyid:89:7D:BA:D6:47:02:37:8A:6E:E1:86:30:E1:8B:F7:5A:17:29:82:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iX261kcCN4pu4YYw4Yv3Whcpgmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8117/8E28E794BE2D11EE8536D030C4F9AE02/iX261kcCN4pu4YYw4Yv3Whcpgmk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:cd:f2:e1:af:c6:ce:f1:a1:2e:1e:d4:88:49:37:8b:28:a5:
b1:75:00:de:18:0f:86:f0:84:18:3f:90:56:9f:74:e1:9f:67:
46:10:b9:fc:b3:3b:cd:7d:33:70:38:88:c7:a2:d2:82:cd:81:
8f:67:b9:3d:8f:f9:6e:4c:21:be:c4:54:56:ff:d0:f3:be:54:
ca:4d:1a:eb:88:2d:58:9d:fc:a7:fd:af:4a:61:d8:44:53:46:
f4:3a:79:8e:bb:30:c4:9f:6c:4c:23:62:38:62:d4:25:c9:8e:
64:cb:f3:91:54:32:79:01:12:9f:6d:74:39:04:96:31:b2:de:
69:01:a4:33:26:f0:7b:2c:4a:1d:f8:e1:74:dc:a2:1d:20:1c:
03:0c:33:f4:8b:ef:13:6e:41:2d:7e:54:81:f1:68:d5:93:7d:
44:da:65:49:4c:8d:8b:b2:47:60:8b:99:21:18:4e:63:36:b1:
d9:4a:2a:7a:58:c8:cb:61:81:a3:91:0a:24:3b:b4:28:25:9a:
00:cd:71:1a:43:26:7b:85:98:9b:1f:7b:dd:1f:eb:43:90:b4:
ca:3f:d2:2f:82:66:cb:eb:87:ba:9b:1f:aa:86:f1:5d:44:cd:
11:70:1d:4f:7b:d3:13:b1:ae:04:fa:3d:81:11:ed:c6:18:e1:
e9:43:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:29 2026 by rpki-client