
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
File: 74BCtCGhAXh1OrlTjaNDuJh4nbs.mft (raw, json)
Hash identifier: 40G42byZBsMudTC3VuPP0SoEaJjP3x1DySnjFmDjXMk=
Subject key identifier: 18:77:42:92:6D:27:80:17:DE:9C:FB:C0:AE:2C:DE:E8:A4:83:3E:6C
Authority key identifier: EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB
Certificate issuer: /CN=A91D8157/serialNumber=EF8042B421A10178753AB9538DA343B898789DBB
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
Manifest number: 2D
Signing time: Wed 13 May 2026 08:53:23 +0000
Manifest this update: Wed 13 May 2026 08:53:23 +0000
Manifest next update: Wed 20 May 2026 08:53:23 +0000
Files and hashes: 1: 74BCtCGhAXh1OrlTjaNDuJh4nbs.crl (hash: wPBiPeQr2uB0xEldwB6Bu52Gb1YRYQi8HKYsXtCc2tI=)
2: 46C3253C114511F187FE79C5213D8C67.roa (hash: d5jss6YgiDgyamXt9/dxf7fL1qrUfpWSSJLZZ7FjVz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl
rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8157, serialNumber=EF8042B421A10178753AB9538DA343B898789DBB
Validity
Not Before: May 13 08:53:23 2026 GMT
Not After : May 20 08:53:23 2026 GMT
Subject: CN=6a043c03-970a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:59:40:0f:34:69:4e:82:1d:70:28:45:49:
19:a6:2f:b3:7a:5f:77:cc:ee:07:03:b3:d5:9f:63:
88:65:96:ef:74:1d:5e:6a:b6:b2:43:54:21:c1:03:
64:f0:66:f7:b3:5c:83:c0:2b:77:d8:8d:25:70:e1:
3d:41:8e:d7:47:94:1d:b2:2c:d4:41:4f:2c:23:24:
7f:c1:b8:2f:04:1c:0b:26:9e:76:6c:9a:36:a2:5a:
e1:7d:12:55:4a:7b:75:82:c2:c8:e6:27:e0:2b:b1:
f1:7d:9b:b1:00:c6:b1:66:b4:ef:0e:b4:6e:53:d2:
3a:4a:20:b5:08:0e:65:b7:14:e7:4e:f4:ed:a2:5d:
f1:bc:92:21:97:13:d5:1b:d0:81:4b:da:fe:b4:fe:
44:64:a3:35:58:2c:82:b3:fb:c2:2d:32:db:05:8d:
67:dd:11:1d:38:4a:b0:a0:bd:e3:f3:28:71:54:cf:
16:dc:df:c2:f2:97:0c:32:b1:b4:e9:ea:7f:2b:91:
17:17:e9:ba:76:02:f3:69:da:11:78:5a:c5:f2:a8:
c4:41:2d:8e:7f:10:f2:89:f0:e7:f9:44:50:98:57:
7c:67:56:72:d9:b0:d7:81:b1:05:48:7d:87:59:52:
23:84:4d:c7:32:ce:1a:ad:82:0a:bb:2b:07:08:c6:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:42:92:6D:27:80:17:DE:9C:FB:C0:AE:2C:DE:E8:A4:83:3E:6C
X509v3 Authority Key Identifier:
keyid:EF:80:42:B4:21:A1:01:78:75:3A:B9:53:8D:A3:43:B8:98:78:9D:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74BCtCGhAXh1OrlTjaNDuJh4nbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/0A790BE4114211F19D37628F213D8C67/74BCtCGhAXh1OrlTjaNDuJh4nbs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:b9:28:31:3a:67:d0:dd:ca:e3:23:5c:b8:b6:48:63:3f:dd:
c2:c6:63:0a:9c:d0:df:e4:ed:a1:6e:55:3a:8a:ba:3c:d3:53:
9c:47:3f:4a:a3:94:5e:43:2a:a7:d7:9c:2e:5d:6e:eb:95:de:
f2:50:40:b3:8b:98:36:15:4e:83:f9:46:6a:3c:91:e8:b1:4d:
c4:d5:3d:61:6a:7a:c5:92:9d:0c:26:0e:9d:02:fd:f7:41:58:
19:9d:38:1d:1b:70:d7:1c:f4:3c:17:02:47:89:6f:27:0f:f1:
0e:ef:5a:7e:8e:dc:63:92:25:4c:f9:62:f1:ea:e4:26:4a:9f:
84:94:0e:81:70:a1:fa:b7:bf:00:f4:dd:ab:2e:81:80:98:52:
45:5f:85:ea:4c:ad:b3:24:6a:51:a3:5f:88:d0:82:d3:e5:d4:
ac:e6:e8:48:1b:4b:58:26:5c:80:34:31:1c:4b:80:4f:a4:ed:
d7:bc:c3:7e:df:be:5d:ce:cd:b0:11:a1:28:89:a6:3d:a4:55:
87:a2:db:fa:e7:13:d5:a6:1d:84:b4:6f:23:3f:f4:4d:35:89:
d6:99:9a:76:1f:89:09:b6:b1:6b:bc:3b:54:20:bc:40:6b:7a:
a5:20:99:c8:25:68:20:5c:45:88:88:0e:b3:25:76:48:38:33:
e1:8d:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:53 2026 by rpki-client