
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json)
Hash identifier: voSPG66YSLlKjaIxrTahdb4LOptQtnQ1GnG+FLqyA+8=
Subject key identifier: 5C:A6:22:0B:2F:C2:91:BD:77:BB:BD:59:E5:4D:8E:7D:6C:25:75:6E
Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
Manifest number: B9
Signing time: Mon 11 May 2026 07:06:12 +0000
Manifest this update: Mon 11 May 2026 07:06:11 +0000
Manifest next update: Mon 18 May 2026 07:06:11 +0000
Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: 8qfF85CuFYA2BydICx/qak8N8XeoEUQqrUv7Bv8F5rY=)
2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: AqLmjH9rQIfWc4pDj/9l1XeaE5IDbCOjNUtl76LoxHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Validity
Not Before: May 11 07:06:11 2026 GMT
Not After : May 18 07:06:11 2026 GMT
Subject: CN=6a017fe4-e460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:d7:8f:69:bb:53:86:95:1c:2a:3f:c1:f0:
26:11:b2:0c:f2:36:4c:31:86:f9:a8:a9:05:a0:d1:
ee:84:99:54:7c:c1:87:43:3a:e0:d4:1c:ff:e2:72:
28:39:26:e0:35:e7:02:e7:9c:ce:e0:0e:65:cd:ed:
af:6b:f2:87:87:3b:0d:ba:b7:cd:2c:43:7a:14:be:
fe:39:1d:7e:e3:e8:b1:59:9c:47:a8:61:80:81:05:
7b:cb:7d:4e:f6:9a:5c:f1:ea:33:c0:af:8e:06:c5:
a0:c4:7e:e2:39:98:f8:49:fe:ec:52:f6:31:16:df:
9e:de:20:f5:14:7a:23:19:ae:31:e0:a5:15:7e:79:
2a:04:c3:44:39:d4:a0:1e:8a:44:7b:30:b0:c7:aa:
ee:68:c6:8f:c2:1d:4a:95:10:bc:c1:0f:fa:54:ea:
56:10:3d:b0:81:ab:a1:98:7a:17:95:2c:8a:a5:97:
d0:9c:34:9f:fc:03:fc:67:14:cf:9c:69:3c:6a:0f:
b4:22:5e:71:e3:75:16:d5:a5:bd:0c:ad:53:9b:18:
11:57:5b:1c:57:5c:19:02:c2:25:17:28:50:8d:3a:
85:ac:5e:aa:e6:e7:3e:71:3f:c4:23:6a:b0:55:3d:
2a:6f:28:20:4e:dc:09:a6:f7:29:fc:e7:2b:dd:9c:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:22:0B:2F:C2:91:BD:77:BB:BD:59:E5:4D:8E:7D:6C:25:75:6E
X509v3 Authority Key Identifier:
keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cc:05:e7:90:f7:bf:f0:e2:50:ed:98:56:d8:b9:a1:a6:af:
e4:fb:98:8b:8a:7d:96:8f:06:7c:09:29:c9:76:66:e2:71:e4:
1e:ed:11:6e:b9:92:58:10:63:f5:8a:91:20:9f:5e:55:07:16:
86:46:1e:f1:76:cc:4d:c3:9a:93:b7:27:30:8e:e5:5d:fe:ec:
da:8b:72:4f:24:d6:a2:b3:31:c8:8a:5f:af:a4:59:33:65:95:
27:e3:e8:5b:83:4c:75:99:eb:0b:fa:3c:5b:3e:7e:4a:17:87:
a7:11:87:3b:02:31:a1:9a:53:c2:b7:c5:5b:11:2d:5e:7c:27:
38:c9:c3:5d:29:72:13:d4:12:16:c1:fe:48:a7:4d:12:5e:59:
45:2d:97:62:8d:61:64:e0:58:12:9e:27:81:29:1c:34:f4:96:
85:8c:2a:4c:67:0e:8b:de:f3:36:f0:5c:d5:05:a8:62:6b:18:
b1:97:0a:25:14:cf:0f:6a:c9:a6:f9:24:bf:76:97:80:3e:ac:
4e:31:bf:2a:6a:be:d9:2a:a8:37:13:7b:ef:0e:29:43:4d:35:
23:7e:77:ff:92:3e:f7:0c:48:15:e5:56:35:ad:1c:43:57:f2:
56:e1:bd:04:74:4d:ef:f8:de:58:4b:1d:55:1b:22:ac:67:b0:
79:22:3e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:45 2026 by rpki-client