
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json)
Hash identifier: bCp6ozHSLOLskurn2S/YqdVHRYhKydYzd5p6dK9z4WY=
Subject key identifier: 9E:24:AA:16:9A:EB:3D:B9:89:CC:81:E0:0B:3D:B1:D3:E7:27:03:38
Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10
Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
Certificate serial: 0849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
Manifest number: 08D5
Signing time: Tue 12 May 2026 21:01:57 +0000
Manifest this update: Tue 12 May 2026 21:01:57 +0000
Manifest next update: Tue 19 May 2026 21:01:57 +0000
Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: PJUWJQm1DQzXPDCypqCz+J+rGxljHQVFENKSFMYURBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl
rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
Validity
Not Before: May 12 21:01:57 2026 GMT
Not After : May 19 21:01:57 2026 GMT
Subject: CN=6a039545-4999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:7c:b7:6c:41:46:fa:05:eb:f8:ac:cd:d5:
87:5c:a9:a3:7c:df:58:f1:f3:d4:fa:cd:d4:9a:e8:
34:ac:9c:f4:f6:c3:99:41:9e:41:ca:93:e8:97:19:
6b:f6:f8:3e:a4:a5:0e:83:26:9b:1e:01:04:29:b1:
01:9a:b0:2d:bc:4d:46:aa:83:2f:48:af:93:de:62:
29:97:75:f5:6c:f3:96:8f:50:ea:85:6b:09:df:47:
6c:84:32:f5:b1:af:d6:29:bf:a7:03:33:09:e5:25:
40:52:73:74:e2:2f:13:8e:2f:6f:40:db:7d:26:43:
d6:60:d6:83:7c:e5:48:f2:4b:63:6d:39:9e:14:f3:
d2:09:c2:3a:55:4b:18:26:92:6a:f2:0f:cf:9f:58:
57:8b:3e:1c:19:d1:4d:6d:a9:7b:97:e2:2a:9c:35:
67:7c:49:ee:e4:6f:b3:10:db:f2:87:fc:59:d9:1a:
cb:c0:bf:d7:ae:7e:01:49:6a:81:c0:ae:61:f2:ce:
5a:d0:7d:84:6c:ba:6f:eb:a0:8d:8c:b0:4f:64:dc:
d0:ce:e6:48:6e:27:51:f4:6f:c0:6d:57:f9:2a:ba:
9a:69:2e:12:90:f2:23:62:14:b8:e9:a5:61:45:c5:
7e:01:12:50:5e:7f:92:21:4e:d0:ce:52:33:cc:83:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:24:AA:16:9A:EB:3D:B9:89:CC:81:E0:0B:3D:B1:D3:E7:27:03:38
X509v3 Authority Key Identifier:
keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:a3:48:cd:8b:e3:64:77:8a:a0:2b:ec:b7:33:ff:1b:3b:c2:
16:29:ed:1f:ce:21:37:02:28:40:69:88:93:20:40:12:68:65:
11:b1:be:a3:55:67:89:3d:22:34:b5:24:d9:18:27:7f:7e:f1:
d4:e6:b5:bd:66:60:61:fe:41:da:73:f5:f9:4d:3c:86:ea:e7:
e3:bb:2f:f5:02:ce:2a:dc:24:2d:72:50:2e:f2:4f:ef:06:26:
b0:94:05:74:21:a8:7d:46:00:dd:27:53:cb:3b:9d:9a:3c:26:
a1:bd:3d:86:95:08:3b:67:4a:59:53:15:81:25:d4:84:b3:9e:
b2:41:2e:a1:90:0b:1a:1d:c3:e0:9b:73:4e:67:d7:06:41:e1:
c7:4c:15:af:c6:c2:a2:08:cb:f8:6f:9f:b6:06:2c:05:ec:2a:
f6:c9:33:40:c2:2e:03:46:02:0f:ce:25:f0:01:b9:9b:7a:97:
d0:1e:3f:24:90:26:10:a7:5c:25:6b:00:96:1e:4f:2a:84:8b:
78:46:31:6d:45:7d:27:a8:ab:62:6b:92:b3:be:bd:5c:89:75:
4e:b7:14:0b:d1:a2:8c:fd:e2:a6:4b:0d:58:ab:e6:a8:4d:17:
b2:a6:39:72:5a:ff:09:70:e6:07:77:ae:d1:45:98:6c:68:34:
df:c8:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:14 2026 by rpki-client