
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json)
Hash identifier: L7caiJ8EoOrPigrdwEey85VVq5niLugiFRF/3zxu2cA=
Subject key identifier: 8F:18:30:59:19:1B:4D:7D:83:7A:3B:7C:C2:9D:B5:B1:61:6D:33:72
Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
Manifest number: 011F
Signing time: Wed 13 May 2026 05:52:59 +0000
Manifest this update: Wed 13 May 2026 05:52:59 +0000
Manifest next update: Wed 20 May 2026 05:52:59 +0000
Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: QLyR4QhSXjRRv8eRiuma2VSSN1cG8BICvA0AJxm0H9A=)
2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: qMPRgrgLny92y+u26wGr54Urgeg7Km6YGkgoUSViYNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC
Validity
Not Before: May 13 05:52:59 2026 GMT
Not After : May 20 05:52:59 2026 GMT
Subject: CN=6a0411bb-91e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:c4:f2:0f:5f:59:6d:f2:a1:ff:13:f1:39:
26:62:9e:6c:c6:7e:6a:36:0b:a6:d2:7c:56:d3:3f:
4b:b5:61:57:59:92:fa:5c:6c:26:7c:a3:be:8f:f9:
93:1a:da:6c:9f:df:d9:64:d1:64:55:99:b0:91:57:
16:90:14:2d:7d:6b:a7:34:c0:d8:74:75:73:bb:ac:
b5:d5:17:dd:98:1d:78:0b:c4:96:b7:02:e3:f1:59:
be:6e:dc:5e:d2:f6:42:39:02:c1:dc:9a:73:0c:9e:
61:10:80:ee:fa:fa:d1:85:8b:7f:dc:04:3e:96:bf:
06:3d:56:8f:f3:36:5a:dc:3f:4e:86:66:de:f3:f9:
d1:e4:2d:fd:42:8c:51:3f:48:66:3c:59:1a:69:fe:
f0:e3:cf:a5:07:f8:dd:9f:18:dd:17:f9:92:2b:65:
5d:af:eb:83:07:12:6f:e4:62:af:4c:2a:f5:65:08:
66:18:71:92:41:24:e9:46:bd:ff:c6:e8:f1:93:12:
4e:85:2c:f3:46:41:e6:69:00:72:ad:1f:b1:36:bb:
c3:35:b2:89:23:7c:20:60:32:d4:53:1d:6c:76:a6:
fe:c8:76:45:c4:39:0f:d1:47:19:0f:5c:77:49:b1:
b7:30:10:d4:86:62:06:7d:a0:76:7b:6c:55:e8:81:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:30:59:19:1B:4D:7D:83:7A:3B:7C:C2:9D:B5:B1:61:6D:33:72
X509v3 Authority Key Identifier:
keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ff:3b:3c:90:7d:0c:cf:13:14:09:22:20:26:64:87:1e:f6:
df:e0:eb:0c:f6:c2:be:b1:d6:23:d9:12:e7:8d:66:f9:8a:f9:
e4:7a:b7:ac:d6:82:64:a8:9c:64:5c:63:35:2c:94:47:d6:fb:
32:5c:82:db:44:3f:fd:a3:69:4d:1f:de:35:49:c6:b9:7f:cf:
31:04:83:96:ef:53:f7:a4:09:ee:5c:1a:ca:71:98:55:68:d5:
17:cc:c2:10:64:cb:ab:b3:74:56:9f:f3:8e:c9:ff:ef:fe:e9:
36:db:2a:15:85:64:8d:90:2a:93:b5:b7:f9:b0:fa:7d:25:d0:
58:e7:31:80:ce:6a:2a:19:67:fe:e4:8f:26:49:28:d2:ba:5c:
0c:4d:45:90:14:60:93:f1:fb:76:92:7b:81:2a:54:fa:65:95:
43:f0:65:ac:d9:5a:30:a5:2f:24:de:7f:02:93:30:2d:e1:5b:
3e:27:28:cd:a8:32:17:f9:60:5d:19:1b:3f:a1:a7:b5:de:56:
0e:89:ca:63:ae:6f:ff:f0:60:0b:30:74:f2:12:64:b2:7b:85:
53:83:33:e8:86:e9:c2:93:d2:d2:ae:28:5c:6a:bf:89:b4:d1:
64:21:e1:cc:0e:7a:a8:4d:d9:56:96:f3:a2:e4:32:79:c6:e1:
c1:e1:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:02 2026 by rpki-client