
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json)
Hash identifier: N/VBhm7H761o27/UIOZliYHMBI8H6GvtagjyRh4lWhA=
Subject key identifier: 61:F0:25:8D:76:A4:F6:E0:34:3B:41:BD:1D:92:28:26:D4:35:6A:FD
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 094A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
Manifest number: 0845
Signing time: Tue 12 May 2026 22:04:29 +0000
Manifest this update: Tue 12 May 2026 22:04:29 +0000
Manifest next update: Tue 19 May 2026 22:04:29 +0000
Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: yHva02J5NIu07v8+sOWhW07K6RN4maGt4SUA+A3OduU=)
2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: F75QXCxGZr3+/SASqc++qXUU4Ak7hy/ZkNV6fX02oFA=)
3: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: dT+hUVzmzkp0MF+xQqQP5dOO9l8lXm4CbzD8IR61uj0=)
4: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: 5/4YUq2O9OTal/tX146cKHyOeYhVIqDbo8MR2WNGJTA=)
5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: FZxNGPEDm98WyIYelmT7Ny6KqOSVp9Hnu1QHhzseL+U=)
6: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: OdJAAHZapPghT4UQJjL0KEqUGshRp+J7t4bZFZ0nS3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Validity
Not Before: May 12 22:04:29 2026 GMT
Not After : May 19 22:04:29 2026 GMT
Subject: CN=6a03a3ed-d98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:8e:cd:3c:ea:64:e2:4e:c4:92:32:d0:b2:
c3:dd:57:6c:8d:2a:57:29:38:3b:f9:29:65:72:ee:
72:7f:22:25:e1:b5:79:93:56:82:c9:cd:a2:03:e5:
21:00:10:4b:cd:eb:93:82:7d:dc:bf:68:20:0e:a1:
81:6f:a6:be:4a:44:17:17:60:4a:0a:fc:d1:44:c4:
61:f0:c2:63:f5:95:bc:e3:cb:d8:9f:a2:0a:16:9c:
c8:44:92:07:c4:7b:85:0b:44:1e:2b:0e:9c:88:cd:
67:50:1b:34:53:4e:ea:c6:dc:98:b2:6d:d8:38:f9:
37:00:25:f3:e8:47:a5:67:77:09:38:d6:38:5e:7e:
d7:b9:1c:24:01:72:41:04:cb:46:a4:18:f0:a1:61:
cb:69:d2:ed:c1:5a:aa:83:8f:89:d5:c9:b7:d1:09:
19:fe:6b:1c:9c:d1:1d:27:55:99:dc:fa:16:ec:06:
a5:ec:de:a7:9e:ed:60:97:02:00:f6:01:ea:00:3b:
94:d6:c4:19:c1:b1:d5:99:c8:40:e3:85:06:17:99:
9c:78:5a:f9:a0:e0:7f:ee:ab:29:4b:a1:b3:15:54:
61:03:73:66:b2:55:2e:89:b2:d3:92:4e:85:08:ef:
de:ef:12:c6:6f:28:dd:99:f1:21:c2:79:4c:c3:09:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F0:25:8D:76:A4:F6:E0:34:3B:41:BD:1D:92:28:26:D4:35:6A:FD
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:57:e0:28:3b:77:78:c5:58:a5:71:6d:f5:92:c4:cb:4f:
f7:b5:71:f6:03:e1:0e:dd:de:11:f6:b5:48:bd:fe:bf:e5:27:
3d:61:ae:0a:f0:ec:f3:94:05:10:9f:3e:0c:50:83:29:b4:51:
18:46:7e:87:b2:70:72:aa:31:05:de:1d:74:aa:68:6d:5e:e0:
c9:59:66:8b:29:5f:04:f6:8e:b1:d4:79:08:18:c8:fa:a8:b9:
dc:c5:8f:b4:ab:48:0a:ff:36:81:69:21:b7:a1:70:aa:cc:d6:
47:30:1f:8f:ec:d4:bc:bf:f7:75:a5:56:a5:e2:71:02:31:9f:
91:1e:be:a4:a4:b8:30:17:9c:22:ed:5b:29:7c:b5:5a:41:b0:
d5:96:1f:5c:35:de:95:29:83:a2:7a:bd:9d:f5:d1:a3:d3:1a:
68:b9:03:93:37:5d:2d:8c:43:c3:23:6a:3e:43:cc:2d:71:f3:
65:5b:c5:01:c9:4f:bc:ca:c5:f7:9a:13:d5:b9:3f:01:ee:80:
4c:a8:e2:4c:33:30:44:bb:60:13:ae:85:34:91:87:df:db:9c:
33:2f:f9:0d:8d:03:5e:62:08:19:e7:d5:69:30:e4:7b:36:0b:
2e:53:e5:c1:bc:9a:a4:84:0f:5d:ba:86:49:18:ad:3d:b5:53:
b8:ff:75:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:06 2026 by rpki-client