
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json)
Hash identifier: s5IWqHfdybvUHjdERt6EMgYcirmdoXG/90oogQwwT8k=
Subject key identifier: 0E:80:EF:B6:CD:E1:55:AC:29:87:F2:47:73:21:32:E4:0C:65:41:05
Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
Manifest number: 01B3
Signing time: Wed 13 May 2026 04:11:36 +0000
Manifest this update: Wed 13 May 2026 04:11:36 +0000
Manifest next update: Wed 20 May 2026 04:11:36 +0000
Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: JP9mSvhsOxm/zxT/Kz4m7mK608W6XmGIeF9w6WSSNAM=)
2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: 4MonzweCLEnl+TnK4Sp/6IiK94a2qiwQ1O3fFdo89mM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Validity
Not Before: May 13 04:11:36 2026 GMT
Not After : May 20 04:11:36 2026 GMT
Subject: CN=6a03f9f8-1006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:ad:1c:a0:b0:a4:ad:d3:78:81:91:de:a9:
08:96:fd:fc:19:75:ed:c8:7c:4f:2c:f2:93:58:17:
61:71:89:81:a3:62:96:0b:e6:31:d8:9e:83:e3:81:
05:4c:8c:73:bc:ec:8a:56:21:2d:6a:23:35:9f:62:
2e:b9:f1:2e:5d:cc:ba:44:60:10:de:8b:0e:69:a8:
ea:5d:28:26:93:bb:d0:0c:fd:f9:b7:fb:ee:58:4d:
55:14:31:98:4b:69:39:95:f9:64:8f:09:52:d6:f1:
03:fe:91:89:7b:c1:73:ed:67:4f:6e:7c:fc:0f:71:
d2:d2:e1:74:eb:a1:64:77:37:c6:6a:5d:fd:2f:83:
35:3a:9f:72:b9:19:50:dd:fd:aa:91:ee:c7:82:05:
35:06:ed:cb:1a:bb:6b:87:a1:d7:e2:27:2d:3c:4b:
00:20:51:4d:70:1a:e5:e9:8f:40:52:85:93:b4:20:
c9:fd:34:37:0d:cc:36:47:27:af:f1:07:df:15:0d:
b5:84:9f:9c:88:b3:cf:e7:be:43:38:e6:3b:6b:11:
24:ca:86:5a:06:2f:bf:f5:7a:0b:73:1a:71:77:24:
38:50:c1:f1:57:47:50:34:b7:38:e9:6d:4d:c5:de:
12:2a:d7:8f:d2:39:3f:50:54:7b:4e:3a:e5:e0:46:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:80:EF:B6:CD:E1:55:AC:29:87:F2:47:73:21:32:E4:0C:65:41:05
X509v3 Authority Key Identifier:
keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:28:6c:54:cc:5e:4f:be:08:f5:58:f1:a3:20:6b:e2:6b:cc:
00:6a:17:c6:d0:23:4f:b2:2e:f9:88:5f:22:77:c4:cf:55:d5:
3e:a4:9f:76:7c:0c:ec:4d:35:ea:bc:d0:67:cd:f0:6a:3f:9c:
7c:3d:87:94:96:87:ec:7b:ea:3d:0d:80:ea:86:3d:21:3c:6e:
7a:7a:bd:07:90:77:a4:37:5d:9f:ec:18:49:79:7c:3f:d5:3f:
73:f7:73:12:aa:5a:84:51:9a:21:e5:dc:49:21:97:33:1a:eb:
d0:81:52:fc:60:65:bd:52:9a:2a:29:1b:cb:29:49:55:23:3c:
cb:d0:69:ae:a1:51:56:03:b4:27:f9:34:60:18:6c:43:55:83:
38:59:d5:7a:52:4d:96:f5:14:a6:5f:85:5d:64:3a:aa:d6:8d:
09:74:05:58:61:1b:58:04:ee:95:59:51:4e:de:46:74:70:ac:
67:02:97:04:1a:d2:cd:a8:17:1f:37:a4:eb:fe:55:a9:44:c6:
44:e8:12:f2:be:25:96:11:bf:89:75:a7:04:eb:9c:dd:11:94:
59:87:af:5c:bc:09:71:5e:ff:61:c4:3a:73:20:89:3e:fb:08:
99:ba:b7:31:04:ad:d8:a1:48:de:2b:29:73:bc:5c:95:fe:2e:
fa:9a:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:25 2026 by rpki-client