
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier: mn7A+VYAeQhwic6d22v8lJYPhg6QE2/Bi+FYmpMZiso=
Subject key identifier: 94:24:AC:FB:02:CF:77:A4:EC:98:D9:E6:ED:E5:71:DD:B7:3A:7E:B4
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial: 0565
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number: 0558
Signing time: Tue 12 May 2026 23:31:44 +0000
Manifest this update: Tue 12 May 2026 23:31:44 +0000
Manifest next update: Tue 19 May 2026 23:31:44 +0000
Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: Z/VgC3jH20iLeJWER8Gb0YWaDiBPBA/MQb8NIeFjATM=)
2: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=)
3: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: g76ZamyRjODzgQS6yEVFN20AKLXKwu0wqqIXxgPUFe8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Validity
Not Before: May 12 23:31:44 2026 GMT
Not After : May 19 23:31:44 2026 GMT
Subject: CN=6a03b860-d30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:99:4d:40:f4:02:06:45:c8:a6:a9:07:89:
15:0a:4a:ca:b5:17:33:d8:eb:b5:4b:6f:3a:ac:e5:
ed:a8:ea:fd:8f:ed:89:69:d9:31:9b:cc:53:b8:ec:
10:cf:17:c0:00:c2:51:2f:8a:29:e6:be:ca:cf:fa:
5b:77:f5:17:1e:07:12:84:a8:7a:24:b7:54:c6:32:
1b:eb:83:42:0c:e8:74:af:51:15:88:1a:d2:c5:09:
69:f2:3f:c5:b3:3d:58:1b:db:94:9d:8f:f8:b1:29:
5e:94:0e:1b:06:af:13:ef:f1:94:93:0d:e6:d9:18:
7b:63:55:d6:e7:f2:5d:26:f8:9a:25:56:05:63:b3:
74:13:99:21:9e:34:a1:ab:79:06:88:8c:ec:4c:a5:
3c:cd:59:37:f7:3e:11:c3:4f:7f:12:88:5a:0d:8e:
47:2b:d7:73:f2:4d:80:53:90:57:ed:a5:d6:2a:62:
85:2e:74:7a:0a:9c:ae:49:45:6f:4a:1e:7f:87:54:
be:c4:7b:1e:a3:12:2f:4d:ac:cc:33:4b:9a:05:7e:
43:12:34:68:04:86:a0:58:7f:ff:20:91:1f:fc:af:
d9:a7:ce:fb:a5:8b:70:ea:43:e4:1a:52:57:a8:f5:
62:df:57:78:67:2e:3a:10:eb:94:f8:bf:b4:93:ee:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:AC:FB:02:CF:77:A4:EC:98:D9:E6:ED:E5:71:DD:B7:3A:7E:B4
X509v3 Authority Key Identifier:
keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:f3:b5:1d:7a:ae:9e:db:1e:e9:d3:b3:76:b8:fb:9d:1e:8f:
1d:65:96:b1:f1:ac:45:09:f1:b2:2a:4e:b9:0a:4e:ad:a0:e0:
c8:76:ac:80:09:c8:b3:ee:dc:ce:0d:23:20:20:de:7f:18:1b:
b3:66:19:44:01:4f:e7:a0:b8:8e:de:08:37:9b:58:43:50:9b:
92:58:07:55:3c:9c:89:c9:7e:c1:b3:86:e3:0a:9d:1d:a3:3e:
72:a6:f6:06:f7:38:03:de:3a:6b:a4:69:ee:d1:4f:e3:46:c1:
9d:a4:36:b1:af:51:ef:44:fa:5b:28:2d:23:5e:ca:bd:81:96:
b4:b0:bd:34:69:bf:5e:86:b0:74:dd:25:ea:5b:9d:2a:fc:4e:
ae:dd:72:19:a5:ee:6a:5b:d0:ff:bc:a2:ce:b3:0c:05:a3:f1:
90:e2:d1:56:f2:4d:02:11:04:2f:ae:c1:1a:76:c4:13:fb:4e:
50:6c:f9:92:a9:40:56:c2:a7:a0:e4:39:19:2c:5d:97:9a:48:
e6:4e:e8:9f:bc:b6:d5:33:71:3e:ba:d4:4b:8b:e4:e4:f4:52:
ae:2e:70:f7:89:15:63:fd:a1:9d:45:4f:e4:94:97:1d:05:31:
01:fe:bb:f7:48:75:c1:a9:e6:35:9d:1d:5b:ac:04:6a:00:78:
b0:1b:ba:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:01:36 2026 by rpki-client