
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json)
Hash identifier: /dKn0wdzr0MrZVoJgiBiEoUQrVxk4WAuIEkMFLPexQY=
Subject key identifier: 55:BC:93:45:33:34:09:00:6B:0D:86:2C:46:B7:98:0D:31:3F:87:7A
Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Certificate serial: 0AC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
Manifest number: 0A92
Signing time: Tue 12 May 2026 19:36:57 +0000
Manifest this update: Tue 12 May 2026 19:36:57 +0000
Manifest next update: Tue 19 May 2026 19:36:57 +0000
Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: W0aJZFPMEPWG31rLL1m6Qx+9pB1uJLRPaX3Jt69kqUk=)
2: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: Ftvy/rpA0Vj85hMaB0gzuwhB0x0hLyn+6aJiSOLoMmo=)
3: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: 2i8qGpQRreTsgSwr4uVW47W52ezT0jaL1HVor/4n178=)
4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: rwF3ZHk/RVRSDVzAmZzOpcusN8aav7XVfExqPCMX7pc=)
5: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: OH/GXZ1q60s4R0UMX3ULerkxFMV9QJvIeVjbm9pioBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2753 (0xac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Validity
Not Before: May 12 19:36:57 2026 GMT
Not After : May 19 19:36:57 2026 GMT
Subject: CN=6a038159-0f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:46:79:7b:f9:6e:48:e3:cb:f7:47:ac:82:
39:63:f4:f5:67:df:c7:d4:35:ad:cf:f5:ef:27:e9:
b3:54:45:59:d9:91:b8:b0:5e:ad:44:78:1b:c3:99:
fc:4e:65:41:21:24:df:31:27:15:82:bd:fe:01:83:
59:06:26:d2:48:f6:f7:1a:3a:e2:a7:62:6b:6f:ab:
bf:ef:0a:5f:05:d7:46:e5:34:f7:ab:09:5a:f1:f3:
df:6f:3f:8d:e9:89:3d:de:6f:a8:df:13:ba:cc:3c:
33:96:92:cb:99:99:4d:cf:70:da:0e:80:14:85:6b:
2a:8a:02:2a:4c:8a:61:de:97:c4:a2:a2:96:04:68:
d8:cd:35:be:7b:8c:7f:ab:fc:ca:db:da:d1:47:8e:
55:af:0a:37:bd:31:b1:1c:b3:5c:d5:d6:3f:a2:d7:
14:6d:83:03:ad:ab:60:5c:60:02:99:93:bd:19:25:
13:d2:68:c5:dc:a5:31:d7:28:44:47:23:fc:11:c8:
ca:93:e0:3d:bf:6d:24:3f:13:4c:31:c0:63:d0:17:
fd:2d:b6:11:0d:1d:4d:87:03:23:ce:2c:14:d9:31:
4e:6c:31:59:e8:39:a4:23:b1:6e:ad:0f:dd:9c:80:
3d:30:48:83:9d:a5:45:73:91:42:60:54:0f:45:6f:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BC:93:45:33:34:09:00:6B:0D:86:2C:46:B7:98:0D:31:3F:87:7A
X509v3 Authority Key Identifier:
keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a9:cd:84:3b:ee:d5:78:15:99:fd:52:32:a3:75:7e:fd:90:
d9:3b:eb:cf:4b:14:70:c3:ce:fc:6b:9b:4b:d5:50:5e:90:81:
3c:b3:dc:7d:6b:f8:8e:27:ab:11:61:5f:a8:b7:5a:f5:92:2b:
4f:87:ea:24:be:5e:b0:74:fd:74:c8:5f:19:f0:68:0c:8a:2f:
cf:95:6f:2e:c1:aa:e7:00:f6:cd:c4:7c:7f:38:30:9b:8d:62:
fc:5b:50:18:a3:95:4d:b3:ba:9b:16:61:24:24:3a:56:1b:e9:
d8:cc:8b:d4:b6:06:3a:aa:99:12:eb:67:29:d8:c7:ef:e5:af:
1e:79:4d:01:92:a3:7a:b3:af:7b:94:5b:50:88:aa:87:f8:5c:
9e:19:9d:d2:42:b7:40:c6:7a:67:15:5b:f9:f6:fc:ef:d6:fe:
f1:69:f7:e3:d1:fb:af:2b:ee:92:1c:ae:f6:9d:c6:16:82:51:
9b:93:20:f2:38:79:2c:3c:0a:3e:95:f2:27:d5:44:4e:fb:23:
de:82:b3:72:12:68:22:6a:07:8a:94:9b:06:e9:21:40:21:d4:
c3:35:90:72:b8:3c:a4:c9:c4:3c:bd:6d:cb:e9:43:2d:32:0e:
c8:2a:60:2f:fd:78:8d:80:09:11:58:0e:bc:14:49:86:fe:e4:
a3:72:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:37 2026 by rpki-client