
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json)
Hash identifier: e++VO7V2Zz/r2Zklu6ykoeDmeGcMy1Q/WnAt6yP71p4=
Subject key identifier: 67:7D:DC:42:D8:32:11:79:DA:23:6C:23:32:A1:8E:06:A0:F0:5A:C1
Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
Manifest number: 64
Signing time: Mon 11 May 2026 08:08:13 +0000
Manifest this update: Mon 11 May 2026 08:08:13 +0000
Manifest next update: Mon 18 May 2026 08:08:13 +0000
Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: fNKErvSg+sQeFPN+UKGZEQl4qpoH5pJJQiRqY6mxJE8=)
2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Validity
Not Before: May 11 08:08:13 2026 GMT
Not After : May 18 08:08:13 2026 GMT
Subject: CN=6a018e6d-a1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:d4:69:60:ad:38:1e:79:70:86:0d:fa:0d:
33:43:45:f6:a9:0c:91:99:0c:22:45:4c:89:5f:a2:
88:97:4f:7b:12:3b:fe:0c:55:b5:73:5e:a7:e9:41:
df:df:5b:95:7d:59:58:6e:13:99:0f:c5:a8:84:c2:
dc:b3:00:20:ae:ee:86:fb:b5:61:cb:05:8b:d3:34:
ec:3c:3e:c4:d9:a1:ad:ad:01:ed:09:38:01:12:bd:
d6:66:13:8b:8e:8c:cb:cf:62:9e:b0:6a:e2:1c:34:
e3:31:ee:87:27:9c:34:08:ad:e5:ea:b4:c6:79:a1:
3f:fc:a7:f4:8b:bf:ae:c8:11:d0:c6:49:bf:a7:45:
8d:21:0b:26:63:57:7e:12:b3:92:7d:67:2a:53:09:
9e:92:ab:51:73:b0:f1:63:7f:e6:30:e3:0a:dd:a1:
63:65:7d:66:a4:f5:32:43:2c:65:ef:60:da:26:2f:
05:06:4c:a0:75:7e:4f:55:ca:32:4f:32:03:6d:f4:
19:9c:08:73:74:7a:27:a8:58:5b:24:0d:26:28:8f:
37:cd:21:d0:22:aa:0b:3c:02:35:01:07:ca:ab:d1:
4a:1c:12:cb:e4:63:c8:6a:bd:47:3e:10:53:81:b8:
c4:c1:d4:19:91:68:ff:d2:09:62:20:e9:c0:78:c5:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:DC:42:D8:32:11:79:DA:23:6C:23:32:A1:8E:06:A0:F0:5A:C1
X509v3 Authority Key Identifier:
keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:bb:67:55:fa:37:37:59:42:e2:d5:d1:36:8b:db:5e:54:a5:
10:45:e8:99:1a:d2:cc:78:cf:d0:3f:43:80:b4:b2:09:89:84:
9e:c1:eb:9e:8c:5b:fb:6e:89:88:1e:30:06:22:8b:e1:08:38:
c8:e5:7b:3f:1e:b6:a6:4e:84:10:65:be:18:82:9d:ea:c0:ce:
d4:cb:30:ea:9b:fa:fe:7e:4d:e3:ef:e4:81:f2:68:0a:d8:d4:
ee:1f:39:60:96:53:a1:8f:e0:23:2a:14:99:e4:0b:0b:64:1d:
46:0a:87:cb:ba:05:52:bb:0a:68:99:18:2b:b7:9e:2c:ed:50:
41:2c:a1:80:36:ba:f2:80:79:c7:09:33:3f:14:b6:f0:69:33:
8e:96:d8:55:3c:6c:8f:e9:48:ba:b9:be:34:4c:f7:62:67:f7:
c5:98:79:07:ff:5d:28:3b:e8:5a:1a:46:c9:82:93:9a:e3:18:
01:c9:96:81:8d:11:7e:42:74:ee:78:89:e9:65:80:65:66:3e:
90:63:87:0e:4d:23:1a:f2:0c:02:bf:2f:6f:21:6d:69:bc:17:
c0:c9:3a:f2:d7:99:8a:de:f7:75:b5:73:a4:3e:ae:10:3f:e0:
f5:96:d1:77:67:7e:a0:8f:aa:33:22:fa:29:3c:fd:a8:fa:31:
47:15:12:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:58 2026 by rpki-client