
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
File: P484Yw9NPXDt2eXJHjbsSO-5_WI.mft (raw, json)
Hash identifier: KzR7IHTAaWqhKlNHrOmWbmSWTTJXKTmtR6cKU3CuuaI=
Subject key identifier: 2A:7C:2B:9E:C2:78:33:ED:6C:5B:CA:D2:C0:C9:63:2A:58:F7:62:A2
Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
Manifest number: 64
Signing time: Mon 11 May 2026 08:08:10 +0000
Manifest this update: Mon 11 May 2026 08:08:10 +0000
Manifest next update: Mon 18 May 2026 08:08:10 +0000
Files and hashes: 1: P484Yw9NPXDt2eXJHjbsSO-5_WI.crl (hash: rFYS2jKe5g1/gh3ebLGXtiSK7hsxuw7ayv8gVrQ+LFQ=)
2: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (hash: 58sEBeu/Lw41bnGWkn+BoX7gGqJ3oc1042/9t7Bx+7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Validity
Not Before: May 11 08:08:10 2026 GMT
Not After : May 18 08:08:10 2026 GMT
Subject: CN=6a018e6a-5688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:3f:a4:c0:75:03:01:51:5d:7e:bc:8d:bf:
3a:b8:01:41:d6:92:9e:1e:a8:57:25:49:ee:16:76:
38:03:af:c0:ca:5f:02:5d:b5:33:fe:05:df:93:04:
4d:bf:ae:b0:8d:a5:5f:88:5f:b5:96:c0:fe:cd:e1:
a7:36:12:72:d5:1c:56:79:ad:e1:17:ca:e1:48:49:
d5:b4:69:96:86:f9:e1:da:79:2b:c1:31:c7:54:26:
ee:3f:68:5a:d3:5b:d4:be:31:9e:5b:89:87:2d:f4:
da:f6:6f:2c:5d:82:cb:a2:9f:41:11:a5:b7:8a:b7:
74:19:91:37:2e:16:51:93:3a:ad:b6:e6:00:91:7a:
94:5c:f7:e1:be:40:64:a2:42:ba:e8:03:6f:06:80:
7d:89:22:7a:95:e1:26:f8:9d:f4:38:7f:e6:6a:c1:
36:0f:12:37:55:af:b8:33:22:14:9e:e4:71:9f:70:
34:55:ef:02:62:87:ec:cd:97:27:02:ee:a6:13:b9:
84:2e:03:69:88:0a:6b:88:27:b4:9e:fb:51:8d:45:
b5:21:1f:2c:52:56:b9:7d:bd:8a:e6:14:75:29:fd:
31:8e:56:2a:df:9c:4c:27:06:86:1f:08:ab:ff:54:
5e:c6:2d:f1:39:2d:c6:5d:d8:7f:ab:d7:aa:86:fd:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7C:2B:9E:C2:78:33:ED:6C:5B:CA:D2:C0:C9:63:2A:58:F7:62:A2
X509v3 Authority Key Identifier:
keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2f:15:96:7c:a8:c0:9a:78:d4:e0:7e:28:77:61:17:b7:b9:
df:5e:24:82:e4:9c:23:a3:ba:e9:2d:01:79:0c:3f:3a:d6:20:
57:82:f2:fd:bf:be:92:55:56:88:9c:52:0d:6a:db:13:06:b2:
7d:1e:b9:eb:34:61:1a:c1:5c:21:c1:a8:d2:f9:81:1b:04:16:
7f:c8:54:03:50:69:4e:f3:1a:5e:c7:20:48:93:90:d5:16:e6:
09:ee:bb:f8:f2:88:05:fd:94:90:27:af:60:34:3e:ff:39:7e:
82:64:b1:df:dd:ee:80:5c:45:c7:5a:f5:5a:34:47:1c:2a:d9:
31:ec:12:55:e0:a9:24:61:6c:44:09:69:98:a7:5b:98:57:4c:
68:bb:15:f9:dd:af:5b:29:d3:ce:74:16:29:2b:16:1f:6a:30:
e6:7e:b7:c5:45:b7:6a:a3:ed:00:3e:94:29:b6:6d:57:2b:ee:
d2:95:5a:4b:78:93:24:e1:25:94:21:98:a7:5e:cb:15:be:e3:
ba:30:1d:33:bf:6d:be:3f:c4:52:1b:9b:18:96:ee:67:a7:57:
79:37:3c:6a:0d:6f:ab:b9:bf:00:44:f4:96:03:ae:6d:a9:06:
c4:92:86:fe:1b:ec:17:b6:37:63:8a:b2:d9:d6:59:1f:8f:72:
d4:c0:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:13 2026 by rpki-client