
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
File: b2WgySJgsa2iMYeym6w76trAVmE.mft (raw, json)
Hash identifier: m2/3fDes2byZpq/afPzxj1iJ9XSXn9AY7T9sbDkzXFs=
Subject key identifier: FE:E2:0E:78:53:19:21:68:A1:5D:CC:4A:0C:C1:65:38:4A:90:FB:3F
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Certificate issuer: /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
Manifest number: 0189
Signing time: Mon 11 May 2026 04:39:01 +0000
Manifest this update: Mon 11 May 2026 04:39:00 +0000
Manifest next update: Mon 18 May 2026 04:39:00 +0000
Files and hashes: 1: b2WgySJgsa2iMYeym6w76trAVmE.crl (hash: BG2OttflH3NMLCjhIXifHGtdnICn+ZUhqNbbG10bCiM=)
2: 9DE187FA2A8211F08575E277C4F9AE02.roa (hash: 4eeNf5jC2Mk+3sdc5Wmsh3IL+6DgzipfF5IlQKuRXx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Validity
Not Before: May 11 04:39:00 2026 GMT
Not After : May 18 04:39:00 2026 GMT
Subject: CN=6a015d65-39ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:71:d6:f1:4d:d6:9c:c1:f1:a7:61:30:07:65:
a7:d6:d9:80:24:29:d6:7f:c0:4b:5e:16:3c:ea:75:
ff:e8:54:89:44:4d:94:e2:b0:4e:66:32:74:aa:de:
0d:87:94:9d:0a:24:8b:ea:4e:af:e4:fc:3b:73:69:
3b:e4:93:60:b1:7d:ba:ff:0e:c4:a5:e4:4a:f2:6b:
84:cc:57:69:fd:85:19:f0:29:c9:f4:52:09:ea:c1:
88:a6:d2:67:3f:d3:03:30:34:11:15:07:0c:8a:5d:
36:00:7c:c2:e7:b1:85:46:d7:62:46:1b:fe:b3:0d:
e4:0a:be:7b:a6:b0:d2:75:0c:30:52:90:84:52:9f:
e4:d0:2f:42:35:55:e3:a0:e7:67:12:df:ff:01:ca:
5f:c4:25:0b:39:49:ff:15:b5:e8:7a:34:7e:e6:88:
84:55:e6:a5:c1:d0:13:79:71:cd:9d:57:17:26:da:
c4:d0:a9:28:a4:4c:7e:db:22:1d:f8:9b:9c:d0:0a:
6a:64:21:c5:a2:f3:e5:45:2b:c2:cb:53:c8:a9:8e:
36:15:28:55:6c:57:30:21:d2:d8:40:9a:90:e3:f0:
fa:91:09:3a:bc:98:de:3b:c3:fd:43:88:df:e7:02:
1e:59:4f:4e:37:e4:1f:dd:31:7b:4d:3c:fe:c3:8e:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E2:0E:78:53:19:21:68:A1:5D:CC:4A:0C:C1:65:38:4A:90:FB:3F
X509v3 Authority Key Identifier:
keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:20:e0:db:06:6f:cb:80:df:a0:aa:09:07:0d:57:e7:68:a9:
91:e6:3c:99:3d:13:f4:c8:9d:27:a6:78:b7:14:87:a1:f2:21:
c0:7a:2f:5c:41:92:9a:6f:9d:74:a4:05:c9:ac:bf:79:ea:84:
6b:e7:ad:fe:45:c1:a0:7f:76:eb:45:0b:cb:f2:67:f9:19:b3:
e8:1e:cb:30:e8:4e:fc:4b:fd:fb:81:82:2f:a8:36:b0:f4:ad:
7d:e9:77:56:47:fe:db:a6:58:54:10:8c:58:a1:7e:9b:1a:1c:
20:47:42:a4:37:03:c2:b7:b0:d2:49:2e:96:b7:ca:89:e6:c6:
d0:ab:33:0b:1b:62:96:5e:79:5b:e7:fe:47:2a:79:ae:95:42:
87:60:cb:bd:9e:41:0a:31:f8:7c:c3:3d:46:dc:79:da:e5:fb:
0f:0e:88:37:ae:d1:de:01:00:c0:4e:1a:46:57:4d:ea:d3:f2:
53:b9:07:45:16:f0:d4:3a:6f:3b:9f:88:9d:0c:43:36:14:9f:
1e:24:37:da:5e:e8:e0:55:b1:e4:d9:c3:32:3d:b1:df:b1:20:
67:e8:97:8d:5b:19:9d:b4:b3:ca:44:d9:59:8a:29:0c:81:69:
93:11:f3:a2:ef:a2:9e:da:9c:25:3e:70:88:ee:b8:8f:b3:47:
71:3d:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:59 2026 by rpki-client