
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
File: Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json)
Hash identifier: vb2sRFvHlq66JPKtj907lEbwmGrf/Pa5KL9ywwvVtCc=
Subject key identifier: F1:20:B6:B6:94:F0:B6:69:87:55:5C:74:44:B0:06:31:83:08:4B:96
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Certificate issuer: /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
Manifest number: 34
Signing time: Mon 11 May 2026 08:51:10 +0000
Manifest this update: Mon 11 May 2026 08:51:10 +0000
Manifest next update: Mon 18 May 2026 08:51:10 +0000
Files and hashes: 1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: cGkZ2B+58sRlrc4YRrQXYq0Y0AJr5IkTq9Oc1oYoFcg=)
2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: rAKQfqzwQK5IzLFhXtLBp7YYHEkrei2qYSNZ5UbT8L0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Validity
Not Before: May 11 08:51:10 2026 GMT
Not After : May 18 08:51:10 2026 GMT
Subject: CN=6a01987e-70ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:c2:4e:6b:00:78:73:b2:56:90:b7:34:b2:
6d:a9:b0:10:53:89:ba:ca:f4:f0:d6:66:90:ce:22:
46:03:ed:ea:9a:20:cd:cf:a8:da:45:de:8c:14:42:
97:07:92:0e:43:df:3c:68:f3:63:01:86:48:e1:2a:
bb:c6:40:f9:f6:6a:ec:df:7d:f6:00:0f:67:af:3b:
b4:9a:c3:ad:f7:d9:f6:54:3d:e1:8d:0e:7e:83:bc:
65:83:dc:77:03:51:aa:77:5f:c4:06:93:88:bb:c6:
73:e3:45:04:32:20:15:1c:60:c5:3e:ab:b6:2d:ba:
f5:31:b7:bb:a7:dc:b9:25:aa:d2:21:df:e7:32:3b:
79:ce:b6:24:9b:49:c7:27:8e:a0:9a:5f:c6:0f:1e:
21:87:a2:ba:5f:27:f2:18:9f:58:34:bc:69:ae:ac:
0b:cb:e9:b6:97:79:04:63:4a:51:9d:4e:14:12:6a:
df:70:02:ce:94:47:b1:00:97:0d:27:09:24:ce:bc:
29:fb:0b:46:c2:49:36:87:37:b3:47:6c:09:96:ad:
2f:be:91:43:10:9e:61:6a:b8:43:ba:cc:27:d9:5d:
4b:9b:f9:43:5a:0d:d1:09:49:c0:e9:0e:b1:a4:b9:
be:82:b2:e1:59:13:c8:84:ec:e9:6f:6c:ea:6e:da:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:B6:B6:94:F0:B6:69:87:55:5C:74:44:B0:06:31:83:08:4B:96
X509v3 Authority Key Identifier:
keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:68:95:7f:1f:bf:3e:da:e0:b0:65:49:78:40:63:c1:67:d7:
b6:75:5e:01:ca:65:9b:71:90:47:2b:03:6f:06:69:78:7a:6c:
69:a1:27:40:33:6e:f4:ab:31:26:b9:82:c0:f7:a1:6d:d8:50:
f2:4e:9a:cd:4b:6b:73:0b:1b:e3:79:f5:07:69:83:9b:1c:18:
0d:3e:8a:7a:b2:8f:49:27:cd:ab:a7:c8:dd:39:36:7f:16:cc:
d0:88:5a:b4:6f:c2:0e:1d:91:1b:4d:4e:7e:28:23:41:f8:f0:
44:53:a1:2b:0c:f7:e5:3c:85:f0:d6:36:d8:9b:b0:14:0b:b4:
ee:13:a2:ad:85:e8:a3:04:0b:62:da:92:5e:f4:52:22:45:51:
8a:cf:15:6d:3a:22:6a:02:6a:c7:3f:3c:47:96:77:eb:1c:3b:
1f:31:b1:8a:49:20:83:ab:73:47:3c:66:1a:79:f6:e0:d8:14:
4f:39:00:a1:32:a6:1f:f7:d0:1c:5a:1f:5d:1a:75:b3:57:be:
10:f1:8b:fa:91:1a:75:13:30:c2:f0:20:71:ce:08:6c:ad:dd:
e9:16:82:0e:fd:ea:51:84:33:de:a8:e3:2f:ee:77:4f:9a:a8:
af:a8:e8:e0:ac:ab:1b:0e:8b:5f:4e:57:02:21:00:91:07:fd:
f7:2d:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:34 2026 by rpki-client