
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json)
Hash identifier: Z5QwDwK5l+0GIeXrin0cw9vjzvAVy3hLpPtIxLltL9U=
Subject key identifier: 04:DE:92:81:71:94:96:74:89:AF:EE:73:6A:5C:0C:4E:41:6C:06:63
Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Certificate serial: 013E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
Manifest number: 012C
Signing time: Wed 13 May 2026 05:46:15 +0000
Manifest this update: Wed 13 May 2026 05:46:14 +0000
Manifest next update: Wed 20 May 2026 05:46:14 +0000
Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: Yr4ZeXMaNtadYVZIQNha0dSPfiIkrvB/Y8K1SqwTygI=)
2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: pGkwox9umZUHoOM38loNX04qmSCRj5ejUz67/mM+dmc=)
3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: WXld54/qQpJ20SP2MF49RJrfgvRKOagSnwKZf6AK3Ng=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Validity
Not Before: May 13 05:46:14 2026 GMT
Not After : May 20 05:46:14 2026 GMT
Subject: CN=6a041027-b0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:7f:b6:3d:fa:ff:76:d4:f5:c8:e0:82:46:
42:07:b2:cd:99:f8:be:0e:cc:0a:a7:61:d9:e6:bc:
c7:9a:57:d8:ce:c4:0f:86:b7:46:38:4b:7d:d9:c9:
b3:32:7b:01:2a:9a:7e:d1:50:51:8e:58:3d:e8:bc:
70:46:0a:4c:a8:fd:8b:70:95:4d:01:95:d5:09:c3:
36:ab:a6:50:7e:7b:26:51:40:29:68:04:9f:a7:96:
37:2b:61:f6:f8:36:08:80:85:4f:74:56:a9:cb:41:
7e:11:5a:60:f2:c1:50:a7:d3:f0:de:6e:23:5a:ee:
9b:d6:2b:6f:fd:fd:c6:52:11:f2:f8:d6:3f:b3:14:
c4:20:24:13:53:d1:27:22:88:1e:3d:68:d8:2d:1b:
68:11:d1:d0:4f:7d:84:16:1f:34:77:0b:1b:3d:b3:
81:ad:10:64:9a:0c:21:50:b2:be:11:03:45:37:68:
dc:c4:d9:d9:c7:e4:08:56:c1:2f:46:a2:8f:28:15:
43:de:a9:87:4a:0b:08:8d:b2:ab:66:61:bd:9d:99:
cd:f3:91:0a:8c:a6:5b:1e:27:5a:fd:2f:25:69:81:
0c:ac:78:a5:3e:b7:5a:b2:92:3c:69:08:91:18:a9:
d4:36:42:73:28:09:74:49:45:3b:03:f2:eb:a5:a7:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DE:92:81:71:94:96:74:89:AF:EE:73:6A:5C:0C:4E:41:6C:06:63
X509v3 Authority Key Identifier:
keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:56:07:3a:8d:cb:06:00:23:1b:ad:4c:ec:8a:fd:f6:04:8e:
04:3c:b1:b0:c4:87:ab:aa:1d:c2:45:49:e8:67:a2:18:dd:38:
4b:7f:54:24:69:05:7a:df:e3:48:8a:46:5e:b8:5a:80:eb:82:
46:fa:8f:36:41:c9:44:fe:1e:e8:63:ae:fe:08:1c:fd:00:1a:
bf:47:5f:00:2c:a0:ef:90:df:22:70:8b:67:75:6c:02:c3:df:
30:1c:5c:72:8a:27:e2:79:da:4a:db:4a:b5:ed:75:20:0c:2b:
2b:cb:93:3f:1a:78:95:ee:dd:45:50:85:8a:82:9f:b7:f5:91:
51:d5:aa:fb:b6:1a:28:1b:63:78:49:a4:c1:b2:f9:f6:7c:2a:
f2:3b:61:7a:76:de:8d:ad:51:14:6c:c9:80:0a:f7:42:eb:e7:
bc:59:a9:de:86:ad:25:90:96:f1:b6:c7:da:6f:bb:14:99:e6:
d4:3a:6b:42:cc:a5:8e:1c:7a:74:1c:cb:94:d2:a4:75:88:27:
2d:af:fc:f4:71:95:3e:87:0c:47:b8:f0:da:ff:b1:61:9a:1f:
52:8a:b7:3c:6e:15:6f:e1:17:27:7e:7e:b0:ee:20:21:40:1f:
b6:36:33:5b:b6:ec:9b:4c:a9:d2:8a:a4:96:a0:4c:30:73:65:
f2:c7:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:29:40 2026 by rpki-client