
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json)
Hash identifier: SApcwzBFxoed47qMTs1LIiTPR75A0KMHYbUqmttwkSk=
Subject key identifier: 53:88:3A:79:74:49:FE:5A:81:3C:02:71:BC:14:B7:18:0E:01:2C:EE
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
Manifest number: 0111
Signing time: Mon 11 May 2026 06:04:41 +0000
Manifest this update: Mon 11 May 2026 06:04:41 +0000
Manifest next update: Mon 18 May 2026 06:04:41 +0000
Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: 4mNeI3zOq2yY3Yz7jMHwn1tUdbaLwRUGu5Iq/I/ib08=)
2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: Z33Oa7MXRQs8Va13un2oigc2yJEQMc7nxUU5xcFCzXI=)
3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: 5akZ6mHQq1ksNbd/DS/b4qeyRo6TcvJuP9SLF4pNYTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Validity
Not Before: May 11 06:04:41 2026 GMT
Not After : May 18 06:04:41 2026 GMT
Subject: CN=6a017179-a7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:2d:96:a3:37:fd:96:02:a6:77:ed:b4:a8:
b0:5e:02:50:7e:97:d0:b9:61:d1:27:e3:8c:5c:27:
3e:26:86:cc:aa:9d:4a:54:c8:5f:b3:bf:5d:02:58:
32:e0:33:e0:4d:bd:44:b3:39:99:0d:e6:77:8a:1d:
83:d0:5f:ee:b2:74:b2:a0:f3:41:65:65:3c:e5:51:
97:ce:c9:32:d7:20:95:fc:a8:2c:ea:c3:e1:38:7f:
a9:27:bd:52:dd:7c:a0:0f:f5:ba:78:c7:3d:5b:d3:
f4:09:c5:90:eb:40:4f:97:30:00:55:60:b2:6e:14:
13:df:a4:15:3b:74:14:5f:84:17:55:ca:99:29:bd:
a1:49:e0:00:dd:d5:26:2f:da:2d:0b:5c:d9:55:d0:
39:d6:d8:cb:6b:09:e6:e7:ab:0f:89:0b:c9:94:f8:
a6:72:a5:94:50:9e:8b:81:48:6e:89:26:2f:6b:92:
6b:b0:ba:7d:f8:d0:f3:05:de:72:85:4a:98:04:59:
16:57:f8:6e:b9:58:46:02:43:23:8e:fc:2b:0f:69:
1e:41:35:88:55:8c:3e:5f:6d:d0:a6:45:3e:8f:8b:
c1:b6:3e:5c:e8:b8:00:c8:e6:cb:c5:ce:c4:7a:d4:
d9:a1:d8:ad:82:bb:4b:85:b4:7b:ac:45:ac:37:73:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:88:3A:79:74:49:FE:5A:81:3C:02:71:BC:14:B7:18:0E:01:2C:EE
X509v3 Authority Key Identifier:
keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f1:19:83:02:65:2c:24:82:a7:6f:22:2a:58:65:ff:35:d1:
7e:3c:2b:8f:47:3a:77:27:94:af:3b:65:c5:8f:91:a4:c7:7c:
60:9a:65:6d:60:a0:c7:a1:1c:0b:a5:9f:5c:3a:a8:08:9a:2b:
45:f7:84:ca:0f:8c:7e:fd:92:32:d7:fb:e1:72:d1:2b:8e:ef:
ee:c9:b0:04:ff:fa:cf:3e:4e:9d:0f:56:93:17:b8:3f:b3:99:
b8:64:83:61:fa:90:94:7e:5d:64:48:65:27:3c:84:66:2b:38:
aa:4d:e0:61:ad:29:c2:6c:2c:90:7c:e4:b4:73:2e:77:cc:0d:
02:b2:f2:88:0a:2c:ec:38:22:2b:b6:02:1f:51:56:57:85:fb:
d8:2b:68:fa:c2:27:fa:f6:bd:1a:f6:96:2e:33:3d:bb:c3:c7:
8e:fa:ff:40:75:42:f4:cb:6b:40:31:7a:f8:f1:85:79:1e:00:
01:76:c6:fd:e7:87:34:ce:b3:5f:ed:af:e2:d7:ee:76:4c:88:
91:56:4d:97:48:7a:13:4c:66:81:3b:f3:35:de:e3:62:ca:4f:
8a:77:8e:44:76:21:16:00:52:71:f4:13:63:31:26:96:7a:a2:
c7:1d:f2:85:af:87:fb:bb:4d:c9:ab:3d:54:25:f6:14:1e:8f:
9c:51:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:43 2026 by rpki-client