
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier: N3zj75vbLvpVFzDyeFtNsW8L2y/AuZ4+veeeOutkWvM=
Subject key identifier: AF:41:F6:50:F0:C2:C4:40:52:5A:DB:7B:2E:46:31:F6:7C:E0:95:61
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial: 3575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number: 3562
Signing time: Tue 12 May 2026 14:24:07 +0000
Manifest this update: Tue 12 May 2026 14:24:06 +0000
Manifest next update: Tue 19 May 2026 14:24:06 +0000
Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: VqdXjrgjRi2ybBoLzhTGXgaE4G3/Rx8r9KloxfXfRjw=)
2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: B+l8TJuzuBfxkWLiU727TKBvSyJyZhyj59n2Kpa5X6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13685 (0x3575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Validity
Not Before: May 12 14:24:06 2026 GMT
Not After : May 19 14:24:06 2026 GMT
Subject: CN=6a033807-bd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:5f:5b:46:71:4e:0d:e3:0f:b0:98:6a:53:
11:13:b2:84:17:b7:7b:0d:69:30:12:7e:28:cd:e2:
ee:f3:c5:e3:cd:03:0a:0b:a7:89:9a:7a:e2:2f:81:
3a:8c:87:3b:77:6f:95:d0:a7:b5:a9:ad:1e:96:fd:
f9:a2:d8:41:45:e8:4d:af:35:04:16:60:91:6d:56:
6f:97:b9:30:d9:07:18:f8:c2:2a:f3:55:09:ab:b6:
06:17:6e:3b:be:78:8a:23:e6:07:07:00:62:26:da:
1f:21:de:6d:1f:18:94:b7:eb:18:5b:2e:54:25:cb:
f7:87:ec:94:1c:30:2f:ea:2f:71:4d:aa:ce:ec:8f:
57:84:4e:cb:c0:36:63:21:e0:11:fe:7f:2e:29:95:
b9:cc:52:26:f7:08:17:f5:f1:76:07:0a:44:1c:ab:
75:95:dc:77:05:55:1e:2e:a6:a6:84:fd:81:4d:9b:
5f:4f:c0:dc:71:1d:af:be:c1:12:4a:0f:d3:2d:62:
1a:ea:40:91:37:36:ff:b5:54:b7:53:60:ca:bf:cf:
3b:2e:df:d4:52:19:71:5c:4f:aa:af:95:20:5b:13:
a0:b4:2a:42:8d:89:b3:28:a4:dd:b0:4b:27:cd:4a:
c1:0e:3d:5b:4f:64:7d:eb:24:26:21:53:21:31:1a:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:F6:50:F0:C2:C4:40:52:5A:DB:7B:2E:46:31:F6:7C:E0:95:61
X509v3 Authority Key Identifier:
keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:d9:d6:9f:9c:e5:66:41:5f:2c:44:ce:b4:66:67:ed:45:7b:
29:11:56:e3:2d:a5:f0:d8:c7:a1:ea:c4:64:ac:cd:84:c7:b1:
01:c7:a7:f0:85:96:b0:d6:7e:f1:eb:96:30:d5:3d:bc:8a:3f:
e4:cf:46:ef:42:7f:16:0f:a0:c3:d0:90:85:08:95:57:dc:da:
ca:5d:94:c6:63:3c:e1:3e:aa:7f:57:f1:f9:2a:8a:d2:95:31:
ed:35:ad:99:4e:7a:36:84:83:20:ab:52:f4:17:d9:eb:c6:fd:
5e:7d:db:f0:24:db:c3:d8:1a:d8:85:f7:fe:8a:89:14:f9:b7:
86:60:10:4e:b5:83:bc:34:6a:b1:a3:8f:31:31:79:3e:c4:c5:
08:0e:1c:93:8c:62:12:98:fd:b7:a0:04:f9:fd:91:ad:5d:f8:
71:94:0e:ab:48:a3:15:93:50:de:1d:9c:ec:93:e2:2a:e3:cb:
9c:2f:b4:25:d8:e0:1a:37:61:95:4a:d8:bc:94:42:8c:7a:90:
c6:d7:3f:6d:0f:3b:76:b1:11:0a:22:ac:f1:f0:c5:b8:cc:79:
e8:7d:5e:88:be:9b:e6:36:32:a1:1f:7f:b3:83:8a:e5:62:4c:
bd:27:14:18:52:85:0b:6b:71:68:9b:93:e1:4b:86:99:53:9e:
26:96:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:36:27 2026 by rpki-client