
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json)
Hash identifier: eVuW6rIlXwxPfhQBFXONxEQAw7i46JM3KasTT+iX+Pw=
Subject key identifier: DE:4D:7D:CA:FB:30:92:C4:07:6A:3C:30:31:59:A0:EC:42:99:07:44
Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
Certificate serial: 08CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
Manifest number: 08BA
Signing time: Tue 12 May 2026 20:31:55 +0000
Manifest this update: Tue 12 May 2026 20:31:54 +0000
Manifest next update: Tue 19 May 2026 20:31:54 +0000
Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: 2LZBKMGwEpCpjf8hsQYYx2/dLOohcAOUfiWx7YhozIo=)
2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: +PCxlBcrUQ01gjtIwgn/yayahZV/k+s8u1ahf84hyOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl
rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256
Validity
Not Before: May 12 20:31:54 2026 GMT
Not After : May 19 20:31:54 2026 GMT
Subject: CN=6a038e3b-94b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:37:a0:af:5d:0e:14:5d:04:9f:1e:f2:8b:
66:cc:19:e0:9a:01:06:64:d4:fc:55:29:62:1b:50:
2c:6d:3a:be:f6:63:ea:fa:07:34:0c:af:5b:b5:3c:
c9:70:50:07:4e:de:9e:16:7c:b1:fd:71:f4:28:d0:
19:de:9b:bb:69:38:df:c6:68:ff:84:d3:3e:8b:a9:
3b:0c:f6:24:8a:3d:d1:1d:09:32:49:fc:71:04:00:
ba:e3:cc:02:6a:e2:f2:15:59:b8:14:1e:b6:7b:24:
db:e3:41:3c:02:7f:8d:25:de:f9:0d:a0:72:98:b0:
9c:31:b2:8c:04:36:be:62:f2:3f:10:7f:cc:e1:55:
40:bd:88:0f:d6:de:6d:3f:66:49:54:fb:ce:50:97:
35:ec:18:e5:89:4a:5e:21:69:5b:8a:ae:2e:d7:8f:
19:a3:dc:a6:9a:a5:0a:ef:55:9e:28:f1:ad:49:14:
ed:d9:a8:aa:f5:dd:2b:1d:e8:be:78:f9:6f:21:39:
4f:20:38:1e:f8:c4:a2:4f:27:b5:28:47:81:44:c4:
61:c4:8b:44:9a:ed:42:d2:ec:66:66:36:2a:93:c2:
62:41:94:e2:ed:b1:e5:1d:4d:22:1b:2e:d8:32:d5:
77:83:a2:27:45:b8:64:7a:1a:8c:d5:52:71:74:42:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:7D:CA:FB:30:92:C4:07:6A:3C:30:31:59:A0:EC:42:99:07:44
X509v3 Authority Key Identifier:
keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f5:c1:25:2e:8f:fa:b4:5e:29:b8:94:22:00:df:03:e4:ba:
a2:e9:ea:7f:0d:e1:20:9a:5e:1c:b8:cd:ab:85:f5:dd:d4:f8:
bc:f6:ab:ef:37:bd:e8:60:73:8d:95:59:25:c5:b5:dc:cf:9d:
c3:8d:86:b4:1f:08:f6:14:a8:e6:3d:32:66:7c:b6:cc:b0:07:
be:cd:b5:f4:8e:ae:d1:29:7f:35:73:17:aa:43:84:dc:d4:83:
80:75:8c:52:61:a6:94:cd:01:9d:86:d5:01:85:cd:18:d4:cc:
c2:0c:5b:14:26:0c:1f:d8:93:c8:99:34:28:3b:be:02:8c:f2:
cb:89:eb:57:21:7b:e7:26:f6:53:f4:08:95:bc:54:46:ac:2b:
bb:49:3b:ea:2d:79:93:2e:3e:3f:d0:38:f4:ec:4f:94:e1:5e:
73:50:db:a1:50:58:0d:be:08:dc:b3:22:72:7f:37:52:fb:ad:
8d:e8:5b:22:63:40:96:c7:68:f7:f3:62:22:ea:ac:ea:23:10:
74:5b:04:18:54:61:fc:35:16:ea:cb:73:e2:04:e6:58:9f:bb:
b2:2a:0c:9d:1a:d0:0b:26:97:05:56:f9:b0:f1:16:0e:1c:41:
22:f6:fb:54:ad:03:ee:78:26:a6:e8:37:59:a1:90:1d:3e:b8:
fd:61:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:20 2026 by rpki-client