
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json)
Hash identifier: vZYTpcbfbFlVn1tbdWWjT4nyRvMclkOmrPsJRX5lfBM=
Subject key identifier: 06:99:02:39:71:66:5C:5D:52:C1:64:9F:04:B4:98:AD:47:66:0A:C5
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
Manifest number: FD
Signing time: Wed 13 May 2026 06:23:19 +0000
Manifest this update: Wed 13 May 2026 06:23:19 +0000
Manifest next update: Wed 20 May 2026 06:23:19 +0000
Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: zJ72G8LtTdnYueoscnR/hHIGRUtLZfK4y65lsZsZoos=)
2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: h/SmLSS017YgGA7zYy4/07yQ0L9fFewbCCdQwU4sBFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Validity
Not Before: May 13 06:23:19 2026 GMT
Not After : May 20 06:23:19 2026 GMT
Subject: CN=6a0418d7-90d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:39:1c:85:af:15:8a:5b:ba:5d:e0:f6:f3:
ce:48:9a:7a:1f:94:b9:f4:4d:c4:fd:e8:5d:40:c4:
d7:70:15:dd:11:d1:d5:6b:4c:ba:8d:d4:94:6f:d7:
87:0b:3e:89:43:1a:77:51:2d:38:49:0c:22:19:d4:
4c:8b:4d:37:d4:7f:cc:e6:1e:8a:8d:22:79:c9:9f:
a6:ff:b8:42:ea:28:f3:b3:77:d5:da:ab:1f:17:fa:
98:eb:23:fb:ee:ee:e6:03:fa:45:ec:03:c9:fd:c7:
f7:7a:7c:b3:80:36:cf:24:57:c5:a6:4c:cd:e9:7c:
f9:8e:58:0a:96:0d:53:3b:0c:6f:84:4d:d5:59:c6:
ce:7a:a7:6c:16:79:a2:4f:dd:24:2f:8f:f6:2f:c4:
d5:9e:9a:60:dc:1a:39:a6:2d:b5:f1:0b:79:a2:2a:
af:af:2c:66:6f:cc:ee:ba:b2:a5:e3:96:3d:e5:72:
c4:fa:88:57:f2:8b:46:16:55:b7:37:47:a6:69:be:
5a:5c:24:2d:b1:01:c2:32:bf:7d:a6:2d:84:86:3c:
b7:21:a7:d2:cf:b8:62:aa:dc:41:4f:bc:a5:45:eb:
32:ab:fd:82:9f:9f:51:9d:7e:6f:53:48:2a:e2:c8:
b3:af:1b:ad:18:8e:21:f0:5f:6a:f9:3c:c0:62:e0:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:99:02:39:71:66:5C:5D:52:C1:64:9F:04:B4:98:AD:47:66:0A:C5
X509v3 Authority Key Identifier:
keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:82:a2:49:48:32:c3:86:03:d4:58:94:ee:72:bc:29:14:c4:
01:e5:49:e1:64:12:97:97:2e:db:10:40:89:1f:6b:19:56:e3:
37:81:b8:49:fe:53:c7:bb:79:b8:df:c5:b6:65:f7:56:2f:65:
51:bf:67:2f:f2:7a:d7:1c:47:9b:b4:f7:25:9d:bc:55:18:71:
71:9e:9f:e6:da:89:13:e2:e0:90:0e:2c:bf:d4:fb:c3:c1:6d:
22:ec:50:50:41:09:b9:51:52:10:fc:fd:b0:df:36:ea:78:10:
6e:b2:ea:98:ee:57:08:fc:33:3e:08:e3:9a:0a:e4:85:81:f3:
c4:91:e2:98:92:40:b3:04:10:fc:5b:55:f1:f6:c3:c6:09:96:
73:92:5a:aa:d1:f4:68:25:dd:6f:f3:dd:70:af:92:82:0b:9a:
95:e9:f1:9a:01:ab:3e:4c:13:6a:e3:79:fc:a2:86:5d:b6:b2:
fe:bf:21:c0:b7:72:fd:77:4f:39:ea:75:1c:e2:ba:30:80:c9:
87:63:af:35:ca:c4:86:1d:2d:8f:8f:d5:ae:a7:98:9c:d0:d8:
e4:ce:ec:89:bd:25:ce:c7:3b:b0:34:ea:ce:13:df:0c:58:e8:
06:d5:7e:26:f8:13:ae:62:09:4d:39:42:cb:3d:34:45:5f:9a:
98:b2:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:10:00 2026 by rpki-client