
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json)
Hash identifier: 2Yz+g/3L45pqvngFQfa1b9cURuwvHDMkK07NRfqdRKo=
Subject key identifier: 92:D8:93:A9:81:0A:4D:97:D5:D5:B7:29:88:16:CF:66:4C:A2:4E:A6
Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Certificate serial: 1108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
Manifest number: 10FF
Signing time: Tue 12 May 2026 17:18:02 +0000
Manifest this update: Tue 12 May 2026 17:18:01 +0000
Manifest next update: Tue 19 May 2026 17:18:01 +0000
Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: QgYR25l8sN5iNcyPWaZ8SowffMWQRPbaDAEc6F8X45U=)
2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: 8aCMHKssPdN319TEwBaL3NJec+4ceW9OeNk+s6B7p4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4360 (0x1108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7
Validity
Not Before: May 12 17:18:01 2026 GMT
Not After : May 19 17:18:01 2026 GMT
Subject: CN=6a0360ca-ab1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:19:7d:2d:1a:dd:86:0b:59:10:9d:f7:98:
1c:03:ee:c7:d2:65:ea:a4:8e:d5:68:14:0a:2b:47:
a4:d9:b3:54:8a:d4:1c:30:02:2b:0a:c9:18:cd:2b:
ce:2f:b5:58:13:bd:63:af:a4:ab:2f:bd:0f:20:f8:
13:89:64:66:6d:68:ed:e0:b6:f5:46:ed:70:a1:03:
2b:d9:97:00:3d:40:40:4f:b1:f2:08:03:ec:1a:9e:
ca:65:91:35:6c:1a:25:2f:4e:86:71:27:01:1d:a6:
46:8c:18:1a:67:c4:22:b9:1f:82:49:ce:79:10:a4:
26:ca:f5:84:8d:0e:d1:f0:69:40:ce:b4:55:d5:d6:
81:98:f3:d4:62:31:a7:0e:63:a9:44:ec:33:55:8b:
50:22:08:e0:43:47:0a:b0:e4:84:6b:fa:38:db:5f:
b4:85:a5:97:f6:05:bc:34:cc:9a:1a:55:15:be:7f:
98:ce:19:37:68:92:22:95:9f:a3:cf:75:ed:ff:6a:
cd:08:5c:c3:23:13:02:b6:3a:68:1f:75:f4:52:f2:
cd:c3:21:23:93:a5:93:de:e8:ad:c9:11:9a:9b:78:
f9:c3:79:c7:60:ad:8d:36:39:e6:ad:b6:c9:3a:24:
12:5b:d1:85:34:9e:4e:1e:44:a7:52:86:29:3f:89:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D8:93:A9:81:0A:4D:97:D5:D5:B7:29:88:16:CF:66:4C:A2:4E:A6
X509v3 Authority Key Identifier:
keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:13:06:ea:00:55:15:6e:db:72:db:22:58:27:f6:d4:b8:07:
be:8a:77:66:7d:9e:de:be:e1:8d:20:7f:c2:3a:68:20:56:4c:
64:20:a0:ac:50:28:92:23:a7:74:d2:da:65:32:58:2a:7e:25:
9a:52:9c:b6:de:2b:fe:62:b7:7b:c6:67:02:e2:3b:72:f8:cb:
f0:0d:df:24:ba:7b:6c:78:40:e6:e1:c7:0d:62:4f:41:af:cb:
33:2b:4c:3f:c8:ff:f2:15:94:c8:f1:75:5e:7e:e6:fe:17:a0:
24:8e:9d:f2:7f:23:8c:2c:c5:54:b7:b8:37:f7:b2:03:76:16:
5d:f1:95:8b:99:9b:e6:aa:a4:70:49:2a:f5:ad:c4:7a:6a:53:
82:cc:07:84:a1:ff:f6:6b:80:6b:a8:f4:4a:9f:39:ea:cb:b3:
0a:f9:2b:96:65:01:1e:50:fa:c5:47:b1:12:97:68:ac:85:c9:
33:0f:1f:79:75:60:27:08:d2:a1:ab:5a:e2:5a:8f:5d:1a:7f:
86:d7:c6:6f:0d:3a:4b:17:a7:06:de:bf:d1:d9:01:3b:d7:16:
f1:b1:0c:b0:dc:33:51:f3:75:4a:f5:74:7c:7a:d6:e0:88:ba:
4f:47:84:91:9d:6d:17:74:41:39:d1:21:a8:4a:0e:89:c3:eb:
89:0e:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:24 2026 by rpki-client