
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json)
Hash identifier: ioSxBgg/SzpKSyQCNRj7QDZt0bDDo3vmWxbacgXEPjA=
Subject key identifier: 4B:3E:CE:AA:69:D5:75:85:01:D1:C7:60:6D:A7:D6:04:3E:3C:D4:83
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial: 04CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
Manifest number: 04B8
Signing time: Tue 12 May 2026 23:59:59 +0000
Manifest this update: Tue 12 May 2026 23:59:59 +0000
Manifest next update: Tue 19 May 2026 23:59:59 +0000
Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: DId2ikDxPPMYaKDMgaCc3/mvy7sdIeyIW4/GgVYcqWM=)
2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: niq2x+TSIaVr2M9Yq4uJinm2FfqqQeskl0ZKo8P7pbQ=)
3: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: BviysmdqRD5SHQtytVhZ+gVShXWPkwicoPT5mAKuO60=)
4: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: jt8czHkqDAiIWpmhFez0BMJFRbxnxmNlnLH67Wuq05Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Validity
Not Before: May 12 23:59:59 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: CN=6a03beff-741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:1f:af:4b:47:b9:c3:29:c1:18:a6:c6:09:
d4:d5:f2:f5:08:15:8d:f4:b6:68:1e:50:6d:e9:73:
b0:cb:78:29:55:0f:56:a3:a4:e6:a7:03:33:62:0f:
71:04:35:d1:6f:cf:3e:38:75:f5:5f:0a:ac:17:08:
0c:c8:16:6d:d8:0b:1d:de:1a:a4:93:36:5c:25:ad:
a0:a6:4d:18:89:96:35:df:3b:6f:84:78:16:f1:51:
9b:5a:08:27:0e:d1:0f:95:c0:85:78:5a:0b:81:dd:
ee:c1:9e:ac:b6:17:ef:fd:41:54:50:90:9e:b6:52:
74:c3:84:58:55:80:d1:e2:01:4b:47:2d:12:f0:d9:
99:dc:47:72:0e:7d:f1:2c:b2:f3:df:ae:31:23:92:
5e:32:22:b8:ac:e4:15:f9:b2:73:8f:f6:aa:f6:8f:
c7:fd:63:18:ec:9a:19:ce:bf:75:ab:fc:ca:80:8d:
08:8c:26:93:c0:18:af:b2:28:85:d4:02:b4:10:69:
0b:ea:f0:c5:85:5a:b1:3d:69:ae:26:d0:f6:f1:62:
59:46:4f:0f:9b:43:9e:75:75:03:b1:ee:4d:31:75:
0e:b3:2b:f4:9e:2e:8a:78:c2:4c:35:ea:1b:0f:ba:
c8:e3:2d:82:9b:d5:21:e6:26:32:81:92:0f:12:87:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:CE:AA:69:D5:75:85:01:D1:C7:60:6D:A7:D6:04:3E:3C:D4:83
X509v3 Authority Key Identifier:
keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:12:db:73:ce:51:d5:d1:1f:a1:87:79:a3:fb:43:79:51:48:
20:f7:0c:17:ef:c3:5a:cd:30:8b:dc:95:36:f0:7c:b4:00:1e:
9d:47:db:48:bc:a0:73:ba:41:6b:c2:27:7a:6c:23:08:71:88:
0b:3f:35:f8:e9:68:cf:3d:18:d6:e6:73:26:42:1c:2b:f8:40:
06:12:39:6e:4d:0c:5c:9a:b2:97:cb:a9:2e:52:08:05:8c:8e:
e6:4f:a3:07:5b:f4:86:8e:f4:ea:a5:3d:f6:7d:7a:4c:20:4f:
84:42:f7:4a:db:0f:c9:96:17:3f:bc:71:a8:3c:79:53:58:ab:
8a:e0:2b:00:62:d0:4d:72:59:e9:bb:35:66:5c:ca:04:57:d6:
20:58:8d:6f:64:11:97:0f:2b:4a:43:ee:c8:85:a0:66:73:1c:
22:a2:5c:fb:d5:83:65:39:d7:32:66:f0:a0:9e:ff:af:90:a2:
d8:08:fb:0c:80:3c:b9:af:c7:7f:e6:f6:50:39:6c:d2:d2:2e:
4b:0d:fd:b9:80:d6:2b:d2:db:93:00:16:a8:a5:2b:3b:71:ed:
f1:cf:2e:93:6c:23:e0:38:22:30:9e:30:ee:5b:b8:c1:c8:a9:
0a:75:50:17:d5:9f:65:c3:70:26:b3:44:f8:c5:15:80:d1:6b:
4e:73:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:35 2026 by rpki-client