
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json)
Hash identifier: vaR7ZDBshUPIag2RnHtOFXLeQKZ4hpuaH9DahIt862g=
Subject key identifier: 5C:A6:A8:5B:77:58:F6:88:B5:63:B9:7F:1F:A8:15:02:56:81:C8:78
Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
Manifest number: 01D6
Signing time: Mon 11 May 2026 03:49:33 +0000
Manifest this update: Mon 11 May 2026 03:49:32 +0000
Manifest next update: Mon 18 May 2026 03:49:32 +0000
Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: WjZdbnybJNCGS3qOSrhEXSaMDR1QFka3/Cin62IIXxg=)
2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: arCyI6WOk9LgFnQELoYxClkR3V434NgEayNtabuOGMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Validity
Not Before: May 11 03:49:32 2026 GMT
Not After : May 18 03:49:32 2026 GMT
Subject: CN=6a0151cc-263c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:99:fe:5f:fb:44:6f:7d:aa:2b:3c:b6:22:
91:f7:61:91:12:66:02:f4:a9:50:61:a4:1b:d3:1a:
0b:bf:5b:d5:85:ac:6c:13:1f:69:d0:00:a6:a5:50:
15:fd:79:a5:95:1f:23:e6:d1:ef:92:fd:87:f5:e8:
67:42:d7:20:b7:a9:5c:2b:0b:8e:2e:b2:95:71:81:
02:b9:05:bd:5e:77:fb:05:df:64:b9:d3:2b:0b:52:
8c:b6:8e:a8:65:47:de:0a:c5:52:fc:08:a2:96:8d:
f9:b5:69:11:53:ac:cb:11:5c:f2:51:b2:db:c3:d9:
05:7f:b9:16:d7:fa:a8:7c:51:1f:a7:e2:b6:25:65:
b0:13:a2:08:8f:1c:b9:d9:8c:19:d2:49:ab:53:91:
c8:41:9f:30:17:63:4c:f9:36:2a:43:d4:16:2b:6c:
66:58:8a:93:fd:35:ad:d5:f7:b2:74:fc:58:aa:1d:
e8:33:e2:34:e3:51:b3:6a:f1:24:67:ca:09:ad:f9:
ad:c0:58:52:05:1a:b3:b2:4d:22:b8:46:dc:6b:c6:
50:37:15:c6:29:1d:fb:57:ab:f1:ad:c6:2a:11:b6:
30:22:f5:cf:81:eb:44:3c:37:44:ea:66:5c:15:e6:
07:07:5e:a7:40:0c:09:20:e2:14:f8:2f:85:fe:85:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:A8:5B:77:58:F6:88:B5:63:B9:7F:1F:A8:15:02:56:81:C8:78
X509v3 Authority Key Identifier:
keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e1:e7:8d:3e:b7:73:27:48:fd:c3:d1:5a:f9:32:bb:53:65:
eb:af:9c:d5:6f:79:10:8f:d9:2c:51:42:24:41:c2:c0:60:ca:
7d:85:c5:8c:f0:76:3c:f2:54:0f:1c:c5:26:61:82:af:ee:4a:
de:9e:03:1d:3c:4c:7f:3a:98:79:b1:84:89:ae:bf:9c:c5:44:
8d:61:09:fc:e8:fe:f7:b3:b6:c1:3b:11:b3:ef:ee:ce:21:bf:
ed:e1:19:78:e4:fd:da:bc:0f:62:be:1e:bf:f3:9b:fe:2f:64:
76:3e:55:ba:07:ec:05:3e:68:16:ce:38:f9:ec:67:8c:5e:44:
61:de:a3:41:e2:6a:c7:08:5c:e8:fd:63:23:f0:dc:6c:53:b7:
c5:eb:f9:1b:b6:e1:11:03:b5:5f:30:31:45:42:e8:4d:a9:83:
27:61:12:88:78:80:fb:73:21:fa:59:8e:af:08:bd:78:1a:45:
e3:ff:e0:8b:05:4a:52:55:ca:13:af:65:44:35:10:ea:cb:f9:
97:d6:05:34:70:82:01:2d:44:e2:9c:e7:78:e2:b6:91:cd:ea:
4a:6e:f0:99:41:f5:a2:cf:e9:e8:8c:32:c1:8e:c2:a7:b2:cc:
7d:18:91:86:f4:4b:46:ab:8b:01:cd:92:72:08:06:6b:e8:b8:
bf:93:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:22 2026 by rpki-client