
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json)
Hash identifier: i6CTlxPU0Qnd6oxPm4SqL+1GgjJ68VmKfcwKfOgSxeo=
Subject key identifier: 7B:6C:3C:BF:EE:4D:25:E1:3D:C0:63:BB:A4:ED:85:4D:95:25:05:2E
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial: 2365
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
Manifest number: 2352
Signing time: Tue 12 May 2026 15:49:56 +0000
Manifest this update: Tue 12 May 2026 15:49:56 +0000
Manifest next update: Tue 19 May 2026 15:49:56 +0000
Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: FsB0p9giyUmpcx6daLZ7rY0Nw1l+lIDgpTAosEj7yuQ=)
2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: s8TTg9P3l8A2JinlhgnrgySiNnwBKzYcLgd2CwnP9lU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9061 (0x2365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Validity
Not Before: May 12 15:49:56 2026 GMT
Not After : May 19 15:49:56 2026 GMT
Subject: CN=6a034c24-8ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:56:87:87:f5:57:5e:ba:58:a0:2c:fe:ea:
c1:b0:ce:69:f3:ef:11:8e:66:3a:ba:0f:3b:c3:87:
2e:e3:b5:1d:c8:69:03:ce:a7:7b:e5:c1:81:5f:23:
b5:92:dd:e6:4e:b6:62:cb:f3:29:ec:f5:da:ef:04:
3b:d1:8e:1b:13:3a:f8:de:ef:58:98:b4:9d:fd:84:
d4:5e:fe:fc:ab:e2:24:58:10:95:3b:52:35:bf:4e:
d2:7a:3c:e2:2d:18:e5:a0:ff:7f:cd:d7:74:34:c1:
af:a9:e3:b9:01:1e:36:7b:04:ef:27:cf:20:c8:a4:
e6:73:ee:20:39:32:aa:d0:ee:6c:d6:22:fb:84:90:
b9:05:f1:29:1b:4e:78:2f:7e:af:d9:6f:8e:70:70:
26:38:02:59:fe:76:d6:9e:0a:ea:b6:56:6a:d9:58:
a1:6b:e0:da:bc:a8:ed:dc:3c:52:2d:7b:03:50:6c:
62:f2:0a:be:11:1b:63:f1:2e:f7:6a:2a:45:7e:24:
e2:9b:1c:74:af:4f:2e:4b:ba:32:4d:56:dc:55:1c:
33:75:ee:f6:59:ef:e6:18:ac:82:88:e6:29:c4:0c:
94:fd:b3:12:0a:bf:48:6b:12:e9:10:05:52:8b:59:
08:d0:01:e0:87:c3:af:9b:ae:4a:97:76:16:16:e8:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6C:3C:BF:EE:4D:25:E1:3D:C0:63:BB:A4:ED:85:4D:95:25:05:2E
X509v3 Authority Key Identifier:
keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:33:3d:7d:1d:9d:97:3b:5c:b1:81:47:bf:74:ea:6c:5b:71:
85:5d:45:c5:61:7a:66:96:27:00:04:53:09:79:53:42:ae:5a:
42:58:6a:0f:fe:fb:97:b1:64:12:ae:bb:5a:90:01:13:98:5f:
4a:34:1d:e7:c5:0a:c2:b6:dd:93:95:eb:90:1d:01:5e:23:c6:
bd:66:a0:aa:40:66:ad:5b:b4:36:0f:06:da:1a:49:97:84:37:
eb:f5:05:e2:c7:0f:24:76:92:82:8b:fa:e7:10:d5:1e:26:91:
45:88:52:5c:c7:a3:a9:da:45:a2:c4:f6:c0:79:71:99:19:64:
94:d5:75:fe:06:74:4f:ef:d7:0e:2c:71:fb:b9:4a:06:2a:15:
41:74:14:9e:15:7a:c5:69:b5:78:e5:a4:3e:e6:ab:9f:5c:5d:
72:de:57:03:86:6f:0a:46:44:a5:e3:6e:c3:f1:1e:58:8a:bc:
94:b3:25:05:9d:23:2a:0b:a0:5d:b3:82:69:67:6d:14:a8:56:
c3:68:a3:a6:c2:c9:a2:9f:e7:02:76:08:76:ba:04:4a:05:66:
65:38:d8:bd:ee:07:6f:5a:66:11:fc:c2:8c:b9:8c:10:1a:d6:
8d:60:67:36:a1:4a:9b:ff:26:e2:2c:9b:c3:fa:d7:20:6b:80:
7e:9c:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:02 2026 by rpki-client