
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft
File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json)
Hash identifier: ivqhIEfGhwjt6K+uqtpgP4vMX0kpPU7pru1ozIL378c=
Subject key identifier: 88:F3:E8:77:B5:5F:4D:FE:D5:2E:34:8F:61:FE:7F:20:81:60:13:C3
Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89
Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft
Manifest number: 0226
Signing time: Mon 11 May 2026 02:44:26 +0000
Manifest this update: Mon 11 May 2026 02:44:25 +0000
Manifest next update: Mon 18 May 2026 02:44:25 +0000
Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: HtKkCHGnWnxaMjeADbmy/RNm3PduNBSd3wYVInrFOBM=)
2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: BQffJWUhC3MFwSjvVuhP9nq/ZEQ/mBQ35OQP2zYEaDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl
rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89
Validity
Not Before: May 11 02:44:25 2026 GMT
Not After : May 18 02:44:25 2026 GMT
Subject: CN=6a01428a-1e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:16:3d:3d:50:db:77:01:df:0c:3e:c4:bf:
e1:77:e6:3c:c3:8c:5f:ea:76:bb:dd:2c:2e:1e:33:
09:9f:0d:2c:ac:b1:cd:8a:9a:79:e0:91:5d:44:57:
6d:69:0a:95:3e:0e:df:dd:5b:00:fc:64:cd:b3:f3:
e0:96:90:4c:c0:f4:42:ea:bd:52:6b:2d:d7:33:03:
6a:23:73:76:3b:be:1c:5a:b0:ad:85:f3:04:f4:21:
a0:ae:c6:05:9e:8e:fd:f7:b2:9c:64:74:d9:65:cb:
6c:26:e5:e7:c3:ca:8e:50:4c:ad:ba:d9:a8:67:46:
2b:05:e7:a7:2b:c8:79:f2:1a:e7:f4:ef:61:fe:b6:
de:92:b8:f7:13:d7:ce:7f:67:b0:54:86:d4:78:2a:
03:d9:e7:38:fc:ff:84:65:a5:9d:24:bd:da:74:48:
4e:59:cf:54:aa:42:ee:4f:0d:c5:91:a0:34:59:e3:
92:c8:c3:78:2a:5c:93:a8:ab:33:52:7b:38:79:66:
9f:32:03:64:26:56:e5:15:46:ba:c2:25:cc:16:d1:
86:4e:1b:cd:96:61:ef:54:88:14:c7:86:6b:76:cb:
38:9d:ec:68:f8:be:45:d8:49:9b:41:6c:89:1d:6d:
a7:bf:47:4f:5d:4c:92:dc:eb:3c:76:36:49:30:0f:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F3:E8:77:B5:5F:4D:FE:D5:2E:34:8F:61:FE:7F:20:81:60:13:C3
X509v3 Authority Key Identifier:
keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d5:22:2f:4d:22:66:cb:af:db:41:e6:d3:b9:95:c4:86:ee:
0a:b7:22:ec:d4:cc:9b:c7:87:9a:7f:c7:f0:65:10:2a:df:48:
94:f0:21:6d:ae:e4:c9:4d:51:2b:a9:83:24:55:a3:02:ab:36:
b8:b9:d5:e2:f0:44:0e:c7:25:a3:41:0b:96:2f:dc:a5:6c:fc:
c6:d5:92:14:ac:df:69:ed:69:f7:90:f6:46:df:ab:62:20:62:
ad:5e:c4:0d:4c:d8:1a:a6:79:bc:24:b2:c0:eb:95:1e:d9:95:
39:f6:6d:e0:aa:37:74:d8:1f:9b:cb:d0:2f:83:2e:35:29:2e:
1f:1f:9a:04:a1:55:e7:93:91:84:56:73:b1:e3:75:ff:de:ec:
8e:10:57:25:2c:f5:e0:46:8b:56:f5:fe:e6:a3:a8:a6:01:9c:
f0:68:ac:31:15:20:da:4a:4e:30:2f:ad:0f:02:6f:ee:1b:0b:
62:ad:3a:af:3b:76:62:27:45:76:55:d9:2c:46:01:37:40:f1:
2d:dd:bf:2a:b3:0a:fe:19:21:45:cc:30:bf:73:5d:19:63:c9:
df:a3:9c:47:23:07:37:17:b7:35:5e:a3:eb:c9:b6:6d:52:5d:
ca:0e:7a:2e:30:50:4e:0d:17:c8:48:e5:b3:ba:29:a4:b5:ce:
d5:b2:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:25 2026 by rpki-client