
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier: smZ7DRCz6uqqX9y7falzX1Ds4vvzLRK46BW7tpfFAEA=
Subject key identifier: AA:2B:3B:09:96:91:59:0C:89:65:6F:46:D0:78:38:81:50:E6:73:1E
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial: 020F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number: 0209
Signing time: Mon 11 May 2026 03:02:17 +0000
Manifest this update: Mon 11 May 2026 03:02:16 +0000
Manifest next update: Mon 18 May 2026 03:02:16 +0000
Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: 1ptdPJIEp5/pJhOBwCLtn5+LbxInqMqQPykTC4dtWH4=)
2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: 615JmX9cruG++rabOl7xOJVJY/bjLhdXzPxbybiBquw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Validity
Not Before: May 11 03:02:16 2026 GMT
Not After : May 18 03:02:16 2026 GMT
Subject: CN=6a0146b8-ee00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:da:7e:89:c8:08:6f:54:a7:97:98:2b:8b:
c4:89:1f:82:aa:fd:21:dc:aa:7f:2c:46:08:1d:04:
88:a2:6a:fc:ac:60:7c:bd:bf:60:cc:5e:d6:93:bd:
54:cb:4e:2d:17:ce:2f:f8:64:cb:5a:0d:57:42:3f:
3b:ab:b9:8a:48:d9:55:6f:21:48:47:ad:3c:3f:48:
af:d5:a7:0d:f2:04:fd:10:c4:f4:63:8a:c6:07:62:
d5:5a:55:a9:56:77:d2:3c:2a:f5:7e:9f:3a:e0:ac:
00:2a:7c:c0:4b:96:f3:60:d0:85:cc:1d:d7:4a:1f:
4d:ec:2c:05:f6:e8:58:0b:37:6d:da:0e:f6:86:5b:
d3:6b:60:24:36:cc:58:17:33:1f:ce:90:96:2a:57:
ee:67:7c:00:af:77:74:44:c5:06:f4:ec:65:16:31:
7c:b9:8b:6f:c2:4c:84:09:a6:42:6e:d4:cd:95:de:
7e:4f:4d:74:d6:10:38:52:eb:89:10:46:d4:95:72:
54:0e:1c:2f:e9:f3:7a:d5:fb:c0:82:59:32:46:8d:
ef:6a:c4:fc:f1:07:45:a3:68:3d:b8:53:ac:a5:6f:
7e:f5:25:cb:96:69:79:b9:c6:3c:d3:c9:ed:34:a9:
2e:dd:9c:91:91:52:70:91:a0:cc:74:91:af:81:e3:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2B:3B:09:96:91:59:0C:89:65:6F:46:D0:78:38:81:50:E6:73:1E
X509v3 Authority Key Identifier:
keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b3:f2:00:c7:e1:31:a5:20:e1:5e:51:0a:34:ef:06:d2:ce:
3f:6d:3c:8e:25:c3:55:d0:95:1a:86:5b:1c:bd:6d:0c:7b:3e:
34:c6:ea:8d:53:ef:21:57:84:1e:d1:d9:89:99:76:4c:05:12:
d8:b3:78:27:db:70:48:31:a4:3a:91:3c:a9:91:c0:22:ae:4c:
5a:13:c2:35:75:b6:16:ee:37:79:16:63:97:f6:54:a6:aa:c5:
ec:0b:52:bc:13:12:37:f4:31:16:44:d7:f9:8c:61:9f:db:93:
87:8b:f1:d5:84:b9:e3:bd:c6:ad:52:8d:11:af:e3:dc:49:d9:
ef:28:5e:ac:f7:a7:b3:07:fd:5e:54:29:8d:be:05:0b:3d:4e:
ea:7b:05:93:bc:02:ad:b9:cd:e8:ad:cc:3d:cd:fc:22:37:d1:
bc:bf:a9:2f:33:fc:fb:44:b2:8b:23:a4:7a:02:05:6b:a4:8b:
dc:95:ec:7f:2b:5d:94:bb:86:56:13:22:d5:34:12:0b:7e:04:
05:a5:94:34:aa:3b:83:0f:5b:b8:9f:84:0e:d1:bb:fd:70:d2:
78:92:ee:8a:a9:19:fe:4f:c1:29:1b:63:c3:7a:cc:1a:87:06:
cb:6e:d1:3a:cd:a6:13:51:66:23:70:7c:c2:4a:79:85:c2:00:
06:33:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:18:15 2026 by rpki-client