
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json)
Hash identifier: fBTkNR2VtDn1J3F55G+Mwdhq8CqtbCPUyjUworPzcKA=
Subject key identifier: DC:16:4B:F6:D8:5D:6E:3C:59:2E:49:9F:A4:C5:17:45:C0:AE:B7:49
Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA
Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA
Certificate serial: 0B81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
Manifest number: 0B73
Signing time: Tue 12 May 2026 19:13:02 +0000
Manifest this update: Tue 12 May 2026 19:13:02 +0000
Manifest next update: Tue 19 May 2026 19:13:02 +0000
Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: DdO0n5/S/YZqXDbc9zGlgnu7w8WA5FSDNgvWAaBAMNk=)
2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: +aYHCdKpTUqPrKwnjjH4Hbnxa+6NoXo2+s7Ijz7iypQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl
rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2945 (0xb81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA
Validity
Not Before: May 12 19:13:02 2026 GMT
Not After : May 19 19:13:02 2026 GMT
Subject: CN=6a037bbe-5fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:e2:6d:ff:43:85:2a:1e:bb:3d:f7:91:e5:
2e:51:13:d0:d6:9c:79:0a:96:45:17:1a:ee:aa:37:
63:53:3d:80:25:a5:c9:47:5f:0f:47:b3:4d:32:86:
53:ea:1d:fb:50:89:8f:b7:59:53:6c:22:8c:08:dc:
5b:5d:bc:d8:fe:22:f1:c2:20:33:e4:56:ff:e9:68:
41:2b:9a:a2:83:b3:7a:96:58:e9:19:ad:f5:fa:cb:
5f:6f:df:f0:7f:62:26:67:8f:59:70:62:06:5a:a6:
f4:b1:50:b2:82:7e:0b:ea:68:fe:66:29:9f:97:5e:
ee:de:20:13:71:bc:31:78:6c:e4:04:46:33:0e:9b:
42:2e:73:81:a2:fd:b9:6a:06:9f:9a:93:00:d1:55:
31:32:a8:23:64:4e:87:82:92:3f:89:64:a2:c5:d4:
af:05:03:12:6d:26:20:e0:6c:3e:49:75:3e:da:3c:
e5:c2:4b:95:1c:45:34:9a:ba:14:db:a5:51:03:09:
f2:9b:da:ab:f2:13:60:f0:a0:da:c2:a7:c3:20:c6:
36:e0:a4:54:6c:0f:ce:f8:fb:43:17:29:57:db:a3:
52:98:d5:91:f2:a1:3e:98:79:4d:47:af:5a:25:b9:
3c:c4:ae:17:7d:a2:ff:59:54:d9:b1:33:fd:d0:89:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:4B:F6:D8:5D:6E:3C:59:2E:49:9F:A4:C5:17:45:C0:AE:B7:49
X509v3 Authority Key Identifier:
keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:4d:cc:a3:bf:b9:99:f6:b2:36:41:b1:60:98:fd:92:f9:c8:
ec:aa:c6:6a:84:ad:e2:02:7c:83:cf:da:8f:1d:a2:cc:df:a0:
40:44:2a:2b:81:0c:01:cd:ce:78:8b:2d:b7:b8:43:f8:7f:82:
ba:11:0d:f7:2b:ee:9c:fc:4e:35:51:3a:84:af:61:c5:bf:6b:
c3:0d:2e:1f:80:00:2a:cd:6e:c0:d8:aa:08:c6:23:42:2c:ae:
0a:af:9e:da:42:20:7b:cc:13:45:be:f6:12:40:a8:5b:aa:c5:
ff:86:d5:9f:14:32:80:84:d7:6c:40:38:a0:90:f1:f8:fb:e8:
78:9d:74:78:55:e7:4a:a5:d6:63:4e:d8:7f:b9:27:f3:34:22:
28:bd:da:e2:ff:1d:6c:6c:4e:b4:f4:e6:66:12:31:d0:cb:d0:
b5:29:b5:3a:c8:5b:5a:aa:e2:c0:68:73:d5:9f:c8:3e:2a:d0:
75:9d:d2:15:01:a8:20:a4:80:ad:03:66:cd:71:62:e9:32:fb:
b8:e8:c5:5a:01:63:83:50:f9:fd:b9:e5:9e:b5:de:ef:f6:e1:
b9:c4:22:d8:27:54:e9:79:b1:57:69:ee:51:4a:3d:5f:5e:b2:
97:ad:a5:39:c9:85:71:6d:c0:59:5c:42:74:c6:96:e2:8c:2d:
74:bd:f6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:26 2026 by rpki-client