
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
File: AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json)
Hash identifier: 8cvng+pjkewkRwDm0m/WbF8Xdy/VSdaM0V6+9BdS39M=
Subject key identifier: 46:72:31:9F:06:2A:E4:5F:45:6F:47:3D:17:1F:B1:EF:D9:3E:6D:89
Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
Certificate issuer: /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
Manifest number: 5C
Signing time: Mon 11 May 2026 08:12:23 +0000
Manifest this update: Mon 11 May 2026 08:12:22 +0000
Manifest next update: Mon 18 May 2026 08:12:22 +0000
Files and hashes: 1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: rgsT+HRAikTEKcqDL2uHE3V7sD8N6gDgoah3T2mSC50=)
2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: E6omI9lqZzM/PwLCS0UMdFdpwNRWOrVUdR04/HJ2Es8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Validity
Not Before: May 11 08:12:22 2026 GMT
Not After : May 18 08:12:22 2026 GMT
Subject: CN=6a018f66-da93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:fa:86:c4:76:ae:10:f5:31:a6:fe:22:7d:
87:d1:5a:1a:dd:9b:65:23:dc:c6:74:d1:87:d7:13:
83:ed:7c:ad:bb:f8:39:60:29:e2:5c:8d:26:98:ed:
ab:7f:fb:5f:f0:7e:b5:e0:3e:4b:55:af:cf:1d:79:
ae:fa:05:5f:d7:df:d4:f0:2b:d8:46:a1:b3:c1:14:
02:5e:6e:a8:99:d2:41:b9:3e:83:9a:1c:18:67:ec:
8b:8f:df:7d:1e:42:0f:48:f1:c5:71:cc:fd:1c:d0:
56:f8:e7:34:3d:27:3f:c0:97:9d:68:de:41:e7:06:
0b:89:dd:2e:94:4d:f4:d6:22:d8:02:95:c4:be:3f:
ab:21:46:39:94:3f:5f:08:b4:3e:51:e3:01:35:2f:
8b:8c:1f:a9:ad:7f:da:c7:bd:06:18:d2:59:e7:06:
3c:67:ac:f5:c7:90:25:7e:93:84:50:13:b0:f4:9c:
b6:26:0c:23:87:50:f2:06:5e:8f:73:e1:2d:54:fd:
01:3c:2c:72:bc:6a:c4:b3:56:88:93:15:29:af:7f:
bd:6f:6d:d3:8b:d3:19:1e:47:70:36:61:3d:5d:34:
04:af:8e:a2:1b:73:b4:76:16:1f:16:4e:99:73:8d:
bf:d7:3a:ce:e6:d4:27:bb:74:8d:37:b7:35:0d:59:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:31:9F:06:2A:E4:5F:45:6F:47:3D:17:1F:B1:EF:D9:3E:6D:89
X509v3 Authority Key Identifier:
keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:f8:95:36:80:6a:41:1a:32:ef:43:fb:68:de:af:6d:16:
29:80:86:87:77:bf:5c:ba:f3:73:aa:b4:3c:11:4e:75:0b:e4:
07:48:01:02:26:4f:d7:01:c7:75:f3:0c:11:46:03:7d:1c:6e:
b5:89:15:95:97:49:45:a6:91:32:27:fb:de:e4:c0:2f:c5:d7:
b7:82:e7:d8:b5:02:d1:d1:48:5f:91:ff:1d:58:f5:f3:2a:74:
14:2c:84:55:ad:83:dc:b2:e9:19:b1:94:03:91:4f:ab:c9:98:
2b:3e:b6:86:6e:43:83:9a:a2:a2:5e:a0:18:17:88:76:a1:89:
d9:28:f0:44:6b:7f:5e:e5:fe:17:a1:58:c8:a6:b4:bb:6b:18:
e5:1e:bc:20:ba:90:2c:30:8f:c2:66:d6:57:59:29:09:ec:d0:
8b:b0:d1:7d:a7:7c:9c:97:0b:09:4b:d2:61:41:00:0c:5d:d5:
ec:d6:f0:ff:06:84:38:3d:5d:d2:12:5c:93:42:ea:bd:89:c7:
c1:de:82:30:e8:96:44:ea:15:7a:b1:fe:fe:16:d0:06:f6:59:
a2:aa:65:7e:6c:e6:d4:42:e0:83:5c:77:e7:cd:16:99:dd:bd:
bf:ac:67:a2:4e:e4:2c:a5:ba:34:4b:f3:65:3d:c0:b9:3b:f5:
e0:02:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:43 2026 by rpki-client