
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json)
Hash identifier: /73DRVCCck8YwoDKGZaxdvFlMrUhJ1Sur5Kfkqz3weA=
Subject key identifier: C0:BD:64:3F:99:46:70:39:35:DC:63:5A:77:7B:17:70:E1:94:37:C0
Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Certificate serial: 1B2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
Manifest number: 22DD
Signing time: Tue 12 May 2026 15:55:59 +0000
Manifest this update: Tue 12 May 2026 15:55:58 +0000
Manifest next update: Tue 19 May 2026 15:55:58 +0000
Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: 9IidnpI3DztaFMFK5eFMaPowK8BOo4LFWovnuOsnD9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6954 (0x1b2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Validity
Not Before: May 12 15:55:58 2026 GMT
Not After : May 19 15:55:58 2026 GMT
Subject: CN=6a034d8f-5f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:25:29:49:66:e4:c9:c0:58:03:95:7f:44:
b9:c3:65:f4:5f:ca:33:d9:38:32:0f:b2:75:30:ef:
3f:67:86:b9:b7:76:df:03:6e:64:44:b6:42:09:be:
a6:3d:87:2d:9d:e4:5b:14:5e:96:8f:38:eb:22:10:
ce:b8:96:ce:90:ec:5b:90:ac:81:4b:d2:b3:3b:5f:
c7:43:00:35:7e:e0:45:f1:cc:0d:54:a0:03:03:d8:
84:f8:8e:77:1d:48:f0:d9:1c:2e:18:6b:7b:5b:68:
d1:47:ee:7d:de:16:90:20:f7:a8:23:69:f9:72:4d:
e6:6f:e4:e2:32:82:ac:a8:b4:8d:1b:db:44:4b:ec:
01:f3:9f:38:62:fb:08:78:12:06:83:73:94:1f:e5:
a3:e5:12:15:3c:49:bf:9b:3d:4b:41:4b:78:12:23:
9a:a8:84:2f:19:34:9b:01:5c:7c:97:b3:38:40:23:
f5:28:c5:37:5a:e8:16:6c:df:ce:e1:98:ed:73:e8:
55:2a:2b:b3:6b:83:fb:91:c6:4f:ae:ec:f9:3f:2c:
64:87:90:d7:41:26:4a:25:8a:ce:60:90:48:5f:94:
4d:80:79:97:6f:21:c4:e8:de:0f:bd:75:86:9c:88:
6a:cd:36:e9:a0:ff:fa:a8:45:11:69:4e:35:02:f6:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BD:64:3F:99:46:70:39:35:DC:63:5A:77:7B:17:70:E1:94:37:C0
X509v3 Authority Key Identifier:
keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:78:d9:d4:69:f5:6b:7f:50:3e:99:83:90:93:dd:a2:e1:
ed:b6:b2:cf:e6:5c:bc:f1:84:26:99:ec:80:65:2a:c3:00:c9:
39:2d:63:59:cb:1e:28:d7:60:2c:80:79:a6:86:4d:e5:c1:7e:
98:76:c8:25:36:67:22:6a:a4:48:33:dc:b5:a8:e9:a3:22:78:
25:48:33:c6:06:c7:e7:5e:06:6b:a4:95:bc:20:5c:54:14:ee:
8d:14:c6:00:05:f2:87:00:6f:db:b3:3f:d0:0c:8a:50:6e:fd:
16:4d:87:95:49:55:5e:e3:06:a4:d7:c5:97:44:ab:de:eb:1b:
b3:5f:f4:b9:83:cd:00:ff:f5:49:9e:4a:25:16:18:80:f5:34:
a2:ae:d7:d2:5b:ab:bb:15:48:40:11:24:7d:46:c5:98:45:6a:
bc:64:da:62:ce:1e:e0:9b:85:0d:ea:e6:69:da:00:6e:be:a3:
b3:88:ab:69:f3:ee:c0:6d:01:66:3f:1d:0c:b9:50:4e:fe:94:
c7:2a:5f:d1:c2:de:24:4e:17:d9:7c:be:1f:3b:a7:f1:9d:c8:
5f:84:ba:49:cc:0c:40:d5:96:dd:e0:35:b6:eb:fb:49:cb:d8:
6a:91:17:52:b3:bf:d6:63:ae:3e:e7:cf:d1:ac:a6:92:6f:df:
75:90:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:56:05 2026 by rpki-client