
$ rpki-client -vvf rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
File: _rv4NRuAvuL_tu8l-lfwhy9QkfI.mft (raw, json)
Hash identifier: EfNMUSGQ2lKJg6wSgOYBUGZNGjL5piU1e3ZXrRg/PYE=
Subject key identifier: 5B:46:F8:65:86:37:4F:5A:C8:01:B7:C9:6D:21:0F:DE:AE:27:40:51
Authority key identifier: FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
Certificate issuer: /CN=A91133BE/serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
Manifest number: 38
Signing time: Fri 15 May 2026 08:42:54 +0000
Manifest this update: Fri 15 May 2026 08:42:53 +0000
Manifest next update: Fri 22 May 2026 08:42:53 +0000
Files and hashes: 1: _rv4NRuAvuL_tu8l-lfwhy9QkfI.crl (hash: FPRkScnQkC0Rf75UzD+mDmmAze0NTMDIulUyADBV6bc=)
2: D030482C001011F18942B574406F56BC.roa (hash: sbfrnLF6dkRPUD2i2wrrg7/6Vn8Z0is3ukK/xyl/U6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 08:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133BE, serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Validity
Not Before: May 15 08:42:53 2026 GMT
Not After : May 22 08:42:53 2026 GMT
Subject: CN=6a06dc8d-e4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:18:94:61:5e:3d:e3:bd:c0:a4:a6:4b:10:
c9:7e:93:fc:2a:42:0d:f8:1b:25:b4:82:fb:c1:53:
c0:58:f7:84:82:5d:6f:71:b7:a7:78:a5:96:00:18:
ba:94:5a:ea:48:b2:22:88:1f:97:a9:e8:83:c0:92:
93:cc:57:c8:b6:14:f5:64:6e:73:aa:58:d6:40:ef:
e6:11:dd:4b:1f:93:7d:c5:ba:20:26:1a:95:74:c2:
4d:36:dd:20:5d:85:3c:c2:aa:03:d6:ee:fd:7e:1d:
ad:c8:78:8a:0b:62:a0:5d:0f:21:c9:1d:5a:e5:39:
76:0b:62:00:3b:3b:61:86:18:d2:0c:0c:13:20:49:
d1:54:3c:b6:79:03:fa:f4:0e:3c:e0:af:38:cd:85:
5a:41:97:bd:c9:a1:05:40:21:e7:83:0f:13:0a:45:
32:d7:8f:80:d4:fd:9c:33:42:67:fa:13:84:9b:cc:
27:36:4f:d5:dd:89:f7:c6:7c:a8:aa:93:31:e1:89:
fc:11:4e:4d:54:90:7b:a6:09:f0:9a:3b:33:40:20:
35:3b:29:87:a5:25:f6:2e:4a:2d:bd:94:d0:af:49:
f0:ad:45:fb:9a:7b:07:db:7a:ea:07:a3:ae:61:8f:
57:97:13:e0:6f:d5:7e:ab:f4:13:77:2d:7c:81:07:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:F8:65:86:37:4F:5A:C8:01:B7:C9:6D:21:0F:DE:AE:27:40:51
X509v3 Authority Key Identifier:
keyid:FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:bd:50:5d:b6:e3:07:ed:2c:88:b5:a9:e1:2d:f2:f6:0b:e1:
64:6b:c5:ca:6f:40:b4:39:b7:a4:bd:c6:45:8b:32:24:29:25:
eb:a8:29:f5:cc:37:36:e3:8a:57:4c:f9:9f:4f:bc:6e:8f:cf:
be:40:43:b2:4e:0e:69:16:c0:7f:5c:40:b7:5e:2b:76:f2:25:
5f:20:d8:31:8d:21:cd:26:9e:c1:4d:39:42:ad:93:93:57:ea:
fe:19:53:f5:21:a1:30:96:98:76:82:1b:ef:ed:f0:63:31:fa:
21:42:39:97:50:d2:09:75:bd:26:0c:87:c5:81:7f:2d:23:4b:
a8:67:bd:13:b4:4e:83:66:16:ea:3c:80:4c:89:26:e4:6e:31:
03:f6:fc:4b:dc:53:6d:23:e7:b2:6c:ee:5d:cb:c3:1e:79:6b:
5a:7d:a5:ec:6f:17:d8:74:7b:0e:de:9d:1c:0c:f0:2a:e1:c9:
85:d8:a5:1d:57:aa:67:9f:4e:36:6d:38:4f:d8:4d:5f:c4:e1:
ca:fd:0c:29:b2:a5:ba:7f:37:3f:25:19:b7:16:81:98:b9:c9:
06:96:a4:f9:76:24:24:fb:fb:88:d5:8b:74:2c:8a:53:0a:d5:
32:81:d0:0e:bb:b1:77:4b:07:21:93:eb:b1:3a:fc:9e:e2:6c:
7a:e7:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:34:17 2026 by rpki-client