
$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier: OBPc4/UcuumxErDN4b8bVoSjNbiHUvw/CNa3lZcF+oU=
Subject key identifier: D3:CC:B8:55:F8:51:AF:89:EE:D0:3D:DF:F0:5B:74:B8:25:60:20:FA
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number: 025E
Signing time: Fri 15 May 2026 02:50:14 +0000
Manifest this update: Fri 15 May 2026 02:50:14 +0000
Manifest next update: Fri 22 May 2026 02:50:14 +0000
Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: D4jnrsjKpdXjUsJZUZr8EPXLDDp0IdQqFCmjGKcr0oU=)
2: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: wtaIxTF17d8IiemG3sWgy0ofBOn5zvPTqbrlTJWPses=)
3: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Oi3EWJoEgd9DWmEEG+iX3qCZVJDhp6GEs5+/XmAJvSc=)
4: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: 4RuwvlEUfIsojOEJPNkdcqMMKDfzfms7bbjFDB3xQI0=)
5: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: t3iwawjGJ56AujlNR7I280077YB+jhEWT3pLtX6G6h0=)
6: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=)
7: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: hy3xSvTP7O3mbzfHFNsYWB6zvGiymVdeaKb6AgSQN3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Validity
Not Before: May 15 02:50:14 2026 GMT
Not After : May 22 02:50:14 2026 GMT
Subject: CN=6a0689e6-6f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:fe:35:cf:eb:68:0f:f8:96:d8:05:b4:1d:
75:ce:e0:57:d9:e2:dd:4f:9d:8d:11:be:ed:4a:29:
bb:d5:c0:fc:ce:30:d9:d1:dd:e9:cd:d4:00:0d:1c:
dd:ff:f8:e6:d8:73:df:9b:e0:49:61:b0:be:b0:9a:
03:ee:59:8e:56:12:9e:fa:8d:4d:52:b5:47:d3:3d:
d8:c6:72:b6:12:87:25:a6:ba:5e:21:20:5c:9b:c6:
cc:5b:57:39:78:07:bc:2e:59:dd:29:19:59:a1:26:
cd:4d:f6:f0:92:c9:00:94:c7:f4:b6:b8:84:9c:ff:
05:70:2f:82:70:45:aa:51:de:29:16:8d:46:9d:04:
e3:58:f7:bb:57:15:83:f2:e8:42:8f:2c:4d:d2:da:
72:09:fd:77:dd:d7:c5:10:7e:d7:3b:3c:aa:99:b1:
c6:bc:3c:5e:47:05:33:e7:83:da:c5:2e:8f:53:76:
6e:4e:f8:8a:83:6f:d1:e5:22:a7:b9:d5:8b:ce:cf:
c7:14:64:9f:29:e9:58:c0:b1:c7:33:98:29:9d:a5:
82:df:2a:d8:46:d5:42:78:d6:0f:c8:3b:19:fd:33:
7e:67:dd:8f:41:72:ff:2f:03:4c:ad:fc:39:68:18:
83:13:94:0c:7d:ac:3d:e5:01:f0:52:ae:b0:1a:d5:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:B8:55:F8:51:AF:89:EE:D0:3D:DF:F0:5B:74:B8:25:60:20:FA
X509v3 Authority Key Identifier:
keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:62:ad:a6:51:a5:4e:f4:81:71:c4:e1:e5:19:d5:14:34:64:
a9:48:25:89:c3:35:33:ac:c0:b9:a4:8b:8d:bd:e5:eb:d3:30:
f1:c1:41:f0:1c:97:21:73:c8:26:a3:7d:e7:12:09:ca:10:0a:
4e:83:8a:b6:ed:4f:9a:a0:66:65:1e:58:e2:55:e8:55:41:a7:
df:76:4e:c9:26:e6:77:30:f0:0c:c6:b8:cc:c6:d1:43:7c:9b:
c8:a1:3f:d0:a5:7c:8d:08:4a:f9:8b:79:55:ca:72:88:cc:6c:
cf:f7:ec:62:b2:d0:06:8d:e6:4f:00:35:b9:47:24:b7:f4:45:
1e:a9:e4:41:f5:6e:be:b8:72:69:5b:09:5d:b0:56:aa:ea:9a:
b8:1a:89:75:95:8e:8c:99:87:e7:71:e2:7a:3d:ca:d1:49:df:
70:65:17:9a:b2:57:0b:ff:1c:02:80:bc:16:3e:ae:72:ce:c1:
9c:b9:3b:e1:83:0b:e5:96:fc:4b:38:a3:97:57:02:0d:e6:7c:
e1:3d:96:2c:c6:70:c9:48:80:bc:a0:f8:c9:fd:5c:9b:24:ab:
51:59:9d:bd:b0:ba:d4:27:c8:8f:74:2f:1d:06:e3:44:87:b8:
cf:7f:c0:0f:9b:69:4e:36:a5:10:ac:7a:2e:05:1d:49:4d:1b:
0a:3d:86:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:35:04 2026 by rpki-client