
$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier: 2jaNIsAV2ecmmVaYcpDvbQHtfUqkZZLrG53n+msrkgk=
Subject key identifier: CB:A6:80:90:D1:8C:68:0A:51:6C:68:0E:8D:3D:85:A7:38:7A:98:82
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number: 080E
Signing time: Wed 20 May 2026 23:15:54 +0000
Manifest this update: Wed 20 May 2026 23:15:53 +0000
Manifest next update: Wed 27 May 2026 23:15:53 +0000
Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: eyhoQuad2joGlZFI+IXZkUFW9u72ANjyyh4ihDGnB9Y=)
2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: W2iKZuwFXrIaEg1oki94Jl0a2awSnqHnroRhsj7WeDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Validity
Not Before: May 20 23:15:53 2026 GMT
Not After : May 27 23:15:53 2026 GMT
Subject: CN=6a0e40a9-b9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:ed:d6:7e:56:5a:19:b3:81:99:e5:b5:c1:
b5:fc:10:1f:79:ef:80:4c:2d:d4:e0:15:60:d4:ff:
3e:c3:22:65:32:96:93:24:fa:64:b0:1b:18:2a:58:
a8:6b:24:09:48:2f:38:88:40:ad:30:fb:12:5d:6d:
5c:9e:99:ac:61:d9:51:78:7e:06:b8:c2:59:a3:41:
74:36:1f:3f:72:f9:36:3a:87:93:87:12:70:cb:fb:
74:26:8c:e8:53:0c:dd:0a:98:90:68:94:b4:a9:63:
5a:34:69:5c:e9:fa:84:47:a0:21:e1:86:cf:24:65:
9a:21:07:9b:4a:0a:dc:4e:80:df:74:bb:bf:70:fa:
41:9e:24:15:7e:0b:0e:63:a6:b8:af:39:16:23:cf:
1d:18:2c:c2:40:c8:5a:8d:a2:ab:88:6e:07:3e:ca:
d8:ea:36:18:35:4a:ec:90:dc:30:64:0a:a2:19:8e:
82:70:19:66:cc:93:d9:32:df:80:89:f6:ed:5c:6d:
28:d4:fa:68:a5:c2:38:5f:2c:f3:c7:6b:d7:da:22:
6f:a5:5c:79:a0:96:fe:b4:e9:09:5c:30:92:a8:df:
f4:1d:e0:86:b2:b0:40:73:8a:dc:44:59:d9:1e:ce:
04:4e:8b:fc:c0:54:d9:d0:34:3b:97:a2:98:72:8a:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A6:80:90:D1:8C:68:0A:51:6C:68:0E:8D:3D:85:A7:38:7A:98:82
X509v3 Authority Key Identifier:
keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:63:34:87:aa:48:00:0a:28:89:45:02:d1:11:83:3a:a0:09:
10:66:40:39:7b:82:b3:f9:54:d9:fa:8e:25:39:1a:cd:d8:8c:
c9:64:57:11:66:82:74:cd:55:95:54:6a:01:4a:78:be:15:cf:
3f:54:91:0e:a6:4d:ad:0b:3e:40:88:ca:12:9d:f0:a9:d6:e2:
24:a0:b4:4e:63:85:57:ba:1c:21:06:86:bd:90:08:8c:88:c3:
9a:a2:be:bf:7f:3b:80:c1:d9:26:42:75:1d:c0:5a:11:d0:fc:
8c:7e:51:05:e9:64:4f:29:17:23:4e:df:e9:9f:c6:68:35:d5:
ac:39:6e:07:4d:65:a9:1e:a7:2e:ea:c1:6d:2f:bd:e6:77:5e:
d1:57:d6:16:17:19:e8:e7:af:84:ab:df:4a:b1:6d:37:0c:09:
57:b7:ae:03:90:f1:d2:be:7a:69:13:b1:f2:01:be:d7:f1:12:
ea:a5:f7:9d:88:40:26:40:e3:5e:4a:73:ea:18:16:d1:d0:8e:
98:52:bb:93:ec:f2:45:40:44:02:5a:1c:d1:c4:d8:62:92:6b:
f3:0c:be:b2:46:e0:ad:e0:95:4c:f6:d7:d8:29:bd:68:c1:dc:
59:9b:f6:af:88:aa:e2:e5:d1:f2:13:80:2b:53:be:25:94:c5:
31:9e:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:35 2026 by rpki-client