
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json)
Hash identifier: H/5qMuslXVaqzZwpdT+8rQkKpoV9KX6vRL8yZTXGS/s=
Subject key identifier: F5:29:06:B3:F6:D5:2C:D9:E9:96:8F:61:21:5F:9B:47:59:68:71:CC
Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Certificate serial: 0867
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
Manifest number: 085E
Signing time: Wed 20 May 2026 20:50:26 +0000
Manifest this update: Wed 20 May 2026 20:50:25 +0000
Manifest next update: Wed 27 May 2026 20:50:25 +0000
Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: 3WXhufdZuKNVrChDOpivlaniIbSrHQU4MQlIM/5kCRc=)
2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: FbDgkdDDZMbNMRMdVxYm9VIX+tjPFoWLYLBx+uGl7CM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Validity
Not Before: May 20 20:50:25 2026 GMT
Not After : May 27 20:50:25 2026 GMT
Subject: CN=6a0e1e92-8df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:03:2d:e4:45:b7:3c:5e:24:ec:0b:b9:ed:
fc:90:21:fc:4c:98:87:52:31:f3:ae:9a:48:00:ee:
90:65:c4:c7:41:86:90:98:5a:4f:a4:57:4f:6a:d6:
8f:5a:e7:ba:75:9c:a7:22:55:04:06:fa:7a:e6:2a:
96:49:01:69:b8:92:7a:0b:23:e3:08:9e:a1:26:f1:
ef:8e:94:57:db:ba:f8:2b:b8:3e:6c:25:4a:0e:f9:
15:e6:f4:42:0e:59:cb:92:cc:a6:98:39:f9:26:d1:
8e:ed:66:38:13:59:36:8e:7a:72:cc:3d:2b:94:22:
21:4c:1c:5e:64:4e:57:41:40:71:4b:a8:18:8d:eb:
83:70:8b:80:fa:30:c2:c3:23:9f:d7:f6:dd:87:14:
e6:c5:57:bb:0d:72:7b:2d:9f:51:bf:e5:79:c9:17:
69:a3:f9:1a:ae:d1:47:61:19:07:f6:e1:ef:d5:d5:
5e:27:e1:f6:a2:40:06:fb:11:d1:fd:69:72:1d:fe:
86:4b:f9:83:5c:cf:2e:f8:47:32:11:fa:fc:41:36:
d2:e8:e8:40:04:49:0b:57:da:da:02:14:e6:00:b4:
68:da:18:30:8c:eb:f4:12:da:67:6e:c6:cb:12:41:
54:47:ee:04:a4:91:5f:43:de:c5:2a:84:ea:b5:b6:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:06:B3:F6:D5:2C:D9:E9:96:8F:61:21:5F:9B:47:59:68:71:CC
X509v3 Authority Key Identifier:
keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:25:1e:f6:fe:66:6e:e2:e1:1e:ed:0c:de:fc:3b:bf:d2:63:
d3:e7:df:31:09:d3:6e:dc:98:3b:74:a8:af:2c:6e:e7:50:56:
68:21:0e:34:b5:6b:f0:12:e4:e3:5d:1e:b0:0c:a8:ed:72:c0:
54:99:8b:4e:0e:cf:f0:c8:df:fc:72:1b:e9:d3:4d:a7:65:f0:
c9:e2:97:45:aa:df:21:4b:5c:20:9c:2b:a6:8d:fe:9f:b8:a5:
0c:c8:62:82:53:ca:f2:48:dd:36:8e:15:3e:75:00:ee:ba:96:
0e:d8:7a:d0:93:4b:32:ca:6a:3a:eb:d8:b5:3f:f8:2d:9b:91:
06:58:6d:72:3e:e1:81:d5:4a:fa:5e:6f:5f:95:9b:31:b1:90:
aa:42:c5:4f:3b:a0:4f:01:01:23:fe:3f:53:19:ac:50:ea:38:
2a:d7:5f:48:ac:b7:39:66:5f:7d:18:a0:f0:95:fa:e9:4e:9a:
c4:2c:b9:87:10:93:e1:bb:ba:2b:62:ce:2b:81:7f:8f:8a:c7:
df:02:79:87:e6:ae:60:f2:6f:19:3f:01:08:8f:e7:4b:74:86:
0a:47:7a:ce:b5:87:7e:70:32:8d:47:b5:17:df:e5:ce:2f:7b:
84:c9:02:2f:bb:47:76:ce:c3:30:5a:06:30:ca:51:f3:11:53:
b3:23:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:53 2026 by rpki-client