
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier: c0JbJUIB0qpVTbC8kLy2bocEsfTjRPQhB6lgrF6l8rM=
Subject key identifier: B9:E6:F3:0A:1B:C1:DE:CF:55:28:E4:63:5C:9F:D6:21:53:E8:C4:4F
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial: 050C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number: 0505
Signing time: Wed 20 May 2026 23:44:55 +0000
Manifest this update: Wed 20 May 2026 23:44:55 +0000
Manifest next update: Wed 27 May 2026 23:44:55 +0000
Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: qck7/pGopgrH6TkBW+EDDFo/1nwI4I1FYP3YqfyKdUc=)
2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 4pb/gM8lDNYdlH1fovFGDxDjw7tPKno0MVw8fyTlO8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Validity
Not Before: May 20 23:44:55 2026 GMT
Not After : May 27 23:44:55 2026 GMT
Subject: CN=6a0e4777-b241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:cd:e6:ee:be:d9:bf:69:13:a2:53:3b:47:
7a:9c:23:b7:6d:54:8a:17:e4:ca:58:d4:99:10:a5:
e5:f6:23:e2:f6:a7:ad:5c:f4:fd:31:26:43:b9:62:
05:a4:5f:0d:8b:0f:64:15:76:19:51:ba:35:44:66:
9a:ea:a9:ce:d5:45:2f:e5:f4:a6:75:8e:7e:10:02:
32:b8:c2:fb:90:f6:cd:70:53:13:c5:ce:23:12:b7:
42:fa:9a:db:4a:91:a1:61:04:75:7b:bb:84:7f:f8:
0b:11:db:fa:c5:9b:48:eb:d9:61:e9:87:87:b5:c4:
fb:75:54:12:98:ba:ac:1f:b2:49:3f:b4:a2:e4:b2:
bd:6a:db:d4:68:b2:94:17:f5:3b:9c:7e:40:59:3b:
b6:af:65:07:13:aa:f0:f5:ee:78:49:23:34:09:be:
7c:14:3e:4d:25:26:ec:52:15:df:2e:8b:00:4d:f2:
8c:03:dc:3a:44:45:1e:26:0f:07:e1:08:4f:ba:15:
d5:6d:11:4a:60:2c:58:5a:cd:f3:fc:7e:d9:13:a6:
b2:87:ab:96:85:cf:21:04:d8:c5:79:04:34:fa:63:
0f:fa:a9:bd:83:3a:c4:d7:c8:ad:a8:d3:30:f7:46:
b4:60:0d:9b:4b:c3:c1:5e:9f:83:47:b0:fd:33:2c:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E6:F3:0A:1B:C1:DE:CF:55:28:E4:63:5C:9F:D6:21:53:E8:C4:4F
X509v3 Authority Key Identifier:
keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:65:81:11:ea:02:8b:e6:8d:93:11:cc:c5:cc:4c:7b:1b:bf:
f4:87:01:96:7a:c4:8f:10:cc:f8:6c:30:39:2d:d8:ab:14:64:
73:da:77:b8:6b:92:22:7a:ae:62:db:ae:a1:11:38:ce:55:4d:
a3:39:fe:0d:cf:1f:07:c9:1d:ab:29:41:10:70:c4:2d:36:14:
32:fa:31:45:e4:94:36:7b:11:bb:1d:02:a0:8c:8b:37:7e:2b:
64:71:d7:ae:31:f9:48:80:8a:2c:8b:57:e2:0e:c3:c2:c2:13:
48:7d:0b:cf:22:b4:a4:5f:31:62:8b:5e:13:a0:c2:83:44:cd:
01:d0:e8:22:41:10:1c:2b:0a:ed:eb:45:89:8d:7b:b0:83:dd:
8c:d6:43:00:1d:94:f0:af:2c:92:dd:8c:3f:ad:67:20:12:63:
a9:76:f1:ee:bd:28:ef:18:27:ec:cc:6e:0a:d5:dd:08:3c:fb:
21:90:c7:a5:61:f2:77:52:a3:19:82:da:5a:98:b8:29:86:d7:
73:c7:54:27:b3:2c:5c:c8:81:48:fa:d9:f5:e3:d1:6e:ae:d5:
14:7d:26:5a:2c:a5:a3:9b:fd:3e:21:c9:08:fd:63:7c:7e:6f:
83:2a:38:c4:07:cd:35:a0:7e:f3:28:f0:73:8e:a6:bf:da:7c:
cb:92:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:31 2026 by rpki-client