
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json)
Hash identifier: Mpyg+fqa7ce+cImU/BzDqfeqU89/JILo5/5KRuOFPlY=
Subject key identifier: 3C:32:75:14:FF:E0:86:6D:2B:34:4E:54:6E:2F:94:E6:8F:1D:CC:80
Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Certificate serial: 1091
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
Manifest number: 1081
Signing time: Wed 20 May 2026 17:23:05 +0000
Manifest this update: Wed 20 May 2026 17:23:05 +0000
Manifest next update: Wed 27 May 2026 17:23:05 +0000
Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: IfuM08aumlsyb/4g7thWj+HRnrkgv9cp2c4TQfbQm4Q=)
2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: YOyhRNReWebICH9oX6oPZhIxKRKBfgETO6Jt4nNgxQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4241 (0x1091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Validity
Not Before: May 20 17:23:05 2026 GMT
Not After : May 27 17:23:05 2026 GMT
Subject: CN=6a0dedf9-2f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:45:80:dc:e6:9c:fa:8c:eb:43:56:60:03:
ef:32:5a:10:89:83:47:7e:e6:b8:73:49:be:f1:2a:
d4:45:ea:f4:e0:0d:e7:fd:d9:38:90:88:09:d0:b3:
c3:da:a1:ae:b2:e8:c9:b7:72:81:39:9c:58:dd:0d:
24:f2:46:0e:ff:c6:2e:90:cd:6a:fe:eb:d6:ba:36:
54:03:6a:46:4b:9e:0f:bd:07:e0:1f:b9:52:42:33:
b9:86:7a:53:e7:4d:43:1e:22:fd:9b:4f:13:26:93:
9c:41:b5:25:79:e6:3d:55:15:a1:7c:28:f3:4d:f8:
0f:3d:1c:be:fe:ca:0a:d6:bf:c5:40:f3:e8:cd:13:
bd:07:6c:4e:8f:a6:80:d9:8c:c2:6a:d1:6f:d1:f5:
c7:f9:bc:5f:61:df:75:2e:d4:54:4f:63:cb:ec:cb:
32:96:5a:63:39:4d:bb:5e:98:dd:eb:97:bc:25:6c:
23:61:33:31:af:29:ce:8a:a7:31:51:36:13:92:b9:
3f:78:96:06:dd:f8:86:1d:01:a6:9a:81:d2:b6:b8:
30:bc:3c:ed:f9:04:04:46:27:c2:fb:ad:7e:1f:8a:
bd:57:61:d7:c0:df:e2:28:ae:7a:8d:61:06:22:13:
b3:36:64:1a:ab:c7:8d:b7:f7:f1:a2:a3:f6:f4:a9:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:75:14:FF:E0:86:6D:2B:34:4E:54:6E:2F:94:E6:8F:1D:CC:80
X509v3 Authority Key Identifier:
keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b5:08:64:27:c8:33:64:f7:eb:18:e9:bc:7e:cf:84:72:df:
21:8d:ef:8d:73:b7:19:87:33:56:f5:75:ae:dd:8d:7a:78:fa:
eb:10:66:22:84:eb:27:a3:5f:2e:54:71:dc:66:49:d1:34:3a:
61:80:8e:7d:38:4a:d2:8f:3c:1b:c0:58:08:32:78:72:ca:5a:
d8:21:6c:cf:59:1e:9e:07:fc:1a:10:f2:31:0d:67:23:a6:1b:
de:3d:0b:ed:67:91:3e:3e:05:de:b4:14:e2:37:4b:3b:7d:5d:
a2:aa:f5:30:43:1e:a5:c9:3a:c4:5f:db:06:f3:fe:2a:0f:c4:
6b:02:6c:06:75:ae:b3:39:65:cf:41:12:8e:fe:18:68:5e:86:
12:a3:58:6d:21:8d:c5:83:99:30:39:25:56:b0:39:b4:eb:ad:
67:15:28:85:98:bb:71:f8:49:20:86:20:a0:58:1f:7f:de:31:
83:01:6f:70:59:a0:ea:2c:64:8a:41:9e:fd:47:59:9b:9d:a9:
c8:4b:80:1b:c2:b3:71:58:e3:ff:85:5e:ba:cc:8b:09:e3:00:
1d:db:95:bb:e1:1d:73:5e:39:88:79:c1:54:83:5c:04:bd:7d:
92:3d:36:5f:50:5f:9b:5b:e2:a1:f1:a1:1a:7d:91:86:55:b8:
03:cc:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:34 2026 by rpki-client