
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json)
Hash identifier: rJoONHDLMQnwingcwn4/BMXpMaxhOeXozpYo/4fEtpc=
Subject key identifier: 91:7B:AB:9E:01:60:11:C5:5F:E4:BF:3F:65:E9:FC:82:8D:89:A5:9B
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial: 191E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
Manifest number: 190A
Signing time: Wed 20 May 2026 16:26:24 +0000
Manifest this update: Wed 20 May 2026 16:26:24 +0000
Manifest next update: Wed 27 May 2026 16:26:24 +0000
Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: Ue225jH4quL2iHtbopvasDFcGUl02JkbkRcbDHQIGUg=)
2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: eo5Er8iuxT75wLcKVzFBlRXEOJUUc8Rit00G+PSlQNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6430 (0x191e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Validity
Not Before: May 20 16:26:24 2026 GMT
Not After : May 27 16:26:24 2026 GMT
Subject: CN=6a0de0b0-ff1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:31:30:f0:3a:3a:f2:b8:84:1d:09:91:a7:
f7:03:af:b0:09:29:ad:9e:65:bd:44:01:e0:fe:e4:
e0:da:6c:dc:f4:03:f8:74:c2:b2:36:0c:e2:75:15:
29:e9:9b:ee:f7:98:75:a0:16:17:d7:b8:bb:81:d6:
99:61:0b:38:ed:ec:07:04:02:a4:bf:c0:36:9d:2c:
3c:74:e0:58:3d:4c:5f:52:74:44:34:0a:ec:55:87:
82:f9:8a:f6:8a:87:78:37:8c:3e:98:68:b7:60:61:
24:21:15:d6:b2:57:a3:67:0f:fb:cc:68:f9:95:57:
b6:b7:dd:18:1a:91:89:6a:ad:8b:a6:92:ff:30:6a:
f0:ce:2e:79:a6:c9:71:9d:6e:cd:0a:01:70:ab:1a:
20:5a:ae:6e:c7:a8:61:ec:67:3d:e4:7f:21:6f:2e:
f1:74:f8:7a:07:99:9c:1e:94:87:e4:74:15:56:ce:
59:4e:0d:e4:17:d8:f4:3a:25:96:23:97:09:03:07:
e0:d7:a9:49:a3:2f:be:21:b6:c0:b2:12:99:5e:6a:
51:98:c8:9b:4c:61:c1:80:17:1d:18:0f:cf:30:8c:
4e:b3:c0:ef:5d:f4:31:f4:4e:68:6e:61:f2:70:5b:
2c:8a:c9:df:1b:98:d6:72:63:cf:3b:33:f6:2a:98:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7B:AB:9E:01:60:11:C5:5F:E4:BF:3F:65:E9:FC:82:8D:89:A5:9B
X509v3 Authority Key Identifier:
keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2f:20:97:8e:ae:93:06:14:3a:d0:99:e0:b7:30:09:9e:d7:
c9:d2:4e:0c:d9:ef:5e:89:20:af:f7:61:4e:d8:2a:36:c8:89:
d2:90:8e:7c:54:b2:4f:b4:9f:53:da:8f:35:b5:a8:13:75:2d:
7f:5e:6f:e5:03:fb:f5:ac:dd:3a:de:c9:86:cf:c5:2d:2a:52:
f0:a0:1c:8a:73:4e:01:8d:38:4a:e8:61:10:2b:84:b8:1e:04:
f9:68:fd:98:de:7f:aa:a1:0d:68:b0:7f:16:47:f7:28:86:93:
5e:8e:5e:1b:a7:f5:95:12:68:e7:cb:52:74:ee:41:00:4b:38:
8f:da:c2:52:6f:00:89:11:5a:e7:29:b6:6f:79:a9:a7:3f:39:
37:45:ed:9e:6e:47:7a:33:17:f8:d2:81:e0:43:b4:12:aa:e0:
5f:7f:15:5e:e8:c8:57:d7:71:96:f1:d8:e8:df:a9:8c:bf:c0:
c2:27:d1:7a:91:0b:bd:5a:c9:da:12:53:c7:3b:01:8c:f8:a0:
29:4d:f0:41:bf:d7:9b:72:6a:47:4c:c5:da:21:e4:bd:da:4a:
a0:7e:eb:8f:4c:37:6d:db:53:fd:d4:86:c7:e9:6a:5c:91:43:
a7:9d:6a:f4:cd:69:5c:44:5d:67:2d:f5:37:9e:2d:d4:93:a8:
13:96:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:31 2026 by rpki-client