
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier: kVPpiz0s5JB1GWbczu3lDrnJDtzRmKGHB8ija9aAtyo=
Subject key identifier: 59:F9:7F:F4:91:8E:9F:69:1C:5C:7C:A2:80:23:45:05:21:DC:ED:2F
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number: 012D
Signing time: Tue 23 Jun 2026 05:48:02 +0000
Manifest this update: Tue 23 Jun 2026 05:48:01 +0000
Manifest next update: Tue 30 Jun 2026 05:48:01 +0000
Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: CUh5dFi2gUGOluvaS0tZjeRIMHLIKJLLOJSn/9MK+R0=)
2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: hdQpo+xnXuDoOPe/5r+BnsM8aeG+LI4VCVPfcf0L3eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Validity
Not Before: Jun 23 05:48:01 2026 GMT
Not After : Jun 30 05:48:01 2026 GMT
Subject: CN=6a3a1e11-1112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:b2:b0:b3:5c:87:46:70:bc:3b:33:10:bc:
ac:be:53:ed:89:98:b1:f3:31:d4:14:eb:1e:c7:0b:
ff:01:61:c4:c8:6c:37:e7:3b:5c:47:e0:65:18:fc:
84:e1:30:66:c7:bd:16:c4:04:5c:57:3b:7c:54:67:
2c:9e:bd:3f:3a:b3:b3:82:87:4b:e7:11:a7:2f:bd:
39:97:38:cc:38:30:80:c0:43:a2:b8:63:56:91:09:
2e:d0:bf:89:ed:c7:e0:ec:33:84:6f:a8:20:dc:c5:
87:93:2a:15:89:83:e9:9b:3a:ed:c9:90:6d:59:0f:
03:71:07:7d:1b:52:89:a8:7b:e7:cb:fe:40:5c:78:
4e:c1:2d:f5:65:3a:a2:b7:39:98:57:ae:73:27:e7:
f0:ab:05:78:eb:ca:79:5c:f4:32:58:87:e2:21:79:
d0:81:67:80:ca:4e:08:f0:71:2c:66:b4:0b:a0:d3:
85:2e:39:40:0c:f2:13:7e:07:a9:b7:cd:d3:d4:7c:
75:2b:f6:ee:b7:39:db:c6:4c:dc:d1:9a:35:52:5b:
0c:42:b9:47:6f:0a:76:53:7f:a4:67:c3:d5:02:75:
51:66:7c:41:44:cb:e1:4a:bf:84:ad:c3:0f:73:6c:
99:58:9f:91:38:ff:4f:fe:a3:ed:d1:7f:6b:ce:c0:
75:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F9:7F:F4:91:8E:9F:69:1C:5C:7C:A2:80:23:45:05:21:DC:ED:2F
X509v3 Authority Key Identifier:
keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:5a:97:a3:1e:c5:65:fc:6f:1f:2e:da:84:81:1c:a7:ef:38:
46:29:4e:32:39:ec:38:97:a8:9d:35:cd:92:8b:74:4a:d3:9c:
c7:8f:a1:f7:06:d9:50:81:2b:a5:d1:73:8d:9d:fa:f5:dc:69:
b6:a6:26:34:35:63:f7:77:f5:ac:a7:79:c9:38:93:8c:5b:c6:
a6:8e:1b:fc:88:f6:2d:fc:41:df:58:20:bd:4a:b4:4c:58:3b:
10:36:08:94:5e:8b:01:bc:bb:4c:b3:ca:f3:ed:c2:57:c9:e3:
b6:5c:10:48:d4:01:32:e3:6f:ff:82:67:4a:4b:21:f0:84:ee:
ea:cf:59:76:5e:66:72:7d:da:2a:0c:35:87:58:b8:93:91:ea:
48:07:ae:92:4b:eb:6c:a3:5e:84:12:fc:79:a8:49:79:78:62:
4d:24:07:ff:3c:06:15:3b:e1:57:a3:bf:34:d9:dc:56:0a:c7:
e4:c2:a5:29:40:1d:0b:15:8c:78:42:9f:db:8d:b6:ab:a4:56:
29:33:5a:ee:27:25:06:27:f5:02:c1:2f:99:57:06:74:e4:d3:
cc:31:9f:76:64:01:72:64:4c:bf:bf:26:97:b3:ee:a5:3c:db:
cc:6a:d8:ad:30:b4:e6:66:9e:b2:90:d3:12:9d:aa:95:16:05:
d3:df:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:16 2026 by rpki-client