
$ rpki-client -vvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File: cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier: ubS63jlPQBzXJAXC2m94HDs/7mPGu12P7QcU90lWNPE=
Subject key identifier: 9F:9A:12:D4:69:9E:CD:CC:77:99:A6:50:27:45:13:D3:70:CC:FE:46
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer: /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number: 1F
Signing time: Tue 19 May 2026 08:46:55 +0000
Manifest this update: Tue 19 May 2026 08:46:54 +0000
Manifest next update: Tue 26 May 2026 08:46:54 +0000
Files and hashes: 1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: VVB3NDII/lH468tnFs1dkW6fk8Tqujj895Hc498dyr0=)
2: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Validity
Not Before: May 19 08:46:54 2026 GMT
Not After : May 26 08:46:54 2026 GMT
Subject: CN=6a0c237f-bae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:f9:39:93:16:dc:5f:d5:e1:1f:5c:7e:8a:
88:ad:bb:0a:76:73:27:82:fb:0f:4c:e7:54:28:9e:
9d:73:04:de:a1:f0:1f:d9:f8:f4:ed:b7:f9:ec:e4:
14:a0:9a:f3:36:62:32:bd:c1:81:4c:82:cd:97:42:
7b:d1:ab:f8:2d:f4:70:9a:c5:38:1e:de:e2:a8:47:
95:53:e3:c4:91:87:8f:78:46:6e:8a:3c:39:2f:cd:
b8:44:b9:c3:e4:2f:ea:07:fa:cd:b7:16:f1:b5:44:
8b:44:ec:5b:5d:35:69:c4:98:bf:e7:0e:2d:8b:58:
2f:d5:86:22:50:81:7e:7b:c9:a3:e5:a5:e5:38:74:
52:61:9b:6e:8b:c5:6e:e7:45:90:d4:f5:96:bc:b6:
d2:9b:4f:4b:56:de:fa:43:1a:b5:ba:dc:5e:a9:a9:
3c:6d:e4:cc:9b:e5:bc:e2:a1:ee:c5:ec:ea:97:4b:
57:51:a9:12:31:af:2d:70:83:25:93:5e:52:c0:c0:
89:ef:20:55:c5:a1:6f:33:3d:bc:9f:2e:b6:2f:02:
ad:76:73:6a:84:b7:c3:f1:b6:32:4f:6b:29:a6:33:
ab:5c:cf:ff:a9:7d:cb:24:bb:c3:52:5c:56:32:6a:
56:e5:53:e7:58:3a:f1:ec:76:b5:ee:c4:b3:c6:94:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9A:12:D4:69:9E:CD:CC:77:99:A6:50:27:45:13:D3:70:CC:FE:46
X509v3 Authority Key Identifier:
keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:29:a2:3f:29:de:0c:9a:70:15:8e:3c:2d:fd:cd:e5:58:3e:
80:74:5a:73:53:46:4c:11:4f:c2:f1:6c:13:5f:17:62:4c:31:
46:be:f9:57:5b:29:19:31:c7:6f:09:22:63:b4:f7:ed:22:60:
41:2e:df:3c:53:ac:ca:7a:10:d0:f3:51:68:de:46:f2:20:ad:
2a:eb:48:36:a5:69:24:7c:64:6e:d1:b4:89:4a:22:8c:fc:5c:
de:ec:42:e5:9d:28:5a:79:a7:4f:97:c6:ac:ce:2b:6f:88:25:
7f:1c:a7:39:f1:69:f3:2c:ae:ae:9b:af:e5:b8:1e:63:d2:50:
21:f3:9b:9d:54:08:0a:17:c4:c5:ab:4d:a5:2e:d3:d5:dc:5c:
07:a3:2b:fc:32:2b:8b:0a:93:a8:da:6e:04:5c:b2:69:9c:d4:
fe:dd:9c:55:89:65:f5:29:d0:82:c9:74:ca:fc:bd:45:f4:73:
9d:ca:e2:f7:97:34:97:a8:7e:32:b7:78:2b:6a:06:80:73:10:
20:c4:8b:8e:45:40:87:c1:33:c9:48:a1:f9:5f:96:75:0f:7c:
4b:56:37:d4:80:7f:fa:df:8e:5d:a4:bd:18:71:ba:d0:e0:4c:
0e:e9:3b:a4:c2:90:09:0f:c6:53:df:24:65:d4:be:b4:b1:3f:
09:7b:5c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:05 2026 by rpki-client