
$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
File: csG8nD23m0PzVvI_lWiEjJz7jdU.mft (raw, json)
Hash identifier: laSNe/r5Xd/xTMaA7gjxEQQOCGkifHFW6a6VeXXe8jg=
Subject key identifier: 0C:F6:3B:61:F2:2A:CD:69:F4:98:DA:08:85:05:85:9A:47:CA:4D:83
Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Certificate serial: 075E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
Manifest number: 0756
Signing time: Wed 20 May 2026 21:44:00 +0000
Manifest this update: Wed 20 May 2026 21:44:00 +0000
Manifest next update: Wed 27 May 2026 21:44:00 +0000
Files and hashes: 1: csG8nD23m0PzVvI_lWiEjJz7jdU.crl (hash: jZaoGlelBi0NnKFY1aAkOv7fHdQ+tgZdp/R0z3jcBf0=)
2: EB292D8A6BF811EB8E899650C4F9AE02.roa (hash: atWWdhdNCGzw5vFDKmVi5w9vnS6VXFuLxeYuDlcE0MA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Validity
Not Before: May 20 21:44:00 2026 GMT
Not After : May 27 21:44:00 2026 GMT
Subject: CN=6a0e2b20-de4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:ce:9c:18:5c:d8:72:48:f0:94:01:7f:8b:
61:81:92:a8:a1:d7:4e:f2:9c:1a:05:47:df:68:c3:
6d:39:90:f6:67:57:82:07:74:39:ae:4a:e3:f6:49:
08:95:c0:f3:72:ed:0e:4c:15:68:cb:5a:63:da:cf:
00:19:39:5a:f0:c9:18:71:62:fc:e5:6a:4e:39:28:
96:f0:a3:28:7a:40:e2:61:1e:aa:22:5c:0a:2c:f6:
fc:6b:c1:f9:1c:a3:f0:10:91:46:06:5a:f3:74:aa:
a1:2d:87:bb:00:a8:ba:cc:a3:3d:a7:05:da:05:d5:
86:ce:c8:32:cb:33:4a:af:60:c9:5f:91:a9:24:22:
76:63:b6:70:f5:43:8d:40:43:3d:1b:cd:db:22:86:
4d:71:33:5e:4b:e6:ef:93:99:a2:76:34:41:2a:c1:
cc:e9:d9:64:9f:5c:b8:fa:3d:20:a8:18:52:4c:7f:
f5:bb:4f:d3:18:da:ca:3a:58:af:fd:9c:82:97:c6:
06:74:b8:fd:cf:9f:ac:5e:9e:c7:e0:18:0c:dc:53:
da:93:36:b8:0c:18:ba:39:2e:9b:60:cf:eb:96:18:
e8:42:0e:8a:22:70:f6:e3:40:c8:c3:10:bd:52:0f:
98:6c:05:d4:a8:1b:66:64:d7:15:2f:6f:ba:4e:68:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:3B:61:F2:2A:CD:69:F4:98:DA:08:85:05:85:9A:47:CA:4D:83
X509v3 Authority Key Identifier:
keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:36:74:5f:7f:1c:7d:94:fd:4f:5f:92:4c:17:62:b1:6c:cb:
38:b7:7c:6c:4e:bf:62:4a:48:68:31:7b:cb:ac:7a:cc:76:8c:
57:db:2b:19:9d:7c:45:2c:7d:eb:9a:8f:93:f2:e9:53:2a:38:
f4:17:65:3c:05:19:37:41:24:80:19:01:40:b1:d8:44:a6:26:
e7:2a:50:4d:9b:d0:1d:b3:1e:65:d9:6d:68:49:43:3e:a9:8e:
46:e8:f2:3d:c4:e0:93:bb:09:09:ff:c9:c6:2e:a0:d1:e4:b9:
ec:75:e6:d0:fd:1a:01:c4:2f:03:df:fe:4b:68:7a:07:98:8d:
37:12:dd:57:f6:65:c3:30:ed:a1:35:47:ca:c7:fa:ef:9b:5a:
04:2a:1b:8b:2e:ec:e1:b4:cf:7a:22:dd:0e:6a:cc:75:66:32:
88:7d:23:a9:2e:a6:1c:19:7f:94:38:29:f8:14:17:1b:cd:7e:
06:70:c7:15:c4:00:fe:47:b3:b4:44:9e:4d:d0:d4:f8:bc:5c:
8b:01:3c:cc:a5:c8:8b:d0:e7:11:90:fd:79:81:a2:c0:7d:00:
5f:37:e9:50:e8:a2:6a:4c:79:00:3e:20:e8:4f:3b:b1:06:9d:
c7:54:fe:0f:25:a4:00:7b:e5:34:3a:d1:9f:31:50:12:6c:0e:
15:97:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:05 2026 by rpki-client