
$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json)
Hash identifier: d/k94+CCgY/kGT2vAOiI+u382cTmaEEFS2yRRjOMNjY=
Subject key identifier: EF:1A:89:04:E6:DB:80:C8:8A:51:40:D9:65:8B:D8:CF:1F:11:EA:55
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial: 35E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
Manifest number: 358B
Signing time: Wed 10 Jun 2026 14:17:30 +0000
Manifest this update: Wed 10 Jun 2026 14:17:29 +0000
Manifest next update: Wed 17 Jun 2026 14:17:29 +0000
Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: DoLTpVwEupOk6nvWXHKSWwr+FItS2pUNchJwGBe1me0=)
2: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: 8krrPxGdC1AJXLst0L0sKBcp7J4vtNMSaCyCJqfKloU=)
3: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: S5MQHQKHGoySn52561lN0xrvmjrDRJUvv1CviMHuNKM=)
4: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: VG82nm7UqU5w2sJlNK4SDxqINYJwoA6/oxLrBlm8JIE=)
5: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: BUp0zcWa4HIudpk64mEylcMBmmGpd1vuqwNaBAsC6O8=)
6: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: yReVTcL58773Jpuyzjun19aGFuK7z9XDGu28zTvah3k=)
7: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: GnJt59bMAjeqlYPa4lin7QYgA2KcGbUA51eIDiT69YA=)
8: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: aqVmmYIJQaHpLvDdH8MbBjTUJnEk1fL6///wI+ixCg4=)
9: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: tHVxf9Q3vQhMutTNU0Up1wvh8aZLr2ux0lvTei/d9kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 14:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13797 (0x35e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Validity
Not Before: Jun 10 14:17:29 2026 GMT
Not After : Jun 17 14:17:29 2026 GMT
Subject: CN=6a2971f9-95fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:72:6d:e0:5c:99:15:b9:02:69:da:22:3d:
cf:59:a5:2f:8a:5b:3e:4a:7f:e9:0f:16:b5:20:da:
4d:10:95:18:de:98:5e:ca:bc:cb:2f:be:39:f2:f0:
d4:f7:f5:ba:09:35:47:22:af:3c:fe:9d:79:14:d1:
33:c8:9f:de:1c:dc:a9:70:b5:9d:fc:3e:0c:11:67:
31:42:59:8c:b6:8a:74:55:b6:c2:ae:0d:cf:4b:d2:
00:1a:bd:c2:4c:7f:7b:21:1d:39:c2:0e:69:3f:64:
13:e3:46:c7:a6:3a:eb:df:4e:7c:96:82:b8:d1:c7:
6b:12:88:f2:3c:90:c5:ae:0c:5d:54:80:a0:b4:f3:
eb:5a:dc:2c:99:85:6a:d0:e4:3f:3b:de:60:39:13:
c5:6a:21:c1:85:e2:2c:7c:f5:73:70:88:23:0e:f9:
b8:fc:86:37:59:b7:11:16:b9:b3:d9:ae:10:d8:e3:
9e:40:ac:29:2a:7f:c9:e9:c4:e2:8c:0e:0b:9a:ea:
ca:20:a1:35:87:fa:41:60:34:56:75:90:50:4e:52:
e2:07:bf:29:ce:c5:b4:9b:e5:ce:d1:49:95:ee:e7:
bc:62:67:95:86:53:fe:e1:86:39:c0:e0:29:47:13:
fd:17:91:da:56:bd:d5:61:71:65:f3:ae:05:83:73:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:89:04:E6:DB:80:C8:8A:51:40:D9:65:8B:D8:CF:1F:11:EA:55
X509v3 Authority Key Identifier:
keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:00:cc:4b:e1:25:66:b9:d4:c5:28:85:a6:5a:1b:34:78:19:
4c:87:ee:af:5e:04:71:58:eb:4e:31:68:45:90:aa:02:77:85:
03:54:33:54:fc:26:61:8e:e6:9e:b2:c5:f6:8d:fa:96:a4:65:
9e:cd:9b:00:54:03:38:f1:06:ae:8a:7c:d5:0f:68:35:d1:8a:
f4:71:94:26:4f:7b:d3:59:71:8c:a8:81:ce:93:e3:b9:54:d7:
e0:07:8a:9a:71:d3:57:00:df:35:9e:55:15:0d:0e:fc:92:40:
73:c9:21:98:bf:72:07:32:12:0b:b9:d3:19:7e:6b:9c:37:e3:
83:58:6d:75:0a:07:81:5b:56:6c:de:de:2a:0c:86:26:6a:c9:
6e:54:9d:72:48:22:35:4f:f0:68:d9:b1:e0:70:95:73:78:02:
a2:e7:5f:6a:f5:24:1e:7b:38:26:68:d2:7a:fd:ba:af:19:4b:
e7:3f:19:1b:e5:01:eb:49:0b:6e:b4:9a:d4:ee:a7:dc:5b:cb:
a9:71:34:e2:1b:e4:54:56:1b:d9:8f:0e:17:b9:03:3b:58:b2:
41:70:41:9a:2b:28:45:b2:3d:a2:9a:f1:55:87:66:74:e0:65:
1d:6c:a0:8d:e9:61:db:2b:1c:01:ba:33:8a:41:ad:81:f3:c6:
9c:b6:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:27:34 2026 by rpki-client