
$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json)
Hash identifier: rKdueroD5Sdfqt4wn4tXzBba52fz7hB5GvsVmBc4usM=
Subject key identifier: FD:F8:7B:76:05:94:6B:95:8F:AC:93:50:5E:28:DD:0B:E1:42:54:06
Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
Manifest number: 0226
Signing time: Thu 21 May 2026 02:49:09 +0000
Manifest this update: Thu 21 May 2026 02:49:08 +0000
Manifest next update: Thu 28 May 2026 02:49:08 +0000
Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: e7FYWS3fujLKkCeYcbFJMt/ZbBc5siwl0yc/PfWwsJo=)
2: 87695D32591811EE973B1058C4F9AE02.roa (hash: OI2+qJAVneFLGz/M4RVXmY/qZKzcprsapI3tIgHwYvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB
Validity
Not Before: May 21 02:49:08 2026 GMT
Not After : May 28 02:49:08 2026 GMT
Subject: CN=6a0e72a5-0363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:df:f7:f1:f3:d7:30:f3:c6:42:d1:b6:cd:
df:3d:03:de:30:34:76:16:59:94:75:c0:17:6f:68:
6d:ab:79:7e:08:06:5e:fc:30:13:12:e8:c6:68:a7:
a4:f1:f7:9a:ca:69:a3:38:02:47:6b:ef:e8:96:c7:
48:00:a9:75:a5:57:8f:c3:7a:b1:3d:17:0b:d0:85:
27:bb:09:48:a0:fa:47:da:0e:ec:c6:7d:d2:52:87:
00:49:6c:78:91:8e:a3:94:d8:5d:2b:39:89:eb:41:
f6:24:80:70:b3:43:d7:1b:be:55:73:63:21:17:3a:
06:91:19:53:f3:30:12:b0:23:46:4a:8f:34:91:6c:
eb:75:74:d3:86:5c:bf:c6:0f:31:0b:9f:e8:78:55:
10:f4:b4:a2:19:b3:df:8b:0b:99:00:30:d5:4a:bc:
e2:09:c8:2b:bc:68:51:c7:70:9f:bb:60:6f:aa:b4:
b4:3f:10:38:d8:06:66:f7:bd:4c:df:a4:e6:6a:15:
e4:1d:7a:0f:ae:61:ea:0a:c6:1b:90:ed:09:43:32:
d8:b5:36:44:28:b9:ab:4a:7f:77:19:9b:39:2d:c7:
5f:fc:13:6b:b8:6c:ec:09:15:5f:b8:01:dd:9e:34:
dd:63:4a:49:e0:dc:c9:ad:7d:7a:47:3c:6c:5a:13:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:7B:76:05:94:6B:95:8F:AC:93:50:5E:28:DD:0B:E1:42:54:06
X509v3 Authority Key Identifier:
keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:10:c7:49:52:43:0e:80:be:57:1b:dc:9f:40:ba:a2:62:
3c:ef:d6:69:78:17:4b:8a:ae:23:9a:94:3c:73:1d:4f:97:2a:
cb:30:07:f2:8b:2c:62:a0:8d:16:5f:d2:b2:0e:fe:16:4f:ad:
c1:06:36:41:e0:b9:1e:fd:92:f8:1a:00:0c:70:3b:bc:ef:fe:
33:fa:bf:9c:30:e1:41:2a:1b:66:39:75:d3:01:5c:3e:42:f7:
8d:b6:77:3b:6d:4e:d1:4b:3a:29:a4:89:db:a9:e9:bd:c0:d8:
08:ea:1b:e4:d7:ac:c6:7e:88:f3:66:e6:b1:2f:53:81:34:ef:
57:29:c7:de:9d:65:e4:ac:cf:0c:3d:aa:e0:0a:08:93:40:69:
e8:7d:58:a3:58:ad:86:d6:12:fb:6e:eb:2f:50:07:e6:c2:eb:
16:e8:54:54:69:94:cb:71:59:69:8c:f3:13:8d:97:57:2f:5b:
5f:0b:c9:db:8f:d9:7a:4b:4a:bb:dd:cc:b8:03:fa:38:a5:7c:
a6:e6:2f:18:b5:90:0a:f1:f5:5f:5c:65:46:0b:17:b2:41:cf:
fb:2a:61:4e:cc:0c:7c:18:a9:6a:3e:aa:51:c3:a2:46:db:cc:
b9:ce:a0:fa:e8:49:bb:a1:38:b2:66:ba:2c:b1:72:9b:55:a9:
09:a9:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:04 2026 by rpki-client