
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
File: 1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json)
Hash identifier: AN+hn+Ylmrql9Smzj3FwqzeJc3YQY7IOVl8C6kCRLb4=
Subject key identifier: CD:89:52:E7:BF:83:6D:EC:8A:F9:22:22:C6:06:0B:88:8A:29:F1:11
Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Certificate serial: 355D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
Manifest number: 354C
Signing time: Wed 20 May 2026 15:00:34 +0000
Manifest this update: Wed 20 May 2026 15:00:34 +0000
Manifest next update: Wed 27 May 2026 15:00:34 +0000
Files and hashes: 1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: R/seAT8pVa5UVCpOaIB6tfEbC3oSzMgyhH6cDfukjhw=)
2: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: +eQCtZaTH6GkPFoFVSiRb3PRvqAtjbgtEZLgyROZQic=)
3: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: OY0gqFhSrcsr3Ue2BAA7UCekieh8CcnhGOTNZC+wAEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13661 (0x355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Validity
Not Before: May 20 15:00:34 2026 GMT
Not After : May 27 15:00:34 2026 GMT
Subject: CN=6a0dcc92-ddc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:37:5d:16:9a:8b:18:8e:44:18:97:fd:cb:
9b:7c:10:ad:94:75:51:e6:ef:48:b1:ef:85:16:28:
7a:b8:00:7e:3b:ff:16:f9:03:43:db:fd:1f:8f:39:
04:90:a2:20:d2:55:e5:a0:0c:74:7e:aa:3b:6e:05:
f3:2f:77:56:72:48:3b:9f:d3:af:c0:41:5d:b5:11:
c6:e4:56:8b:1c:a0:ad:a6:92:8b:fc:27:fe:ad:fa:
e0:55:16:8a:42:2b:23:c6:f8:35:8d:c4:45:55:86:
51:1d:be:ce:20:0c:5a:d4:d7:b2:77:ff:cd:bf:49:
8b:e7:70:d5:e5:d2:b6:77:5e:84:b1:d8:a5:8f:9b:
30:ee:78:ea:f6:b8:ed:86:46:f4:68:e4:7c:84:ee:
44:73:c8:aa:94:d7:70:9a:ac:18:3f:30:42:32:2d:
f0:73:d4:fd:89:9e:a5:a3:2f:57:48:dc:7c:9a:09:
f8:a8:1e:e2:37:19:cc:9f:41:8f:cc:d0:90:cd:09:
4a:0f:3b:fc:bf:fb:6a:67:52:29:5b:15:74:86:fd:
aa:ad:6f:58:4f:5f:ce:ec:f9:aa:bd:7c:b3:6d:eb:
24:4e:13:c2:22:0a:72:2d:e0:59:3f:c1:7a:6a:23:
f7:ea:31:39:09:01:29:00:70:2d:ee:94:70:60:79:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:52:E7:BF:83:6D:EC:8A:F9:22:22:C6:06:0B:88:8A:29:F1:11
X509v3 Authority Key Identifier:
keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:12:5e:c6:2e:9a:97:55:35:5a:b3:35:c9:0e:6c:9e:d0:c5:
c0:ab:3d:88:4e:70:2b:cd:06:bf:71:1b:35:51:4f:76:7b:04:
38:8d:fa:b0:f7:da:7a:7b:80:dd:73:4f:3d:8b:06:d5:40:20:
fe:47:53:45:c7:fd:0a:db:ad:4e:35:a3:6f:c3:8c:39:45:a3:
96:56:54:8d:12:92:a8:0a:26:2a:99:d9:85:6a:9c:e3:7a:40:
57:8a:39:94:9d:d5:3e:56:3b:e7:74:2a:79:dc:e0:68:7e:c1:
59:80:4f:42:e3:f5:1c:4e:05:43:4d:b4:de:54:9e:58:dd:c4:
73:8c:2b:43:29:0a:9f:c2:64:ef:0c:ca:7b:ed:ad:a1:9a:30:
7d:d7:fd:a1:e5:75:cb:1b:f1:58:28:09:ce:18:f5:ed:29:86:
58:e4:46:dd:82:e2:92:7c:a5:d9:13:25:87:d6:2b:44:e1:a3:
1d:01:64:16:03:aa:a4:6a:e1:c4:6c:05:1a:d9:29:1a:9d:62:
06:b0:7e:13:1b:0f:d2:2c:7d:46:ff:e3:b7:af:e2:71:e7:2e:
a6:de:0f:46:eb:6e:5d:19:e9:34:d5:43:9b:58:d5:6f:10:71:
8b:7a:7e:37:4d:d8:ee:3b:c1:de:42:8e:17:f3:55:53:9b:1e:
a9:09:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:29 2026 by rpki-client