
$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json)
Hash identifier: YVI6lbSy2M3YdE3I7B8jIVKwVX+69mRYPhutan8x5nI=
Subject key identifier: 38:49:4E:BF:07:56:50:7A:4B:11:E0:DD:E7:B5:D5:E4:85:59:AD:3D
Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E
Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
Manifest number: 01A3
Signing time: Thu 21 May 2026 04:18:41 +0000
Manifest this update: Thu 21 May 2026 04:18:40 +0000
Manifest next update: Thu 28 May 2026 04:18:40 +0000
Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: jwVNtAaI6HqiCZZ8opbDGSfQ3B0xwuQE2K50ABjKjTg=)
2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: xA69nJThb7qSmzNZKEVWJfaSdeU9xfVDwX5mxId3GkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl
rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E
Validity
Not Before: May 21 04:18:40 2026 GMT
Not After : May 28 04:18:40 2026 GMT
Subject: CN=6a0e87a1-3a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:ff:6b:01:5f:3c:37:17:47:90:af:63:0b:
50:f4:cc:63:08:13:70:90:7c:7c:b9:fa:69:25:cc:
e2:2a:fd:a6:d1:6c:3f:77:61:f6:b2:e7:9c:48:46:
19:4c:08:3f:6c:e6:03:85:49:fb:34:c6:2d:e5:45:
e8:e5:ec:a9:87:11:87:7d:45:9e:98:93:4e:c3:b9:
0d:85:ee:a4:9c:ec:50:df:90:b1:53:76:1c:3a:ff:
35:36:d3:02:e3:aa:74:f3:3a:4e:f9:6c:9e:4a:6f:
39:af:df:86:69:e4:9e:e0:39:40:17:00:c6:3c:ea:
d7:3d:83:6a:fd:cb:31:7e:3f:b0:03:c7:64:d4:64:
9a:60:9e:35:5b:2d:b4:4d:2b:64:b5:82:d6:0f:5c:
46:ee:37:20:00:c0:d3:bf:5c:04:d8:3e:84:b6:6d:
d8:12:13:b0:ae:d7:c2:84:bd:8f:14:60:b2:24:f9:
b0:d6:21:5c:46:10:55:96:db:02:ce:99:1d:2c:7a:
ea:70:37:97:c0:a0:08:d5:2f:af:b6:a7:24:ae:1d:
f6:c0:ed:b6:ca:69:7e:31:7c:6b:b6:dc:2d:a1:f5:
dc:83:bb:b2:aa:2b:cc:16:04:8b:80:2f:16:12:b2:
5a:a2:0f:65:48:b1:04:db:ad:de:67:87:74:57:06:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:4E:BF:07:56:50:7A:4B:11:E0:DD:E7:B5:D5:E4:85:59:AD:3D
X509v3 Authority Key Identifier:
keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a1:2b:cf:05:d5:88:05:c5:78:9a:41:84:d5:cb:18:a2:8e:
ea:24:9c:d6:14:91:6c:cb:12:d1:f8:fe:6f:eb:10:d5:35:46:
e6:5d:a1:26:ef:0e:c6:1a:81:de:f3:b9:4d:9d:cc:c9:13:87:
8c:42:11:c2:2d:ce:9d:db:05:c7:f6:ff:4f:73:e0:9c:27:16:
ed:fe:39:5c:6c:31:70:66:64:49:76:5d:51:79:56:39:e4:62:
da:26:f1:7b:96:d4:d6:1b:c8:23:b8:57:c6:83:57:12:3e:d9:
7d:5f:0f:0c:eb:6e:b5:f1:fd:f8:cd:8b:62:ee:ad:52:8b:47:
c0:8a:01:77:76:f1:6f:3b:ce:27:eb:6f:e9:6e:8d:a0:34:51:
5e:38:87:dd:a7:c9:cb:41:18:79:57:9f:37:a8:d0:3f:2f:86:
7d:0f:e6:18:5f:56:e2:9a:f3:f3:67:1c:03:09:01:82:f2:58:
c1:84:52:b9:32:4c:41:da:32:1a:ad:1a:ff:10:2c:2c:a4:0f:
ea:62:0c:3b:4a:f8:01:15:59:31:49:2a:85:a5:cf:8a:0e:0d:
d6:ac:09:78:af:68:03:cf:d8:57:4c:8d:8d:00:3d:a1:88:9f:
c6:47:91:23:5c:ad:8e:b0:d2:31:4a:b6:e9:56:6b:3b:af:94:
d1:c6:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:19 2026 by rpki-client