
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
File: -mAalrTnqFTJ8SflGdb-adTWa2Q.mft (raw, json)
Hash identifier: Qc+i8v2dJQshtldziZ5Ey8YOpVpmRM4cCPL9vSrof/A=
Subject key identifier: A3:DE:FB:3C:55:07:9C:34:BF:8D:D3:62:0A:FF:B8:57:20:5C:6F:94
Authority key identifier: FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64
Certificate issuer: /CN=A919CD86/serialNumber=FA601A96B4E7A854C9F127E519D6FE69D4D66B64
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
Manifest number: 0F
Signing time: Tue 19 May 2026 08:39:14 +0000
Manifest this update: Tue 19 May 2026 08:39:13 +0000
Manifest next update: Tue 26 May 2026 08:39:13 +0000
Files and hashes: 1: -mAalrTnqFTJ8SflGdb-adTWa2Q.crl (hash: KPpRSQGJoQpQBducc0jUX3I+QFuWtHCI15l5O4EbSxQ=)
2: 90D7D3723F8311F18CBDD8DAB0833773.roa (hash: P6a6wR+MfhCWdAFG07wpqZk3513aDze1znpd7LlZfvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.crl
rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CD86, serialNumber=FA601A96B4E7A854C9F127E519D6FE69D4D66B64
Validity
Not Before: May 19 08:39:13 2026 GMT
Not After : May 26 08:39:13 2026 GMT
Subject: CN=6a0c21b2-3e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:fb:d3:74:ac:17:2f:1b:33:85:bd:27:4f:
55:32:a1:aa:6b:af:b1:c4:2d:50:38:c9:5e:2a:49:
0e:47:9a:50:f4:be:5f:dd:e6:f5:ec:ea:32:e9:f4:
20:10:10:3a:d0:68:c8:38:dd:6a:7a:bd:20:99:85:
7f:11:9e:3c:f9:72:ee:b9:ef:46:8f:cc:bc:6f:ab:
c6:2f:1a:e2:9e:de:75:3f:8b:20:f0:2b:81:89:7d:
67:01:7b:6c:89:c4:39:fb:a6:05:5a:f5:f5:5b:3a:
a7:31:1b:0b:76:8c:24:b6:90:7b:c4:61:53:1c:eb:
f6:ad:31:6b:4b:2c:82:3e:ff:de:e1:00:89:59:33:
74:71:2d:85:ea:5b:a4:11:bc:0b:78:86:83:48:01:
b4:4f:9f:ba:ea:cc:70:bb:65:46:09:5a:89:41:1a:
42:50:08:e2:ca:51:6e:2f:a0:78:29:fa:4b:ee:e8:
00:1f:1b:a8:69:24:dc:e9:bc:9d:7f:58:2d:28:61:
97:d8:11:fc:27:a6:eb:d8:27:4c:a4:a5:9a:b4:84:
9b:ef:da:c7:f1:98:1c:10:70:15:8d:f2:2b:3c:ba:
a0:bc:ef:5a:02:c0:7e:d3:5c:c5:cc:ff:40:e6:cd:
93:7b:3a:cb:c3:a1:07:85:6d:85:5d:f2:bb:c4:34:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:FB:3C:55:07:9C:34:BF:8D:D3:62:0A:FF:B8:57:20:5C:6F:94
X509v3 Authority Key Identifier:
keyid:FA:60:1A:96:B4:E7:A8:54:C9:F1:27:E5:19:D6:FE:69:D4:D6:6B:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mAalrTnqFTJ8SflGdb-adTWa2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CD86/88E4D8503F8211F1B898E551B0833773/-mAalrTnqFTJ8SflGdb-adTWa2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0e:07:64:15:74:1a:d1:7a:8a:65:c9:87:fa:40:38:c4:9b:
2d:5a:07:5d:66:e8:3d:26:fb:9a:1a:ac:79:72:a3:0e:53:13:
36:a8:ba:b8:3d:e6:3b:fe:7e:7a:f8:a6:34:c9:9c:52:52:8a:
9d:01:8f:39:b8:2c:c4:f2:f2:a5:19:b5:91:0a:9b:89:e8:52:
54:82:12:d3:eb:56:09:e5:96:5a:96:3b:4c:04:be:64:d3:cd:
08:90:78:64:96:ab:19:6e:df:5a:a8:9c:f5:7f:de:a4:93:a2:
3a:51:55:6e:76:7f:4a:f8:e1:cb:cc:37:83:3f:64:fc:c9:ae:
ed:ed:cb:db:24:09:2f:d9:04:ac:06:50:5b:11:2a:16:db:a3:
bd:08:a6:21:f5:c4:ee:8b:5c:cd:2f:5b:31:01:84:bf:0a:7e:
cb:a4:36:a7:0a:fa:5d:85:91:7c:8c:dc:65:56:0b:4c:ed:8b:
c7:73:ba:5b:0c:d0:91:99:a2:5b:13:a3:0d:ce:85:b7:48:8c:
c1:96:12:96:5b:fc:8d:3a:03:08:b4:ef:3d:c5:ec:ef:17:5c:
7e:f5:3a:f2:3f:14:8a:e1:38:f2:1d:ad:ca:36:91:17:fe:69:
0e:11:88:b4:7b:dd:3d:d8:ab:08:0c:2c:87:da:ae:fd:bf:95:
55:b0:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:30 2026 by rpki-client