
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB08/418EE88E08F911F18084D086313D8C67/46v_IWHJkQPYAS5h1SQxT9sCSPI.mft
File: 46v_IWHJkQPYAS5h1SQxT9sCSPI.mft (raw, json)
Hash identifier: APr2D2XcvcRVqef/5DNl9PUHM/UboWP9eTHjQhZQuME=
Subject key identifier: B0:7A:D6:23:7E:59:11:85:1B:11:B1:45:C1:55:70:79:9E:8C:91:36
Authority key identifier: E3:AB:FF:21:61:C9:91:03:D8:01:2E:61:D5:24:31:4F:DB:02:48:F2
Certificate issuer: /CN=A919DB08/serialNumber=E3ABFF2161C99103D8012E61D524314FDB0248F2
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/46v_IWHJkQPYAS5h1SQxT9sCSPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DB08/418EE88E08F911F18084D086313D8C67/46v_IWHJkQPYAS5h1SQxT9sCSPI.mft
Manifest number: 35
Signing time: Tue 19 May 2026 08:31:34 +0000
Manifest this update: Tue 19 May 2026 08:31:34 +0000
Manifest next update: Tue 26 May 2026 08:31:34 +0000
Files and hashes: 1: 46v_IWHJkQPYAS5h1SQxT9sCSPI.crl (hash: rC1wgRWY5KRzggJNuBc4oaypvGIP2KRcHWvSHCfxxWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DB08/418EE88E08F911F18084D086313D8C67/46v_IWHJkQPYAS5h1SQxT9sCSPI.crl
rsync://rpki.apnic.net/member_repository/A919DB08/418EE88E08F911F18084D086313D8C67/46v_IWHJkQPYAS5h1SQxT9sCSPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/46v_IWHJkQPYAS5h1SQxT9sCSPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DB08, serialNumber=E3ABFF2161C99103D8012E61D524314FDB0248F2
Validity
Not Before: May 19 08:31:34 2026 GMT
Not After : May 26 08:31:34 2026 GMT
Subject: CN=6a0c1fe6-db7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:0d:2d:85:51:b3:e6:bf:60:51:f3:25:0f:
e5:f3:c3:0a:b4:dd:96:26:99:82:59:ee:18:d4:71:
24:37:ab:fe:00:d8:48:fb:69:0f:e3:6a:5a:84:41:
e1:b3:08:82:31:88:07:8f:60:ad:d9:51:87:7a:aa:
5d:67:85:a7:01:0c:79:17:b3:54:ef:03:20:db:81:
96:b4:2c:e0:b7:2c:fa:2e:ea:b9:5e:bf:11:54:5b:
0b:9a:57:89:49:44:66:ea:66:aa:28:aa:48:e2:bf:
71:ff:1f:38:7f:fb:7e:44:9d:f9:a8:27:c9:44:85:
53:e3:1f:15:61:f0:48:50:76:3f:e2:fc:da:af:4d:
25:3e:18:70:3a:3e:40:07:a6:cf:d8:a2:cd:11:ca:
06:d9:6b:8a:f1:98:fb:c9:ff:8e:63:69:d9:da:37:
e9:08:ce:47:3a:fa:6d:dc:2d:20:84:db:ed:5e:2e:
90:01:2f:f0:d5:71:d7:95:b4:eb:0b:77:50:2e:d2:
ae:27:26:06:b5:3a:64:4a:99:b2:07:4f:4d:18:b6:
2c:04:8c:27:fc:ac:2f:07:6f:49:a5:e4:d0:dd:04:
86:3b:52:c9:35:d6:8c:13:0f:f0:73:ef:36:09:26:
0e:8d:1b:87:19:46:c7:38:ea:d2:02:ee:04:f4:49:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:D6:23:7E:59:11:85:1B:11:B1:45:C1:55:70:79:9E:8C:91:36
X509v3 Authority Key Identifier:
keyid:E3:AB:FF:21:61:C9:91:03:D8:01:2E:61:D5:24:31:4F:DB:02:48:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DB08/418EE88E08F911F18084D086313D8C67/46v_IWHJkQPYAS5h1SQxT9sCSPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/46v_IWHJkQPYAS5h1SQxT9sCSPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB08/418EE88E08F911F18084D086313D8C67/46v_IWHJkQPYAS5h1SQxT9sCSPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b6:6a:fc:5a:4f:29:d8:88:aa:65:17:5e:3a:91:5e:2c:da:
84:16:4b:1c:f7:99:0b:35:a4:96:8c:0f:8e:93:39:3c:13:4e:
61:e5:ff:7a:99:fe:34:80:03:06:36:61:df:92:f5:a9:f0:de:
6c:c6:b3:3f:07:fa:aa:3e:33:3e:bc:82:8f:74:d4:00:a4:dd:
f6:ec:90:d6:e0:58:6e:30:97:c0:75:19:c5:21:cf:99:e2:82:
d3:77:1b:a9:b1:43:90:69:87:70:5e:c4:2c:f4:58:57:08:a4:
e3:fc:79:8c:01:02:b6:72:88:44:46:d5:8d:d2:d3:c3:63:46:
5b:a4:0b:79:83:ea:ac:bc:09:bb:c3:9b:d1:5a:8c:ec:d5:36:
25:47:fa:3e:d5:d1:69:ee:19:e2:68:d2:e2:10:6c:57:a9:79:
03:39:50:f3:7c:cd:44:76:21:5c:63:14:e2:90:7a:7f:98:f9:
dd:77:5b:00:2c:4b:ad:3f:c3:f0:9c:aa:f3:3e:72:5b:f4:51:
67:a7:d2:fb:78:4d:98:88:eb:0d:4e:10:07:85:66:92:00:d9:
2b:c5:16:da:32:da:24:b4:d0:fd:b3:38:b5:bb:b0:2a:85:ca:
d8:8f:d8:2f:6c:03:ce:3d:04:bf:dc:2a:14:7e:c4:7a:32:cf:
b6:39:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:06 2026 by rpki-client