
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier: Xwg6SZ8gtYq3gN5qUcLwsAyuVoTv+XzrpyfveSw4wJs=
Subject key identifier: 60:85:1A:B8:1A:23:9F:DB:85:1E:F4:E9:49:92:5B:99:80:97:32:29
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number: 01F1
Signing time: Thu 21 May 2026 03:24:40 +0000
Manifest this update: Thu 21 May 2026 03:24:39 +0000
Manifest next update: Thu 28 May 2026 03:24:39 +0000
Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: ph2XSZN1YFwYCbDO86cpQYB2R8VMyBqosV8eTdEfSqk=)
2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: y6hlqSgvXAjWJY7Sel1hIYuvC0A3C+jNhr6PU7c820I=)
3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: z4T+vvI8T+5oc2mgkAo/obM6X1bNreFY1igmcwM5xYk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Validity
Not Before: May 21 03:24:39 2026 GMT
Not After : May 28 03:24:39 2026 GMT
Subject: CN=6a0e7af8-830f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:f7:c3:de:e5:05:60:e5:2d:ac:3c:d8:fb:
7e:31:f8:b3:3c:8b:b1:78:22:e0:97:6d:54:30:d8:
16:53:9f:45:f4:02:ee:4d:47:83:1e:74:03:9e:5d:
ed:b8:27:d1:e4:25:98:bb:8a:90:26:d2:9a:3e:7c:
29:51:b1:a6:8a:ee:5b:4f:a3:65:8e:bd:7e:f2:f7:
6e:56:5a:5a:b8:bb:8b:f5:20:bc:fa:5c:cf:d9:8b:
25:a7:84:1e:e2:ac:13:b6:b1:e6:4a:24:f8:53:94:
46:c9:53:13:70:f8:76:ba:07:fd:53:07:93:27:ce:
71:4f:4a:c6:cf:06:63:d0:57:88:59:b4:c2:c1:fb:
02:b2:b4:4d:3f:43:6f:6d:17:50:94:be:73:3d:ae:
02:09:d4:d2:2a:7c:4a:6c:73:50:f9:23:da:e4:89:
08:58:fa:95:7f:96:56:06:83:cf:66:bc:e9:54:20:
c9:3a:0b:4c:7c:73:ef:fa:59:de:93:e8:92:1f:9b:
93:75:21:a8:3c:39:c2:d7:bc:68:62:a9:4d:7b:ae:
93:e6:ad:7d:90:82:c2:9b:34:3c:dd:83:a7:3a:f7:
dc:17:45:6c:75:c5:ee:98:71:a3:6e:d9:9b:cb:e2:
5b:16:4f:6d:01:e2:92:a3:d8:7a:02:40:b1:16:d2:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:1A:B8:1A:23:9F:DB:85:1E:F4:E9:49:92:5B:99:80:97:32:29
X509v3 Authority Key Identifier:
keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:01:5f:cc:70:18:e0:f0:22:35:78:c3:9f:16:9d:25:5d:d1:
e8:4c:f1:98:3c:8b:0d:e2:34:30:88:ee:af:64:e4:c9:db:d6:
ef:f1:04:21:2f:ea:e7:ad:9f:84:3f:1e:9a:b5:5d:6f:c5:15:
09:d2:b5:15:6c:8c:2f:26:9a:50:9b:03:8a:d8:46:c8:47:49:
19:2b:c5:ea:b2:e2:ba:bc:88:54:f4:c9:31:4e:85:4a:c2:f8:
92:cd:90:98:9e:c3:e3:3b:71:94:b0:fe:99:5a:f8:b3:9a:3c:
8d:c8:c6:09:e5:76:6a:71:d9:7f:17:5d:a3:a5:53:6f:1a:ef:
e4:48:22:c6:d9:c3:d8:a0:0a:f4:2f:2b:9c:f6:73:a2:6b:af:
00:8b:3b:54:88:43:18:7e:8c:d7:da:cf:e9:fb:8c:0b:c6:1e:
c3:d2:0a:78:50:97:8a:f5:bb:7e:16:0e:08:66:df:c5:42:64:
6d:07:cb:63:57:de:59:25:40:c8:81:d9:20:0a:5b:b8:ef:a9:
cc:78:9d:82:91:52:bc:69:01:95:6e:92:a3:54:ff:ec:40:8b:
13:aa:3a:88:aa:49:bc:54:8f:77:07:ae:0a:ca:24:a7:28:96:
8b:61:22:cf:39:e7:9d:86:2e:27:be:bb:8d:e1:e1:44:ba:17:
d5:9e:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:07 2026 by rpki-client