
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json)
Hash identifier: TXPzZlGAVkETUk/R5up7LMYjyPrrwMBssmPOWa6Sb1A=
Subject key identifier: DE:C3:C0:C5:40:D5:3E:81:25:07:0A:FB:A1:7E:F2:1B:F7:37:BB:F2
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial: 04BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
Manifest number: 04AB
Signing time: Mon 01 Jun 2026 00:40:52 +0000
Manifest this update: Mon 01 Jun 2026 00:40:52 +0000
Manifest next update: Mon 08 Jun 2026 00:40:52 +0000
Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: GUmVjUllkJ0l5rJJ3JowW2cALiKjwPaSB7qtsjXrlac=)
2: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: 2HGFVACffkGhDeLHJzK3N3Q2oFmACWhF8TcKRliN94o=)
3: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: uBxr7p6TwpA9INGB4KedC2EYtx+upfxJFxMsenv5Y3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 00:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214 (0x4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Validity
Not Before: Jun 1 00:40:52 2026 GMT
Not After : Jun 8 00:40:52 2026 GMT
Subject: CN=6a1cd514-4a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:16:4e:96:11:37:73:d3:ed:02:a3:54:4d:
7a:32:8d:22:e5:27:5c:08:c0:d6:3f:eb:ce:48:e8:
97:4b:65:38:22:6f:58:50:e4:4f:ba:4c:81:e4:fa:
2e:c6:fd:f4:3a:56:0e:4b:b2:da:ad:57:b7:1f:62:
0b:ae:d1:01:b6:3e:ed:68:45:66:1e:4c:46:45:eb:
c9:e0:53:77:52:96:47:67:c3:31:27:59:e2:20:fb:
df:62:7b:af:45:d0:ea:10:f1:8b:de:7e:2f:38:c9:
6b:16:03:ec:2e:38:83:d4:52:2e:5c:03:12:da:84:
80:c5:e7:76:7e:d1:33:45:77:72:32:bd:cd:06:df:
0d:b6:19:c2:89:b2:47:9a:97:13:9c:46:76:49:0b:
84:50:57:a5:f7:cf:33:89:d1:83:2e:ae:05:f2:99:
45:04:17:88:2c:9e:73:94:29:47:7b:96:96:3c:bc:
56:0a:55:4e:ff:ad:41:79:b4:3f:f1:24:e5:30:32:
63:0f:6b:e6:c5:94:08:7c:c9:11:a0:d9:c3:a7:6c:
a4:87:24:97:ec:df:9c:ae:40:b7:54:0e:4f:85:97:
cc:6e:e7:ea:11:40:d0:9a:be:7b:d7:9d:9c:3d:47:
6d:7f:65:e7:f5:bd:1c:35:47:7c:a0:11:80:24:00:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:C0:C5:40:D5:3E:81:25:07:0A:FB:A1:7E:F2:1B:F7:37:BB:F2
X509v3 Authority Key Identifier:
keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:60:e2:71:4a:e4:c6:23:85:14:90:7e:1d:ad:54:14:15:fd:
92:cf:5c:70:80:30:e5:e0:2e:11:f5:60:3f:15:50:9a:bf:3d:
45:37:10:82:17:10:e5:f3:38:96:26:19:eb:04:40:dc:9c:27:
08:26:86:45:a8:96:e9:da:bf:d7:e0:9a:7b:c9:68:18:51:a3:
00:77:53:5c:9f:19:c9:ae:50:8d:02:c1:b4:b8:05:3b:c9:5f:
fa:ee:26:a1:a1:a3:9f:cd:b3:48:b8:bb:57:13:91:06:cf:15:
86:2e:b5:78:39:57:a9:80:e6:a0:3b:94:6b:33:97:07:4c:ca:
7b:a8:7c:9e:d6:62:18:fe:fe:62:d6:6b:f6:11:2f:de:d3:87:
50:c3:7e:bb:66:26:9e:18:8b:79:1f:8c:90:05:25:28:db:ab:
f2:f6:0e:e5:5f:8d:2e:a9:18:35:08:ff:2b:44:e0:04:ae:a4:
3b:29:e3:a7:10:32:0e:19:a0:71:ea:a1:43:56:91:93:b9:4d:
be:5e:32:38:73:63:79:e7:e1:a4:5c:c1:3d:08:0e:bd:ea:48:
e9:a3:5f:66:78:ee:be:46:b6:72:53:47:f1:15:4b:0c:51:4e:
f0:9a:9c:ac:ce:d4:e0:cd:4c:f3:79:d2:1a:7f:38:6b:e4:7f:
14:29:b8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:18 2026 by rpki-client