
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
File: l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json)
Hash identifier: Q1nf5c27gJqb88P7wJ71K4RMQn4GSo7rpOB5YOCWNF0=
Subject key identifier: 13:0F:BE:D9:70:5A:3C:2E:B8:68:65:CB:45:4E:AE:D8:BF:93:7B:DF
Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC
Certificate issuer: /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
Manifest number: 52
Signing time: Tue 19 May 2026 08:05:09 +0000
Manifest this update: Tue 19 May 2026 08:05:08 +0000
Manifest next update: Tue 26 May 2026 08:05:08 +0000
Files and hashes: 1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: oHZG3YrV8uPfYUhOORQigiTL68YjZydD5h7KRcACrhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl
rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC
Validity
Not Before: May 19 08:05:08 2026 GMT
Not After : May 26 08:05:08 2026 GMT
Subject: CN=6a0c19b5-e0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:8d:3c:6e:d9:0b:f8:c3:c7:bb:8c:a4:c9:
3a:e9:cf:4e:29:9c:2d:d8:6e:7c:b5:a9:59:fa:5c:
65:dd:11:84:ac:b2:ac:9f:2f:8b:50:ce:24:0f:df:
0d:ff:02:4a:26:28:ef:08:1a:2d:d7:b1:86:81:1e:
c0:73:3f:1a:a8:84:8f:e0:6e:5e:85:d9:9c:a8:e0:
ef:57:1a:05:15:1b:0b:67:c3:7f:2f:07:71:44:c9:
a3:65:3e:1c:82:c2:3c:87:b4:fe:e5:2a:b1:04:94:
20:9e:5f:27:af:27:ea:ed:33:55:92:6f:14:a2:7a:
e2:21:ec:38:e9:8c:28:82:04:55:9a:08:5c:37:7d:
c8:0b:64:96:94:dc:9f:e4:65:dd:8a:48:c3:b4:ca:
8c:4c:b2:6c:96:3f:a4:68:60:dd:5f:4a:a5:01:9c:
8c:38:3b:e3:3d:73:56:37:b4:f2:62:8c:25:9d:d4:
0e:c0:99:27:f6:35:31:19:6f:ae:53:14:bb:f9:96:
b8:c1:b4:18:c8:2a:d9:5a:7d:46:98:0b:0a:26:26:
45:a4:c6:07:9c:e9:f1:07:10:05:6f:17:a5:5b:a2:
91:da:e2:fc:37:f7:10:f4:43:4a:ed:7f:74:fa:23:
e5:26:5d:4f:7a:3c:f9:3c:4c:52:07:b1:75:de:95:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0F:BE:D9:70:5A:3C:2E:B8:68:65:CB:45:4E:AE:D8:BF:93:7B:DF
X509v3 Authority Key Identifier:
keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a0:f2:63:c9:43:ab:44:44:9a:90:b6:70:e5:19:e8:71:57:
cd:b4:df:7f:9f:b9:f7:52:56:33:c7:cc:34:e8:69:57:4d:4a:
dd:a9:49:cb:ac:61:bd:50:98:a2:0d:25:c6:5c:42:9b:69:8e:
11:e0:04:17:8b:9e:b2:64:54:74:28:b8:f0:28:c7:d7:c4:89:
53:6e:91:4f:5b:9b:16:2b:a2:01:cf:ac:c9:19:b5:83:17:40:
ef:df:42:67:3c:65:2c:3f:93:03:7d:02:24:d4:33:54:70:9a:
64:e3:fe:30:e2:d9:b7:89:a8:bc:2b:12:c6:db:50:f4:4c:aa:
59:84:1a:1c:af:39:d4:eb:9b:8c:a8:24:9b:d2:15:f5:cb:08:
0a:68:e9:60:4c:82:fe:c0:2d:21:0d:47:35:e1:01:dc:d6:44:
20:88:04:85:d5:46:43:53:25:7c:e1:00:e4:df:d9:3f:aa:ba:
86:a9:64:f7:16:80:3c:79:63:97:c5:7d:86:5d:8a:fd:24:cd:
16:10:a6:39:a0:29:62:c2:db:22:3e:b0:9e:cf:fa:70:fa:94:
9d:4d:37:8c:69:3b:d7:28:9f:c9:8d:dc:01:3f:37:3b:6f:bc:
08:15:6a:bc:1c:b9:cd:81:43:94:75:e3:ce:cf:10:00:af:46:
f4:8f:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:11 2026 by rpki-client