
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json)
Hash identifier: uLRhOK7scqanhYCfuF6hnSGSsOh748mQDBRH1svELuk=
Subject key identifier: F2:3B:71:15:C1:3F:17:27:10:D9:D0:6E:CF:A5:77:1B:80:10:16:C8
Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
Manifest number: 0109
Signing time: Mon 01 Jun 2026 06:49:57 +0000
Manifest this update: Mon 01 Jun 2026 06:49:57 +0000
Manifest next update: Mon 08 Jun 2026 06:49:57 +0000
Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: D20ZLw84OF5JU4aYYotGASx4qyQcVMtzoPNNf3j475o=)
2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: 7luqkxdAYhFDQ1cLdVYDxi4/1gyDCpg9yV33Rku64hI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl
rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
Validity
Not Before: Jun 1 06:49:57 2026 GMT
Not After : Jun 8 06:49:57 2026 GMT
Subject: CN=6a1d2b95-92ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0d:92:fd:66:b0:fe:b0:45:f1:f6:9b:bf:86:
7f:9d:08:56:96:c0:ca:4a:70:76:ff:3c:a3:62:e5:
02:05:10:21:9d:de:4c:34:a5:ba:aa:4f:78:31:8d:
2b:e9:04:d4:6b:a2:b5:a6:4a:69:f5:4f:ef:a3:a7:
a3:22:5b:14:41:3e:e6:7b:3d:75:e3:6b:df:1e:de:
96:b6:06:b8:19:72:3f:45:68:96:6a:de:bb:d9:01:
92:f5:1d:7c:a4:19:f3:02:94:fd:9c:54:ae:22:34:
51:9d:94:a1:80:3a:fe:70:06:47:93:62:01:76:03:
42:9e:a6:2b:0b:1a:56:6b:6a:77:e3:74:cb:9f:9f:
bf:bd:bb:aa:78:5b:11:b5:b2:68:a2:45:ff:03:30:
47:5a:6d:2c:c6:ba:ab:79:5e:22:d9:32:ff:1a:49:
4a:df:f4:05:a5:c9:9e:4a:4f:f0:2c:89:35:28:db:
7c:9c:76:27:31:1f:df:f0:b0:38:9c:27:b2:57:37:
3d:50:16:79:64:1f:1d:3f:2a:d8:5e:eb:60:67:59:
40:b8:c0:78:30:88:ea:6d:25:ba:f2:3c:cd:de:c9:
a6:4e:5a:2b:59:7b:f7:fb:83:aa:99:7c:3c:07:a3:
56:8a:d8:9b:0c:bd:55:37:bd:92:79:a4:24:2a:5f:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:71:15:C1:3F:17:27:10:D9:D0:6E:CF:A5:77:1B:80:10:16:C8
X509v3 Authority Key Identifier:
keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:61:f5:6a:e7:34:c5:f5:6f:51:d7:01:e3:bc:d0:9d:1d:46:
21:51:8d:1e:4f:48:0e:bc:a4:08:5f:cd:70:dc:85:b4:ce:16:
54:41:1a:67:82:89:50:be:a5:1c:7b:12:87:45:f2:1b:0a:21:
12:6d:fa:e1:71:89:f3:10:11:0e:9b:32:21:a7:d1:90:83:5e:
63:0c:db:ee:a7:23:fc:34:61:86:80:8f:2b:9c:51:4f:5d:84:
83:d7:43:e6:c3:d3:78:6a:77:a7:27:5d:d7:bd:61:05:e7:f9:
4a:21:68:15:0a:15:90:7b:64:cb:c6:20:d1:2e:f7:b5:fb:45:
e4:03:b8:0d:0a:18:6c:37:74:2d:3f:3f:15:4e:c2:6d:05:78:
22:e3:ad:fe:fa:75:0d:21:72:c6:62:6e:77:11:c9:dc:1d:68:
47:d9:a5:ca:cf:10:da:57:91:76:ae:56:f7:73:14:67:94:1c:
7a:41:85:af:db:99:ad:55:26:90:77:c9:5c:cd:ea:bd:10:38:
96:d5:08:0f:ef:ee:aa:c4:b0:b8:b2:4b:64:8c:7d:d1:68:89:
19:fc:85:69:0d:f7:24:7e:56:c2:d0:9b:b4:d1:89:15:e8:9e:
3a:72:f5:bf:14:6b:52:d5:1a:97:0d:4d:cd:fb:b8:b9:03:63:
ea:f3:6c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:29 2026 by rpki-client