
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier: qXV+lZoBaNX2MLatAcpyKXE3FCpMTNbaH+flFsrMFyw=
Subject key identifier: 45:23:D0:89:57:C4:C2:E6:0A:E0:75:C5:96:E8:BC:36:DB:62:E9:24
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number: 018D
Signing time: Thu 21 May 2026 04:27:10 +0000
Manifest this update: Thu 21 May 2026 04:27:09 +0000
Manifest next update: Thu 28 May 2026 04:27:09 +0000
Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: UxW4K2YkD64nUNYGbXmHFvjP7yNP/fNkYlX9w0529HA=)
2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: AJJ92VGVLucsvsIdaZU0nKfuQXZ8cJi9IfizP5I2ais=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Validity
Not Before: May 21 04:27:09 2026 GMT
Not After : May 28 04:27:09 2026 GMT
Subject: CN=6a0e899e-89de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:7c:a4:d7:38:b6:0c:b8:84:d8:7a:49:6e:
1a:23:21:13:ed:b1:9e:09:88:58:4b:a7:68:91:74:
62:d6:04:b1:76:b2:ad:93:20:09:e1:19:b2:81:cd:
66:bd:c5:9b:52:0d:32:f8:91:fd:7a:93:2e:ba:eb:
d4:17:0c:ed:a4:ec:fa:16:80:e4:12:d2:31:7d:48:
56:e4:84:c3:06:52:c3:51:5c:6a:89:f2:25:89:f4:
00:b2:09:b9:2e:91:9f:db:0c:65:af:b9:f0:92:06:
b7:dd:8c:69:12:35:64:4f:83:ad:df:34:bc:0e:1a:
94:18:a0:49:73:1c:9f:83:7a:88:c7:c8:f6:e9:de:
ee:4c:a4:9c:11:2e:4e:fb:17:25:2b:79:77:53:86:
86:d2:67:93:f8:a4:56:ea:63:c6:e5:37:dc:6d:bb:
89:29:d3:13:01:de:2a:1c:19:1e:68:77:e6:91:da:
90:d8:8c:0f:ce:58:0a:bc:5d:bf:e3:7f:bd:ef:bf:
cd:aa:4d:72:97:82:0d:e2:db:46:05:3d:58:d8:16:
33:0d:0b:18:fe:9b:ff:0f:17:c7:7e:8f:d0:22:56:
0d:1a:49:e7:9f:03:ed:a3:97:86:49:54:3a:6e:53:
65:f7:f3:e7:64:58:7f:46:ff:4e:0a:b3:84:6c:23:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:23:D0:89:57:C4:C2:E6:0A:E0:75:C5:96:E8:BC:36:DB:62:E9:24
X509v3 Authority Key Identifier:
keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ce:dc:7a:3b:07:b6:e4:ab:aa:09:7b:5d:7f:10:5b:ea:4d:
61:29:8c:ed:bd:a7:34:17:06:17:51:89:95:d0:9e:ca:e9:75:
20:ec:b2:0e:3d:da:c3:5d:c6:3f:83:c3:7f:f7:9a:6f:b2:27:
f5:4d:01:2a:4c:53:35:bc:81:32:13:4c:82:d0:50:98:77:05:
12:bf:48:27:99:11:40:60:c9:5b:6a:a5:2a:b2:fe:3e:df:61:
16:c1:77:dd:5c:b1:71:6e:e5:40:8f:c9:da:92:5c:1b:00:60:
de:9f:b5:0b:86:cf:64:f5:7a:6e:4d:54:5f:c9:ec:f6:84:6f:
43:00:d0:cb:45:b6:ee:ec:f7:da:ce:fc:0e:ef:62:e1:08:91:
2b:06:b3:36:06:05:ec:e8:63:8d:97:d8:3f:3f:92:d0:82:38:
ec:5b:66:76:c4:bc:a4:7a:22:45:44:81:b9:1a:fb:be:18:8f:
b2:9f:ec:7b:3e:43:2d:3f:eb:c1:8a:6a:36:d4:2c:a0:aa:15:
c9:c3:48:6f:11:3c:e0:28:69:83:b0:20:77:f3:49:69:6a:3f:
fc:ce:68:44:d5:ae:d0:85:82:a3:57:13:71:98:dd:45:fc:ef:
8a:ad:e9:6f:6f:7d:0d:9f:76:35:b9:e8:a9:8a:d6:c3:b7:79:
ff:d7:8c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:34 2026 by rpki-client