
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json)
Hash identifier: uqLD+PL1nwLSxoB2parRbiduu3z6Rlb9efO8kvYRdkM=
Subject key identifier: 0A:ED:98:0F:16:56:22:8B:2F:E3:58:60:19:A9:C7:18:CE:00:CF:F5
Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Certificate serial: 02BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
Manifest number: 02AD
Signing time: Thu 21 May 2026 01:36:21 +0000
Manifest this update: Thu 21 May 2026 01:36:20 +0000
Manifest next update: Thu 28 May 2026 01:36:20 +0000
Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: TVloxay6JMyAboObZ8FggAXbSA6hYaSxR+vsmYdsJ/4=)
2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: UoPSD/sB882BUptuBl7wMhpHSR5jbx5b49dtZHebnaw=)
3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 10T57IR+PMdmV6j2kmrAkG4ca6NjWj+tRvDyWCCrDmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Validity
Not Before: May 21 01:36:20 2026 GMT
Not After : May 28 01:36:20 2026 GMT
Subject: CN=6a0e6195-ea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:d8:09:7e:19:c7:c1:df:0d:77:aa:5b:71:
d1:d6:a0:78:e4:ef:13:ad:57:1a:3d:22:bc:1e:44:
11:e0:2b:9f:74:26:99:83:75:47:20:d6:fc:51:f7:
69:f9:50:d5:79:cc:c3:4e:81:61:ed:f9:be:0a:71:
8e:aa:8b:73:f6:8e:a6:75:ee:17:45:85:54:3b:d6:
aa:cb:42:89:0a:d0:39:72:08:4d:93:a1:25:87:92:
f0:39:0b:22:21:da:d7:4d:ff:91:31:ba:b4:f3:58:
28:fe:be:3d:77:71:3f:9c:19:29:22:37:fe:8f:48:
1e:34:88:1e:42:87:16:cb:f0:3a:24:f8:13:d2:c0:
43:84:d0:21:73:f8:ea:9f:e6:fc:88:34:cc:7f:76:
3d:bd:17:ff:f1:c6:ec:6d:e0:10:a8:4b:b6:97:cc:
dc:10:a3:21:52:8d:67:6e:06:39:46:a8:56:0c:1c:
9c:0c:b9:12:56:39:1b:39:85:51:07:24:8c:8e:41:
0a:c9:32:7d:8d:63:c1:54:57:5c:8e:46:19:ce:87:
ee:5f:67:25:f8:79:c0:18:8f:ca:58:49:ac:9d:40:
12:3a:c5:50:3f:aa:e8:2b:1c:81:bc:d8:89:7d:59:
5b:c7:5b:61:9b:ba:de:85:dd:22:5c:74:78:eb:b0:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:98:0F:16:56:22:8B:2F:E3:58:60:19:A9:C7:18:CE:00:CF:F5
X509v3 Authority Key Identifier:
keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:5a:14:b0:1c:64:ef:ed:7e:66:ae:2a:98:ca:6f:87:37:0f:
3e:2a:d0:55:71:41:e4:79:68:7d:d4:c0:8c:9b:00:e3:02:dd:
1a:4b:09:ce:7a:10:c2:5c:2a:61:c6:68:27:bc:67:0f:08:e8:
44:ce:f4:e0:4f:a7:6c:1b:99:1e:78:dc:0e:5c:95:a4:76:42:
7d:38:97:48:09:e0:90:37:a3:6d:01:70:f7:cb:ae:99:54:95:
0f:4c:2a:fd:d7:10:ea:9f:ff:c3:51:f6:8e:34:02:9e:ec:d7:
13:30:2f:55:97:24:2f:47:bf:b6:79:61:6a:8f:aa:41:3a:a2:
df:3f:b2:50:dc:8b:dc:e0:8b:e4:c7:b9:75:6b:42:1a:82:5f:
cf:4c:d9:27:33:47:48:9d:20:22:ff:7b:dd:13:d6:95:52:68:
4e:5e:53:9c:1b:4b:25:61:14:3f:a8:71:05:f4:ea:cc:32:cb:
4d:78:ed:0a:b5:3f:70:02:6f:40:3b:cc:ca:74:b9:a3:b6:f2:
70:6b:95:99:76:8d:9f:12:ed:15:06:eb:38:9b:48:cb:34:1b:
d0:18:80:d5:c7:f5:bd:ce:ab:86:d1:6e:a4:3c:15:6e:21:09:
00:ea:bb:86:e3:cf:25:42:b7:97:c4:28:99:67:50:99:92:f2:
4b:42:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:33 2026 by rpki-client