
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
File: RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json)
Hash identifier: X0sZ0+k/Rs+capQs7yEqhIxVK26SV8KnQxdc+UgRGKc=
Subject key identifier: AB:20:78:A6:0A:86:08:96:AA:A9:76:A7:C6:60:43:FB:D9:42:5A:E2
Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
Certificate issuer: /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
Certificate serial: 0CCF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
Manifest number: 0CCE
Signing time: Wed 20 May 2026 18:24:58 +0000
Manifest this update: Wed 20 May 2026 18:24:57 +0000
Manifest next update: Wed 27 May 2026 18:24:57 +0000
Files and hashes: 1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: zAcpJjID/t6tpn+ZYN63nOpQfC4mltfN1UfrAa+BMZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl
rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3279 (0xccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC4F3, serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
Validity
Not Before: May 20 18:24:57 2026 GMT
Not After : May 27 18:24:57 2026 GMT
Subject: CN=6a0dfc7a-fa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:23:91:65:a0:1b:a0:a0:a3:38:93:b5:b2:
05:68:82:46:13:c6:64:eb:84:38:ba:92:35:43:5e:
db:fe:0e:56:72:68:65:4c:2b:ce:e1:ea:c6:65:a4:
0e:5a:4c:2a:a3:4e:d6:e9:d9:8a:9c:eb:5b:c8:01:
af:cb:9b:4e:c4:ec:7c:71:47:cb:e7:f1:90:79:2a:
3b:c4:52:e7:2d:64:be:37:df:74:5c:5e:32:1b:d8:
25:a3:10:55:41:3c:c1:c6:aa:62:1f:10:32:31:15:
89:a5:8f:bc:5d:60:9d:f6:9c:b6:de:8a:41:82:4b:
fd:59:d5:60:1c:bf:76:dd:bc:2c:e2:ae:71:a7:0b:
cf:c3:45:3e:63:75:57:3e:0d:8d:2a:19:a4:bc:24:
0e:70:7c:9f:87:26:17:1e:7c:e3:a1:8c:44:e7:46:
b0:39:ce:6b:6d:2d:d2:94:57:77:e8:f0:71:b4:a4:
e2:a3:f9:8f:09:13:e0:59:42:f8:99:12:6f:8a:e0:
61:c2:5f:56:91:8a:d2:03:43:77:e4:03:76:b6:7c:
5e:17:f3:bd:02:76:d9:c7:95:a1:64:73:3a:ec:5e:
0f:6c:a9:ef:ca:c8:78:d6:4c:70:ce:1c:2c:7c:47:
db:cd:51:29:d6:7c:79:9a:25:fe:55:1e:29:d4:22:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:78:A6:0A:86:08:96:AA:A9:76:A7:C6:60:43:FB:D9:42:5A:E2
X509v3 Authority Key Identifier:
keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:75:ae:a5:20:1b:6d:d2:74:cc:8d:e6:64:4a:d4:9f:82:56:
c9:82:58:9d:e5:9c:cc:22:9b:e4:3c:60:07:4b:67:fd:f0:23:
d7:cb:ad:24:ec:7a:04:46:9b:00:76:5f:32:95:01:93:6d:5a:
a8:88:ba:15:3a:4e:2d:fc:9a:93:5b:52:f4:9b:c2:b3:1a:e7:
55:b5:78:e3:12:22:a9:10:88:e4:47:4f:a4:de:a8:e5:a4:91:
45:3f:5c:84:95:1b:87:7b:d9:e4:0b:b9:e4:34:d7:8b:5f:2f:
f2:10:37:7c:7d:39:4b:22:8c:4d:c4:3a:dc:68:f7:80:92:ea:
15:3e:54:31:84:f3:d4:44:47:c2:f0:fb:36:80:ea:ff:bb:15:
20:5e:04:a6:dc:ca:29:d6:9c:5c:f6:92:ad:13:0d:5c:3d:21:
32:c9:96:3e:e6:7b:08:c1:57:18:a0:79:54:c8:94:68:65:6b:
ce:08:c9:77:f1:01:3d:54:e9:23:8c:b9:4d:2f:1d:8c:8b:27:
d2:e6:38:6d:51:5f:3b:38:0e:1a:cd:84:79:f2:f2:e0:80:2e:
1e:6e:8f:dd:66:dd:3f:45:29:d9:9b:5e:d1:e0:f3:d1:b7:7f:
1a:cb:43:48:c8:05:66:7d:5e:0d:79:2a:1b:09:60:a2:3d:85:
9e:4a:7e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:12 2026 by rpki-client