
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json)
Hash identifier: e9XxnmonBAPkmsASUnd1v8sVtveJETGwFf/SQvt98qc=
Subject key identifier: D4:BF:8E:22:A6:C0:09:F1:D0:23:A4:78:37:4C:F2:8A:39:13:CD:E7
Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Certificate serial: 0330
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
Manifest number: 0327
Signing time: Thu 21 May 2026 01:13:52 +0000
Manifest this update: Thu 21 May 2026 01:13:52 +0000
Manifest next update: Thu 28 May 2026 01:13:52 +0000
Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: r8oj/JyVZ8/afZrAsq6EVD5ZMCazCy9kR3g9xhuQQT4=)
2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: 9Ep6t3AG8CiRPlIf3Yv4Y03998NV9+HGAvq1KC0HiaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816 (0x330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23
Validity
Not Before: May 21 01:13:52 2026 GMT
Not After : May 28 01:13:52 2026 GMT
Subject: CN=6a0e5c50-8bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b8:22:02:8e:3e:69:5e:ec:0b:c1:c6:78:e9:
04:34:6f:83:21:1c:e5:ed:c9:67:82:a1:61:80:a5:
7a:5b:65:ac:f1:86:9f:be:ff:83:0c:51:58:68:a0:
bc:7e:6c:99:65:08:59:b8:9b:cb:19:39:eb:bb:11:
36:9d:d6:76:c1:00:79:4e:c2:93:d8:63:53:17:fe:
8f:ac:6e:e9:9c:8d:9d:0d:61:ed:fc:0c:97:a0:12:
e9:de:93:c1:3e:87:55:7f:e7:92:8c:96:05:47:7c:
9b:63:6b:3b:d0:c5:54:ed:77:d5:28:9b:80:4b:f4:
04:e0:a5:1e:75:34:68:df:c1:6a:b7:47:0a:07:0c:
a3:ae:de:27:b1:52:3c:0d:54:29:17:23:c2:ed:63:
52:6d:83:51:47:ca:12:65:ca:42:9c:c2:87:53:fc:
7b:34:53:89:a4:7f:23:6a:f5:9b:2c:ac:b6:8f:8d:
5c:da:5f:fc:76:1b:ec:e2:a4:51:3b:2a:96:ce:76:
05:4c:e2:68:cc:88:80:5a:33:46:5b:5a:bf:c9:e4:
e9:87:18:bd:0e:65:df:20:35:46:d0:19:64:b0:19:
1e:49:b0:08:a3:39:20:fb:ab:ee:b4:bd:4d:47:4a:
11:7c:f6:57:66:52:de:7b:3a:78:7d:28:1d:df:fa:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:8E:22:A6:C0:09:F1:D0:23:A4:78:37:4C:F2:8A:39:13:CD:E7
X509v3 Authority Key Identifier:
keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a8:5f:63:dd:5d:02:a2:f3:67:c7:78:6d:c2:9e:fe:8c:27:
9d:78:93:e0:e5:d1:5b:21:61:a7:54:e7:f5:65:47:0a:a5:59:
3f:19:37:a3:ee:73:f3:25:fd:7b:73:3f:67:f6:44:84:91:cb:
3c:0e:5f:92:12:18:eb:74:06:bd:16:25:11:c2:ac:25:5e:eb:
bb:70:b5:7a:89:76:7c:ee:38:fc:99:4a:de:bb:b6:df:9a:62:
49:9d:5d:5d:af:bd:c8:84:30:4e:5b:18:6b:ca:34:4f:04:91:
2a:a0:53:f3:b3:68:6e:c8:37:be:e3:a7:28:9f:e4:14:b6:2b:
3f:ea:9e:61:2d:6c:15:2d:e3:03:e4:67:a4:5c:98:bb:18:a5:
ef:c4:f7:dd:c6:4d:df:c3:c7:0f:11:7d:20:06:69:74:e3:1e:
a2:b3:c2:b3:46:76:a8:a1:55:3b:6a:06:05:df:86:db:db:77:
6b:af:b2:f7:62:2e:5f:cd:ab:d8:20:ed:e3:05:e5:17:59:7d:
0e:d6:07:ab:16:a4:eb:f6:8c:5d:2a:ec:7b:32:c6:22:d6:da:
13:8e:96:cf:db:98:f1:ad:11:e5:2c:a1:5c:2b:d0:33:69:97:
b9:16:17:eb:3b:88:7d:c3:83:de:1d:95:49:dd:df:a2:c6:b9:
ba:77:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:10 2026 by rpki-client