
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft
File: 9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft (raw, json)
Hash identifier: GJ/9IjvZjP9IKrEGkRtUt3O/5+e/vzzDxULDfiy2aBQ=
Subject key identifier: 64:34:FF:F0:44:70:56:FF:2A:8F:7B:FD:C7:45:52:1B:3D:0B:3A:A4
Authority key identifier: F5:5B:6C:27:99:8A:05:C5:F7:1B:3D:CA:90:8C:71:08:BC:CF:0B:71
Certificate issuer: /CN=A91B3F7E/serialNumber=F55B6C27998A05C5F71B3DCA908C7108BCCF0B71
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft
Manifest number: 15
Signing time: Tue 19 May 2026 08:52:58 +0000
Manifest this update: Tue 19 May 2026 08:52:57 +0000
Manifest next update: Tue 26 May 2026 08:52:57 +0000
Files and hashes: 1: 9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.crl (hash: PavXuspYfaM1d2bRjTHqXtEgpLUPX1MSNuqjTmFdfuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.crl
rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3F7E, serialNumber=F55B6C27998A05C5F71B3DCA908C7108BCCF0B71
Validity
Not Before: May 19 08:52:57 2026 GMT
Not After : May 26 08:52:57 2026 GMT
Subject: CN=6a0c24e9-b199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:5c:bf:dc:2c:e9:70:28:08:4c:2b:56:d3:
46:83:9c:32:2f:18:31:86:d6:a8:0f:c1:9e:ed:48:
63:9c:79:9c:fb:6d:9d:22:5a:00:88:66:b7:42:e8:
7f:a2:4b:7f:e7:4e:30:81:2c:72:f3:4f:76:e1:07:
63:77:1a:cd:b0:59:a0:95:2d:ee:f7:79:22:ab:ea:
83:67:9a:3c:6a:5e:e6:14:6b:ae:f4:91:6e:d2:37:
43:38:f6:02:26:61:c3:9b:25:ac:68:39:99:e3:2d:
ee:97:4e:b7:3c:f1:0e:03:dc:03:5d:6e:c8:bd:1a:
18:b5:bd:2f:d1:9c:4e:65:53:2f:5b:c4:27:30:c8:
36:55:f4:10:e6:0f:26:e3:e0:88:6f:f2:c9:6d:55:
50:6b:11:36:fc:8f:d3:c9:0e:9a:f4:98:d0:ca:5b:
ce:9e:11:f8:14:93:bc:9b:c5:8a:41:f5:75:65:70:
f9:a1:90:5a:03:79:13:3e:d1:b9:f3:75:bf:92:75:
c4:ce:90:e3:e9:67:53:c4:b4:42:16:b6:0e:74:3c:
cc:26:d7:fe:89:77:8b:e4:66:d9:a3:0c:b1:f5:01:
89:cd:8a:ea:ee:18:2d:49:10:74:50:02:ce:56:ca:
af:88:93:1b:bd:65:81:ed:8e:6d:57:47:ca:4b:ae:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:34:FF:F0:44:70:56:FF:2A:8F:7B:FD:C7:45:52:1B:3D:0B:3A:A4
X509v3 Authority Key Identifier:
keyid:F5:5B:6C:27:99:8A:05:C5:F7:1B:3D:CA:90:8C:71:08:BC:CF:0B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/3E750CFC366011F1B0D30A16CA833773/9VtsJ5mKBcX3Gz3KkIxxCLzPC3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:08:2a:34:51:2c:d4:c7:b5:51:4c:71:ae:9b:b4:b4:4c:73:
64:4d:22:e8:be:df:55:c1:ab:ab:99:8e:3a:0c:f9:d5:68:d7:
f4:b9:a4:69:37:34:b2:6c:b2:50:bd:a1:0e:f7:99:24:07:96:
40:1d:ea:f8:f2:58:1a:7c:69:08:42:bf:62:a3:ea:96:57:e2:
8d:19:39:09:22:68:27:00:af:5d:08:02:d4:3f:80:19:be:6e:
c9:a9:88:40:48:b1:d1:20:88:06:cd:8b:69:f1:6a:d1:3a:82:
2b:12:1c:b4:ee:0f:9a:80:0c:6a:cc:92:ff:29:7b:ae:54:dd:
ca:52:51:89:8d:88:3e:7f:d0:6f:b3:dc:8b:c1:44:55:0b:b4:
0c:49:e1:44:b7:6a:a4:24:92:0a:26:99:c0:18:8a:70:02:40:
6c:5d:ae:1a:f4:09:ca:66:e2:1c:60:d4:65:4b:85:da:81:1a:
ee:e2:c7:99:65:41:18:67:69:17:d3:06:12:3f:33:a0:2b:e6:
a7:76:15:1a:4e:af:0c:7a:d8:07:a3:3f:1e:3c:91:79:41:b3:
f7:ee:50:cd:dc:6b:5b:69:7c:36:e8:bb:89:af:d0:b8:61:fd:
03:16:8c:70:56:db:f0:dc:1a:9d:41:50:f3:ee:3a:ba:7c:06:
84:2a:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:25 2026 by rpki-client