
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json)
Hash identifier: 63XrZB9bogL5gRdMcnkhvKDKMRfr9t0+iY5UTdj8oW8=
Subject key identifier: 0F:AA:50:66:D3:45:00:73:C9:5D:42:41:2F:3A:56:1F:06:C3:AD:A1
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial: 09C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
Manifest number: 1ABE
Signing time: Wed 20 May 2026 17:14:53 +0000
Manifest this update: Wed 20 May 2026 17:14:53 +0000
Manifest next update: Wed 27 May 2026 17:14:53 +0000
Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: yOfYk0i8SJmCaDhNdij2nji7APScbjDKrkuhIz7eHXg=)
2: 42BEF0C6965A11F089F1E151C4F9AE02.roa (hash: xbADL7cJr+2vRtqNmInV63ZP0c0h+KFlCiFFTFNf4Uk=)
3: 3B4BB0AAFF8111F0BED16FE95C6F56BC.roa (hash: 7tv/5D9HntchiRfctALMuiuXJj9zM35Uyt8wDbjn1wE=)
4: C3D424C4F4F611F0B230A1D14E6F56BC.roa (hash: eIWV2PVAmeguQkSyB8K0knff+OjMcoKXdZxZHafjh0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501 (0x9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Validity
Not Before: May 20 17:14:53 2026 GMT
Not After : May 27 17:14:53 2026 GMT
Subject: CN=6a0dec0d-6881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:fb:1d:61:af:2d:b6:ff:2b:ed:58:20:5c:
a1:f3:6b:f6:9c:44:c0:46:6f:31:21:1e:5d:42:16:
ea:0b:2a:52:65:b9:c3:a1:70:03:5a:0e:e9:50:64:
5e:56:5d:14:6f:3e:71:33:29:16:93:37:26:ef:d0:
ec:0a:70:7c:53:3c:46:2a:68:19:1d:42:87:4d:55:
08:85:14:bb:05:ac:71:28:79:db:cb:cf:2c:47:de:
9b:b8:d9:48:3b:97:cc:d2:99:b1:c9:96:c5:a0:ad:
e3:4f:20:e5:7f:ab:b9:2c:19:d3:c1:7f:51:90:b9:
f5:d5:5c:bb:41:10:12:aa:40:45:a1:36:d3:f5:13:
29:dd:2a:ed:44:58:26:c4:b0:cb:8a:4e:3b:90:11:
58:1d:07:ce:f4:2e:76:75:2f:63:47:06:c9:0f:1b:
1a:ac:ce:cc:87:92:3a:72:b3:84:05:d0:9d:b2:f1:
d0:7d:d3:98:35:80:2f:e2:eb:a1:cb:8a:3f:b2:8f:
55:79:e5:a9:7c:07:e9:4f:bb:de:68:f3:a3:5f:1f:
46:6c:19:d4:bd:41:50:df:12:0d:5b:10:52:9e:e0:
ff:65:d3:1d:47:00:a7:f3:51:e6:f2:65:80:bc:42:
89:b1:1b:64:12:3b:fd:87:50:6f:27:41:9a:0c:5a:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:50:66:D3:45:00:73:C9:5D:42:41:2F:3A:56:1F:06:C3:AD:A1
X509v3 Authority Key Identifier:
keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8d:d4:7a:86:47:0c:1d:de:28:8e:f5:d6:8e:bb:04:5f:be:
c7:68:7e:4c:c5:b3:d3:1a:2a:74:b2:bb:fc:71:73:10:7e:9e:
ca:3a:5f:aa:fa:3e:28:b6:96:01:5b:e2:a0:4c:66:1f:e5:03:
5d:c2:99:e6:8b:dd:5e:58:f1:ee:28:04:e7:e8:16:fa:51:40:
fb:3a:41:e0:15:0d:f5:fc:d3:73:23:ec:72:4e:77:19:63:35:
8e:3a:46:00:b2:52:c9:e1:d7:18:07:a4:18:37:0a:ac:00:e9:
79:7b:51:24:de:f4:ab:4a:23:e5:35:ba:6b:75:56:b6:77:a4:
18:9e:e0:6f:a7:cd:85:3e:f5:bf:47:8a:97:54:58:60:b2:fa:
d9:fa:a5:eb:62:08:22:a7:12:53:ca:60:b0:4e:cb:49:dd:63:
2b:e6:17:f5:2b:d6:e0:85:b0:0d:a0:01:71:2b:ce:fe:b2:4d:
cc:a0:02:32:1e:4e:f6:4b:a4:c4:cc:c8:4a:7f:17:09:06:37:
43:2a:ce:ee:2c:21:ae:af:9e:49:48:19:0d:dd:ff:be:dd:9a:
dd:ea:8d:0a:3f:92:97:fa:d2:3a:cc:07:28:b2:fa:3d:9f:bb:
cf:8e:1d:f5:19:05:a5:07:cd:de:3a:07:4c:63:22:e9:53:78:
d4:28:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 17:47:31 2026 by rpki-client