
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json)
Hash identifier: AGTP8T85CSGXdZh58RV2dxVlY4MPXjYTb6wgnQWVnrg=
Subject key identifier: 2D:45:56:27:15:17:91:5D:52:EE:B5:B7:87:FE:D2:8C:5A:00:AF:7B
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
Manifest number: 0151
Signing time: Mon 01 Jun 2026 05:53:32 +0000
Manifest this update: Mon 01 Jun 2026 05:53:32 +0000
Manifest next update: Mon 08 Jun 2026 05:53:32 +0000
Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: gVhmF6nSbrAsvqaxq9YZrkKKQsfDVX0rx/vuAAzzSIY=)
2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: 99UGo5KWvnN+gHhR9yWsZo5dAMlhKMO/SbxWG6qrgCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Validity
Not Before: Jun 1 05:53:32 2026 GMT
Not After : Jun 8 05:53:32 2026 GMT
Subject: CN=6a1d1e5c-b9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:73:f4:68:b8:61:27:78:36:64:94:99:5a:
26:90:20:d2:74:fc:d7:98:bd:a2:fb:b5:1c:e0:32:
db:09:88:9a:7d:c7:eb:0e:62:3a:96:61:96:79:5c:
79:dd:ee:94:87:68:ab:d4:f5:c8:fa:d0:dd:2b:9a:
76:5b:93:e2:34:d1:73:f1:54:76:33:34:2c:43:97:
97:c1:cb:b5:9f:27:bb:86:b2:01:32:03:dc:67:b6:
2d:12:3e:92:ae:53:de:78:77:4a:3a:50:c6:79:fa:
eb:dd:18:40:40:8f:66:c2:d5:b4:bc:96:30:58:5e:
c9:bd:c2:35:1a:94:92:14:0c:63:de:dd:ef:06:f0:
e8:26:6d:cc:63:74:12:44:d2:c2:96:bb:b3:dd:be:
10:0c:f3:a1:3d:4d:51:8d:0b:be:4c:a7:79:b1:c7:
6b:37:95:2b:11:77:0c:81:8b:c8:31:bf:e3:ce:46:
32:6c:0f:71:87:26:32:6c:61:c4:a5:20:ec:90:96:
1d:99:d3:e6:0f:d5:a6:df:a5:7e:52:c1:66:a0:a9:
29:55:16:75:c8:08:3d:20:13:e8:1b:e9:d8:c2:7e:
00:59:6f:20:7d:5c:9d:ef:ed:aa:02:6a:a0:2d:8a:
db:2e:13:94:be:c9:b5:3e:db:44:20:b3:1e:d4:70:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:56:27:15:17:91:5D:52:EE:B5:B7:87:FE:D2:8C:5A:00:AF:7B
X509v3 Authority Key Identifier:
keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:15:b9:94:3b:29:fc:f9:a1:33:0d:9f:9d:da:fe:04:3b:1c:
d3:e7:a4:4a:8e:77:45:75:15:62:62:48:d9:4a:9e:9d:52:06:
4d:80:c4:a2:04:cf:83:07:0e:7c:c2:44:f1:ab:56:88:d4:58:
46:81:10:f1:b5:f6:42:90:15:2f:92:a7:ab:c0:7b:80:26:e3:
b7:f8:1a:52:6a:b8:37:6e:74:73:e1:9f:a7:f6:21:b1:4f:54:
f4:b6:38:11:ae:16:a5:e1:76:95:3c:f8:f6:a1:cf:f7:71:01:
ac:fd:20:62:18:f3:3b:16:59:ab:b4:7b:33:c8:d8:6c:67:18:
ce:de:6f:5a:76:a4:3b:62:3f:e2:81:18:51:0f:c2:31:2e:7a:
a7:91:26:f3:08:3e:35:94:b3:fe:9e:be:8a:2f:dc:dd:33:f9:
e8:bc:e2:f1:5b:7d:44:b6:11:79:e0:97:f2:fc:c2:7d:e3:9c:
73:0f:a4:9b:60:89:b7:a1:62:d0:67:99:82:2a:e5:75:cf:33:
4b:ac:a9:cf:b2:ba:12:1c:7c:93:c0:ec:75:65:28:dd:d9:7f:
1b:1a:2f:45:9c:a6:a6:a9:ef:84:fe:0e:0b:f3:e2:04:41:3b:
c3:2b:0d:3e:88:f6:7d:0b:0b:ca:f4:8d:d4:fa:46:3a:3a:87:
8d:61:9a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:42 2026 by rpki-client