
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft
File: MTDg-yrjCHHxtEx3xUL__P4dl0A.mft (raw, json)
Hash identifier: ZITSWo50TnTO0tX1H2LkzuYM8jbpBlum4FbAYSWvsSc=
Subject key identifier: 14:8B:CD:8B:4F:C8:61:88:08:E5:F0:53:E4:28:8A:D8:98:A1:A3:3A
Authority key identifier: 31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40
Certificate issuer: /CN=A91B8833/serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft
Manifest number: 27
Signing time: Tue 19 May 2026 08:39:44 +0000
Manifest this update: Tue 19 May 2026 08:39:43 +0000
Manifest next update: Tue 26 May 2026 08:39:43 +0000
Files and hashes: 1: MTDg-yrjCHHxtEx3xUL__P4dl0A.crl (hash: +lhxbzCCAMj/hDwYKBtiWa10uc3Bauy/smCk7G9Lc84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl
rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8833, serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740
Validity
Not Before: May 19 08:39:43 2026 GMT
Not After : May 26 08:39:43 2026 GMT
Subject: CN=6a0c21cf-dfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:d6:29:37:43:a9:51:3a:6a:39:c5:cf:2e:
49:ae:e5:12:25:08:88:7f:f2:8b:3e:4e:57:04:cc:
13:bb:c6:f8:d5:7f:53:39:62:f3:1a:1a:43:8b:bb:
49:3f:55:a1:0c:35:9d:47:59:51:c3:4a:f3:8d:57:
95:59:60:c4:58:c3:6c:c0:fa:80:74:5f:00:03:45:
be:3a:ce:a4:c5:d6:a4:d6:53:a7:cb:99:d3:43:38:
a4:58:30:ef:81:3e:3c:00:63:cd:99:03:2f:83:cb:
bb:26:8b:42:03:ce:10:f4:18:8c:4b:e7:2b:71:6c:
92:24:22:be:ca:fc:5d:b2:08:58:3e:cf:02:11:82:
c4:d1:d4:37:5b:2f:aa:18:b2:1f:9b:28:a1:f3:3f:
1b:34:53:1f:90:f7:f7:99:72:fa:bf:9a:68:33:94:
4f:25:76:91:fb:4a:88:fd:51:bc:fa:b2:9f:31:03:
36:65:49:13:81:a2:be:6b:10:db:a9:9b:cb:1f:79:
9d:33:97:ef:41:f7:86:1d:26:30:fc:29:35:d2:5e:
31:ef:35:1b:f4:97:fa:02:77:64:91:d6:13:06:4a:
7f:fc:9e:7a:d7:84:a2:8e:34:0b:df:8b:80:c4:67:
fb:a7:8b:2c:c0:c6:83:da:7b:d4:7c:c1:94:db:1c:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8B:CD:8B:4F:C8:61:88:08:E5:F0:53:E4:28:8A:D8:98:A1:A3:3A
X509v3 Authority Key Identifier:
keyid:31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:36:89:96:2a:52:dc:b4:31:e7:ee:0a:01:e4:9c:01:ac:9f:
27:91:6c:5f:59:a2:aa:54:36:02:3e:31:92:9a:fd:b3:60:0d:
c6:ba:4a:f5:cd:47:09:e6:93:c6:f5:7b:35:83:e7:ed:1c:3a:
57:09:6c:61:12:37:81:6e:4f:0d:39:77:a7:68:7a:64:aa:c2:
a1:cf:77:26:56:b4:9a:48:6f:b4:b7:32:67:4e:08:f2:b5:16:
5a:61:0e:13:c6:ea:e8:6e:ec:c9:09:5d:9f:f3:65:e1:39:52:
62:d7:5b:dd:bf:03:34:a8:4f:7d:c5:22:72:67:3f:e6:b7:2f:
49:5f:ee:b1:c0:32:ea:62:1f:70:8d:f5:d2:ad:50:31:76:67:
45:a7:f2:0c:4c:c9:84:8d:a6:98:e8:b4:8f:2c:7c:20:12:f8:
ab:60:6b:b0:68:2b:bd:8d:64:a3:26:45:ec:ae:fc:29:83:cb:
68:48:96:56:11:39:2a:fb:0f:11:1e:a9:34:e1:05:c4:1e:46:
d9:d2:dd:6f:27:67:2d:7c:1a:0a:d4:bd:d2:a2:e3:f8:e4:cb:
3e:45:45:12:b2:57:73:7c:0f:37:c9:57:ae:4b:96:fd:50:0d:
0d:20:97:7c:ab:e2:9f:cb:6b:4f:b1:0b:64:08:22:ec:18:ac:
90:c7:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:07 2026 by rpki-client