
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
File: Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json)
Hash identifier: UxIpFV/1KYwS3hQEbm1wUF8H+0JHggLm3TPvfYxUoXQ=
Subject key identifier: 46:EE:19:96:0F:B5:39:63:31:4F:12:BC:47:7D:B3:3F:5B:FF:A2:89
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Certificate issuer: /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial: 0347
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
Manifest number: 0340
Signing time: Thu 21 May 2026 01:06:13 +0000
Manifest this update: Thu 21 May 2026 01:06:13 +0000
Manifest next update: Thu 28 May 2026 01:06:13 +0000
Files and hashes: 1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: Ni3wHN8kZRtsEnUD9N01voCt8w95NdCnVX6/bd7TxSA=)
2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: q+aeOJgllUvaXxmahDweOCiCHQM4aB3x3nz/0WBTZiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 839 (0x347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
Validity
Not Before: May 21 01:06:13 2026 GMT
Not After : May 28 01:06:13 2026 GMT
Subject: CN=6a0e5a85-7db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:c7:be:1c:b1:17:61:14:67:8c:55:16:e4:
f1:a4:bc:20:e6:55:e6:9d:a8:f6:e3:e0:84:46:2a:
92:17:d6:3f:39:b8:9e:94:a2:b9:8e:07:84:4c:86:
8d:a1:80:d2:60:8b:2f:3f:04:bf:d8:e1:12:b5:2c:
a6:d5:35:75:b3:2b:72:00:cb:01:4f:04:93:78:d6:
b0:35:a3:3d:4f:c3:e9:fa:0a:b6:0b:2b:b6:e5:de:
d2:7f:2e:17:8a:aa:ae:90:73:2a:45:a9:f0:65:5c:
9f:08:08:9b:2b:16:c9:d9:4a:45:43:18:21:e2:c4:
7e:8b:38:dc:a4:d5:23:6b:a7:75:bb:51:c4:9b:a3:
50:ec:60:3e:7d:4c:73:af:cc:7b:7f:8b:fe:3e:2e:
89:e0:88:b9:83:bb:bb:29:51:4a:a7:62:1b:e9:51:
a6:e4:7e:df:18:a0:cb:f7:c8:71:14:b7:5a:0f:49:
f1:25:ef:93:dc:3a:e0:f4:90:30:d0:36:59:8e:d2:
57:19:69:d4:61:b2:cb:5e:71:9d:0e:78:79:77:b0:
01:5b:bf:cd:d1:47:f6:5e:0f:17:df:dd:83:6a:08:
3c:4d:36:13:af:a2:9d:e2:c8:43:9a:03:90:61:b0:
ac:4e:6e:29:c6:1f:29:79:2b:8f:ea:9b:66:5c:4b:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EE:19:96:0F:B5:39:63:31:4F:12:BC:47:7D:B3:3F:5B:FF:A2:89
X509v3 Authority Key Identifier:
keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:68:cc:34:dd:eb:67:44:bb:f8:db:a8:e3:d5:40:e1:db:d0:
bd:81:1c:76:6e:bd:ea:90:f7:2c:3b:fc:bb:8f:bc:f9:eb:35:
27:f3:fa:ed:ce:02:36:76:87:99:75:0f:a2:08:f3:5e:af:57:
20:55:fe:e2:1e:79:b8:5c:cc:6f:82:11:89:d5:e0:6a:2f:49:
07:e8:79:78:08:c7:8e:db:0d:fe:77:4f:76:b8:5e:eb:2a:01:
b8:ae:06:77:36:80:49:6d:0d:4a:eb:a4:68:60:0e:80:c6:de:
8c:f4:65:80:35:08:29:45:0e:e7:c1:19:d1:ba:28:5a:91:06:
46:06:41:75:54:5d:66:97:66:32:f7:2b:cf:f6:e2:16:cd:0a:
38:e9:23:52:da:50:f8:ea:51:b8:af:e0:60:cc:7d:3d:04:ff:
8a:fe:48:26:34:43:84:bf:c3:b2:7a:76:29:f3:10:4b:66:5c:
f7:47:f4:be:cb:03:c9:12:bc:9f:6a:21:dc:57:32:45:ee:63:
59:21:b1:02:2d:80:45:1c:c5:4f:fb:64:d3:35:3c:43:59:89:
70:7c:c2:d7:55:06:76:a8:12:f6:8d:1b:d1:21:11:39:63:51:
6e:73:0f:d5:b4:2f:22:48:db:ab:a3:a8:fb:83:b2:b3:cb:4f:
bb:4f:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:37:45 2026 by rpki-client