
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
File: suPG96kEVKInRzewUsujXxn11aA.mft (raw, json)
Hash identifier: 2w3En33HHthE2aa0kA55XMowC1m69D9AnTLFJFHg0cw=
Subject key identifier: 9A:78:B1:6B:AE:4C:53:9D:C8:7D:EE:F7:CA:4C:D2:87:AE:D8:91:AF
Authority key identifier: B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0
Certificate issuer: /CN=A91BFDE1/serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
Manifest number: 34
Signing time: Fri 05 Jun 2026 09:05:02 +0000
Manifest this update: Fri 05 Jun 2026 09:05:02 +0000
Manifest next update: Fri 12 Jun 2026 09:05:02 +0000
Files and hashes: 1: suPG96kEVKInRzewUsujXxn11aA.crl (hash: J3Eva858PGPYWyr5mhQt9XNhJG70o4uhHBZBFIwHo1k=)
2: 000FAEF0187D11F19A5CAFE7383D8C67.roa (hash: segqNYyes6EIoWSsGy8Pu8WgYVh2x3RfT/RKs6A99TE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl
rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 09:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFDE1, serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0
Validity
Not Before: Jun 5 09:05:02 2026 GMT
Not After : Jun 12 09:05:02 2026 GMT
Subject: CN=6a22913e-3b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:cb:44:ca:be:2b:79:26:07:5f:51:e3:be:
ee:77:a4:ec:6f:04:87:79:24:52:9d:de:93:69:19:
f3:a5:cb:42:fd:cf:ef:b2:91:b7:6b:ef:0b:43:c8:
fc:9e:39:8d:a2:be:bf:bb:98:0b:39:69:fb:3f:67:
7e:0b:0b:8c:13:c4:7e:bf:ce:49:7b:8c:9f:9e:42:
7d:a5:42:d7:e7:86:9b:fb:83:77:c1:48:4b:e4:18:
00:3c:f1:11:3b:02:17:4a:c2:8c:2a:6c:31:30:ad:
af:03:8a:33:22:e2:be:d1:0d:ec:d3:ba:3b:4e:e9:
1e:29:ed:34:b1:60:f2:68:64:f9:c0:61:95:eb:cc:
58:19:00:80:de:17:b3:51:72:ad:2c:0a:f1:fd:d7:
fa:af:66:7b:e5:8a:18:32:90:83:c6:73:ad:65:64:
3c:57:8b:7d:71:e5:23:e3:d2:a1:4c:4b:79:42:9b:
b1:60:42:4a:d5:36:84:d7:7c:bb:7e:f8:be:d6:97:
9a:01:f8:f2:3b:8f:50:d8:38:11:b3:64:b4:4c:fb:
5a:c3:e3:35:0c:9d:b7:c3:14:6b:b3:46:1b:19:b7:
58:3c:c6:53:58:82:1d:f3:6d:14:c5:76:67:22:fa:
3a:36:b8:6e:e0:df:c5:13:11:4e:bb:c4:0c:23:5d:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:78:B1:6B:AE:4C:53:9D:C8:7D:EE:F7:CA:4C:D2:87:AE:D8:91:AF
X509v3 Authority Key Identifier:
keyid:B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4a:96:b1:c7:f9:02:b1:1a:4c:38:22:25:52:c7:d6:a3:70:
3e:6c:cf:e4:bf:96:7c:e1:8c:0b:7c:17:6c:61:f9:45:9d:48:
42:c3:38:2c:da:03:c6:95:f3:50:df:44:9c:84:78:3d:6c:62:
09:32:e9:30:9e:04:d3:4d:6c:d7:93:52:1b:3d:d2:0b:78:ce:
79:eb:0f:c4:21:91:08:a5:59:e3:40:3e:e3:1f:22:cc:fb:d3:
22:5a:df:e9:9a:3a:3c:a7:c5:5b:81:50:4b:bd:a3:62:68:82:
9a:de:a9:66:65:95:34:6f:d5:19:9b:f5:ab:18:48:1a:b5:11:
56:11:0e:d1:ed:ab:b6:ab:48:f5:c0:af:6d:5c:24:81:53:bc:
dd:1c:9c:68:32:a4:7d:38:47:59:ad:57:7b:49:e2:b4:31:52:
b1:6e:9b:91:f0:34:40:9c:17:e0:aa:b0:ce:df:e1:f2:75:b6:
c9:d5:08:22:42:ed:9d:bc:1b:f4:fd:42:4e:f2:c0:2c:e0:9a:
35:fc:a4:7f:ac:b4:68:1f:90:31:74:e4:90:e1:cf:43:7c:36:
32:67:17:cd:98:b6:a7:3a:9b:c6:03:58:ad:e8:ef:79:92:2c:
15:c7:70:79:bb:66:30:db:ef:ad:68:f0:42:a8:a1:60:f9:2b:
14:3d:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:11:39 2026 by rpki-client