
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json)
Hash identifier: AfaZEfBVkmfNk3p4cpElr34tZzO7AKnWvIQfQ5BIJts=
Subject key identifier: 1E:9B:DB:0E:DA:33:8A:B2:A6:5D:B2:A4:4E:6C:FC:45:7E:78:4D:29
Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Certificate serial: 05E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
Manifest number: 05CB
Signing time: Wed 20 May 2026 23:08:47 +0000
Manifest this update: Wed 20 May 2026 23:08:47 +0000
Manifest next update: Wed 27 May 2026 23:08:47 +0000
Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: SXzVbN+hYDcFvpqRoVEUTn4ke/2dc8gRNTHDjCDYujw=)
2: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 9p+9k7Facd+Aj9FTPOqeaWhpizHbwTwIdBQJJ41NhYo=)
3: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: 2ung5ks0wrUO/hDRvjIHZLVeK77dP8EGbpcgDXcJSM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Validity
Not Before: May 20 23:08:47 2026 GMT
Not After : May 27 23:08:47 2026 GMT
Subject: CN=6a0e3eff-8751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:05:9f:08:29:0a:7e:d6:61:70:4d:41:75:cf:
d9:9d:39:3e:d6:5d:d2:39:f6:3e:1c:84:b7:cc:a5:
d1:fc:b7:41:9f:1f:4e:c8:08:68:f1:a8:07:3b:ec:
7f:2c:5c:b8:fb:52:54:08:29:22:01:aa:fc:56:a3:
51:a2:fa:f4:18:1b:21:50:c3:b4:39:4f:fc:51:0d:
0f:69:7e:ab:97:72:17:81:5c:30:ee:8e:b7:02:26:
95:b3:16:9b:4f:ca:1c:2c:54:ca:dd:b7:e1:27:67:
e9:bf:50:61:14:f5:9b:15:77:b1:ea:27:9d:1b:d3:
13:32:28:96:b4:82:0d:1d:55:e7:84:6f:75:85:1f:
11:60:bb:8d:47:d6:14:9b:b5:37:e2:43:7b:c3:1a:
06:28:1f:8e:3e:d3:ac:9f:d2:87:af:de:d3:cc:1a:
29:a2:a6:28:90:fd:4d:19:5f:71:d7:ad:e8:9c:a0:
43:21:d8:b7:0d:c6:43:92:5b:e5:bf:e3:73:ae:c3:
fb:0b:db:8d:62:3c:41:8d:21:58:42:36:83:84:8f:
d9:b4:0c:36:34:e8:b8:38:0b:c2:86:ec:42:b6:4c:
a4:db:2a:29:6b:60:0a:8f:fe:0f:52:24:2a:93:62:
86:fa:ce:fb:79:65:3b:3c:03:fc:95:2e:d8:dc:a0:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:DB:0E:DA:33:8A:B2:A6:5D:B2:A4:4E:6C:FC:45:7E:78:4D:29
X509v3 Authority Key Identifier:
keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:d2:48:27:8c:b7:d3:7e:62:29:d3:e3:17:29:00:5b:8f:c8:
05:b8:66:26:8d:14:7a:90:c9:a4:65:f6:e6:bc:72:2a:55:51:
e8:14:a3:7a:a7:64:68:fd:72:30:e0:9d:38:25:6d:6b:71:2d:
00:0c:68:d7:6d:5f:76:57:64:78:16:ce:fa:82:61:e9:5c:05:
2a:8d:db:e0:00:90:77:ed:30:77:13:30:34:06:65:65:3d:04:
1f:89:bc:52:81:45:5d:85:ec:31:37:71:77:c0:0d:65:52:46:
0a:e2:71:23:67:63:0d:4b:c2:9e:8a:f4:ed:e9:e5:37:a5:95:
71:ce:66:80:03:e4:58:fd:7f:19:22:93:dd:ec:5c:c9:ee:1c:
fe:5d:82:72:8c:1e:c4:0c:6e:10:f1:00:4e:bd:53:4e:86:eb:
95:8e:07:f1:08:99:23:77:18:13:3c:46:c7:53:80:7f:92:02:
f1:76:da:76:ca:97:15:25:66:66:9e:24:5f:51:7d:d9:83:91:
da:b1:f9:93:14:97:80:e1:a6:c0:f8:b1:d3:c4:47:a3:71:1b:
29:95:45:dd:4a:93:e7:43:d8:04:d8:8a:7f:a0:9b:36:57:d3:
09:f6:bd:1e:b2:e7:89:c8:cb:c8:02:5d:20:71:06:14:16:64:
ac:90:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:36 2026 by rpki-client