
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json)
Hash identifier: GF5dxSAn5lJwVikoCxyKVkHBJxVd26DIVmwgYOTtXu4=
Subject key identifier: CB:24:0F:DF:EE:02:11:16:28:A9:4F:39:58:FF:5B:98:27:50:17:6E
Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
Manifest number: BE
Signing time: Thu 21 May 2026 07:00:30 +0000
Manifest this update: Thu 21 May 2026 07:00:29 +0000
Manifest next update: Thu 28 May 2026 07:00:29 +0000
Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: Pmn0qMGbE1CLfm2SLP1tlLqooJWg5OuoPdpTcGA3bUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Validity
Not Before: May 21 07:00:29 2026 GMT
Not After : May 28 07:00:29 2026 GMT
Subject: CN=6a0ead8e-ae2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:59:27:b6:77:b5:d1:17:c0:06:39:79:ef:
b4:1f:f1:81:d5:85:22:ad:ee:94:8a:c2:f8:6d:17:
61:80:d5:e1:89:13:d4:bf:57:02:1b:a6:0d:98:8f:
b2:6d:ad:af:2f:52:3a:c4:95:8a:34:57:38:16:62:
35:c7:fa:11:82:7e:b8:d0:7d:58:60:87:ca:a6:08:
44:1d:76:a4:83:f9:82:71:6b:03:0e:67:6d:ad:6a:
ca:91:49:3d:c1:ab:cb:87:c4:e1:69:d9:6a:f8:f2:
8c:3d:51:07:86:d8:db:29:77:5f:fe:94:9b:f2:8e:
88:3d:86:b3:9d:63:d1:6a:d0:1e:ad:ca:79:eb:68:
86:d7:ef:06:50:3a:87:85:a7:e1:7a:49:6b:e9:52:
15:be:82:dc:e3:06:a4:1d:91:13:b5:c7:b7:ef:ea:
dd:5d:7e:7d:72:7e:5e:17:99:21:ac:02:4b:22:d9:
68:45:06:2b:da:f9:5b:da:5c:f7:4c:88:f9:63:00:
0f:1d:08:a5:70:8d:6e:ae:37:28:da:06:8a:d5:c0:
85:37:d9:5c:47:d6:31:36:20:33:b2:89:9f:2d:fc:
b5:0e:31:35:7d:a1:f3:ab:6b:9a:f6:e9:50:5b:7a:
c5:de:15:d1:c2:0c:0f:39:0e:50:75:18:cc:af:10:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:0F:DF:EE:02:11:16:28:A9:4F:39:58:FF:5B:98:27:50:17:6E
X509v3 Authority Key Identifier:
keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:f5:e3:a9:ac:4c:6a:8e:23:33:bd:02:64:17:96:23:37:f4:
57:5a:f5:a9:92:2d:d3:37:eb:52:ff:15:94:c2:d9:3b:37:a2:
10:03:56:1f:23:de:b7:c9:9d:5c:8a:7e:f1:7c:2f:76:d9:c2:
f1:c9:26:3d:a0:c7:64:79:8a:8d:71:b5:67:15:20:b1:15:0d:
fa:d6:13:31:09:02:44:42:c9:3e:25:da:99:29:2e:92:8c:6c:
77:e1:6e:60:42:70:b8:b2:91:ce:f5:22:77:c5:52:bb:d6:a7:
92:93:61:50:27:a1:9d:7f:46:a9:94:87:0c:ba:fd:c9:ac:3b:
44:cc:b9:75:b1:0f:cd:10:f1:b8:75:0a:8d:4d:87:b8:0f:58:
32:d5:7c:e6:f8:cc:ff:2a:5b:25:fa:bb:99:05:9c:2a:f6:90:
b1:f1:02:68:68:7d:b9:28:b9:77:24:ac:8c:98:93:03:13:5e:
3d:ea:6d:ff:5b:aa:7d:04:b9:8d:2c:8b:37:6f:5c:b5:83:04:
6d:19:c5:04:0b:7b:62:bb:23:f6:c1:7f:a6:e1:61:e0:a4:4d:
19:6a:4f:68:37:cc:a2:03:e2:f5:a4:59:d4:56:ed:21:28:37:
44:46:bc:a0:90:42:20:98:98:71:1f:1a:76:e8:76:ad:b7:99:
0f:5b:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:06 2026 by rpki-client