
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
File: kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json)
Hash identifier: nvtqts+mh8caIcN7oi6QfCKA6FH5b/nf0bDg3jvU26E=
Subject key identifier: 6D:F7:7F:6D:5F:74:11:3C:2C:91:34:47:B8:DA:B2:8C:E9:02:C8:03
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Certificate issuer: /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial: 1953
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
Manifest number: 1914
Signing time: Wed 20 May 2026 16:27:02 +0000
Manifest this update: Wed 20 May 2026 16:27:02 +0000
Manifest next update: Wed 27 May 2026 16:27:02 +0000
Files and hashes: 1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: xhJBeIr7j25z5LVwu52w+aYKds14sK3sh3vNEJviO1E=)
2: FCDF983C4B7411F19F4B0F3BB6833773.roa (hash: 6PczisSqxXOoG4GpKjkiVPbqFf7Z32JMD/yyHEXImvA=)
3: 6C409F0C90D411F09617F260C4F9AE02.roa (hash: EVQn/KNomyKNTdeIsk8hWARt5eleL1I0XO8r52dM3Kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6483 (0x1953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Validity
Not Before: May 20 16:27:02 2026 GMT
Not After : May 27 16:27:02 2026 GMT
Subject: CN=6a0de0d6-862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:c8:f5:c8:50:b3:44:22:76:7e:b5:4d:8f:
02:c3:94:61:b7:6c:ce:47:ea:d8:0a:a4:3c:1b:bb:
f3:24:87:72:c3:f1:b0:12:9e:99:a9:74:bb:89:16:
5f:a7:86:1a:05:5e:0b:06:e9:fb:c4:44:ea:b0:52:
9e:f9:86:49:58:38:21:37:fb:97:34:00:d8:f9:26:
2b:f6:0c:46:ad:17:b6:4a:e7:1d:b4:a6:36:39:5f:
2f:be:2c:7c:e7:14:74:65:8e:f0:07:45:be:a9:14:
08:cf:7a:d8:e4:6c:eb:85:b2:34:38:59:d1:8a:b8:
72:b6:e4:59:ff:04:0c:cb:f3:f6:9e:35:81:f3:27:
d5:6b:65:2d:8a:0f:52:86:47:04:5c:0c:a0:f2:db:
ac:a3:5b:62:2f:44:2d:0d:48:c3:01:d9:e3:f9:9b:
19:45:86:11:b6:7c:b3:e7:c2:a9:1d:36:d5:d9:be:
66:ab:49:b7:0d:a7:06:78:92:e0:b8:eb:76:2c:7d:
08:b9:03:c4:6e:7b:14:14:a8:be:21:bc:8c:1e:66:
67:88:7d:75:9d:99:21:8e:61:5a:62:4d:6d:be:7a:
43:de:db:37:74:90:e5:09:0d:5e:da:6c:63:aa:51:
a8:73:d7:a7:67:ce:1b:75:72:5b:3d:5f:59:cc:5b:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F7:7F:6D:5F:74:11:3C:2C:91:34:47:B8:DA:B2:8C:E9:02:C8:03
X509v3 Authority Key Identifier:
keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:13:56:4a:ef:8e:a3:01:a1:30:c6:b8:2e:83:cf:d1:7f:d6:
a1:30:95:a4:04:d2:6d:1d:d0:8a:a2:14:ab:db:cd:f2:89:ee:
95:d0:c5:4c:c0:b6:54:e2:0b:b7:5b:40:ef:52:5d:1e:f4:89:
80:f8:d5:03:bd:d9:f9:c7:ae:d0:ba:7a:55:ca:0a:66:20:92:
43:c4:f0:fd:76:7a:7d:1e:b2:ea:0c:22:68:f5:57:36:f9:07:
53:aa:7e:70:bd:45:f0:39:be:33:2d:53:b4:31:09:20:ae:a9:
f1:6b:d2:3c:b8:47:77:2a:68:ff:5b:45:71:1c:51:72:9c:71:
83:37:0b:81:80:ab:65:1b:8c:4d:09:d4:f0:f7:87:90:6d:67:
6d:96:ed:59:af:ec:44:88:c4:6a:88:d7:db:25:6c:e6:25:dd:
50:bf:db:f4:58:8d:15:8a:d9:09:ed:d6:55:28:73:bb:38:21:
be:0c:2c:ad:77:17:1e:1c:19:eb:64:62:9d:5e:e9:c0:49:3b:
79:63:ec:89:7f:09:cf:c1:dc:0a:98:39:4a:52:23:d3:ee:6f:
4e:55:02:3d:c4:5d:02:45:22:2b:8a:84:0f:4c:7c:46:09:63:
9e:8b:5b:36:61:b1:21:be:6e:71:e7:c0:56:c1:27:e0:7a:8c:
5e:c4:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:24 2026 by rpki-client