
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
File: Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft (raw, json)
Hash identifier: lgS25W/huBwsqSXYU70v6GOET3DLYZiI3fVEo7vm90s=
Subject key identifier: 26:18:21:47:04:91:5E:36:D2:D1:8C:A6:29:70:C8:1F:AD:B5:B1:4F
Authority key identifier: 16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
Certificate issuer: /CN=A91C8BAB/serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
Manifest number: 1C
Signing time: Tue 19 May 2026 08:50:41 +0000
Manifest this update: Tue 19 May 2026 08:50:40 +0000
Manifest next update: Tue 26 May 2026 08:50:40 +0000
Files and hashes: 1: Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl (hash: 31OGgE/2sedA7udnR0dyiO8YPnx++aN+xPdqr2V8sUA=)
2: B8FC2F342E4311F1A2579C1594833773.roa (hash: pjauDszwaF/mopQYyjDIvAGHDO32bERoI1rKGNgCq5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BAB, serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Validity
Not Before: May 19 08:50:40 2026 GMT
Not After : May 26 08:50:40 2026 GMT
Subject: CN=6a0c2460-d2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:2f:41:cd:af:ac:6f:49:7f:ec:05:99:7f:
88:70:b3:d2:7d:1a:97:88:ed:96:96:55:70:ec:8a:
d6:82:2b:54:54:bd:4c:e1:dc:85:3f:15:f8:73:50:
a1:c9:6e:c5:d1:8c:af:82:aa:43:61:b2:3d:d4:13:
d7:0c:00:69:19:93:02:28:af:04:fe:50:dc:4e:2e:
71:f1:2a:2c:e9:a1:ce:5e:25:02:e3:29:d4:82:ce:
8b:24:a6:8f:79:a5:ba:8c:d3:28:7d:8f:41:d9:b3:
87:b5:d7:40:7e:6c:46:74:9b:87:ba:ac:b2:e8:25:
e0:b5:10:c3:c0:96:62:22:78:fc:2f:20:1b:a3:23:
4a:be:4a:d1:c3:f6:07:c1:26:49:6c:83:ee:4e:4e:
db:c7:59:9a:59:bb:a5:d1:d8:be:ea:12:14:51:5d:
d6:19:10:38:b1:74:21:4f:71:12:a6:56:5d:1d:1e:
90:69:7a:dd:64:91:09:9e:66:a7:46:ae:4e:6b:cb:
ff:4e:17:65:c2:6b:6a:aa:47:18:88:ae:07:88:51:
99:6c:f3:9b:0a:d4:ed:56:64:d3:79:37:e7:e0:47:
d9:de:51:4f:26:d9:57:fc:72:83:3a:8e:25:08:90:
5e:2e:a1:6d:01:2c:26:ca:7f:76:d6:64:09:c5:34:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:21:47:04:91:5E:36:D2:D1:8C:A6:29:70:C8:1F:AD:B5:B1:4F
X509v3 Authority Key Identifier:
keyid:16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:f9:44:87:73:1e:e3:3e:e9:9c:02:6c:12:59:a8:d2:a9:11:
d4:76:38:6a:3d:f1:2b:97:f7:56:2b:86:6c:1e:be:5a:46:27:
66:3d:b9:76:2e:f2:67:7f:76:0d:18:f9:79:9f:0a:f3:f8:2c:
aa:09:6c:76:f4:00:89:3e:43:b9:fa:4f:06:75:6a:6b:18:4d:
3f:5c:4d:07:e5:9d:de:fd:8b:ac:ee:01:04:d9:ae:2e:62:f1:
39:2c:be:f0:32:96:b5:76:2e:80:1a:77:5a:63:8e:86:10:a4:
87:e4:5e:8e:a6:49:c0:97:89:56:25:3d:2f:92:06:cc:05:c0:
27:fe:fa:d6:04:08:5a:b6:42:0e:67:c9:3c:df:f9:4c:ff:43:
d1:54:cb:f8:58:4e:97:8d:be:23:1b:03:5a:a1:a9:ec:99:da:
0e:93:01:1e:e4:35:8d:aa:e0:64:ef:44:b7:05:26:20:63:9a:
d2:69:d4:80:e9:ff:15:bb:0d:8d:0c:a3:aa:25:84:e0:2e:36:
51:f9:2e:53:fc:5c:16:a5:62:83:a8:5e:2e:63:5d:55:12:af:
b2:d7:b7:a1:ef:7d:8a:94:d1:92:23:c8:45:fd:5b:e3:fe:d4:
3b:04:c0:1f:21:a9:64:22:c1:ac:24:fd:c5:9e:82:3c:2e:c6:
7b:c3:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:48 2026 by rpki-client