
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier: Mq3xOBRLeehTDj2zJoomxz5fReo10M0PC6xez1Sd28w=
Subject key identifier: 38:0C:74:D8:74:4D:DE:C8:1F:61:03:71:9A:F7:64:05:B7:B7:54:AE
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial: 1C09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number: 1BFD
Signing time: Wed 20 May 2026 16:13:26 +0000
Manifest this update: Wed 20 May 2026 16:13:25 +0000
Manifest next update: Wed 27 May 2026 16:13:25 +0000
Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: N85NtUWg/qVMGOVCQgTjiByt5XBLtLe48JQW1JJL3Vk=)
2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7177 (0x1c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Validity
Not Before: May 20 16:13:25 2026 GMT
Not After : May 27 16:13:25 2026 GMT
Subject: CN=6a0ddda5-a9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:38:5c:0f:df:43:87:e2:1f:57:6d:ea:a4:
cb:93:b5:25:42:79:60:a7:91:a1:e3:bf:9d:92:bf:
51:76:a4:35:a6:50:58:d3:d8:b3:43:e7:36:b6:2f:
5c:76:59:d4:7d:16:d9:d2:82:fe:fb:0d:59:45:f3:
35:b1:30:39:7e:08:a4:14:40:88:20:85:4a:d8:06:
1d:68:cb:4e:3d:4f:a4:2e:5a:ee:5f:06:50:47:16:
ac:45:ce:e7:d4:34:35:87:a4:3e:5d:ba:63:d7:c7:
f6:7f:d2:78:ce:33:f4:21:51:d5:45:a2:91:88:f7:
50:c4:f8:83:87:7c:fc:24:7a:c4:5d:51:3f:e3:e7:
c6:87:d1:01:ab:7f:d1:3b:3d:2a:ec:ad:df:c2:ca:
d6:7c:a6:14:2d:60:e6:79:50:dc:59:7b:d3:45:c1:
57:fc:14:28:cb:49:83:5b:4a:00:bc:97:7f:e6:18:
f9:cd:0e:f8:84:23:4d:ce:9b:ad:1e:94:27:15:ce:
76:aa:14:12:3f:5b:cd:27:11:1d:70:b6:82:75:fe:
b6:4b:64:04:da:46:7c:e1:d9:84:8b:49:1b:18:3f:
5e:fa:bc:72:5d:2a:c1:5d:f4:c2:df:cc:df:38:89:
2f:0c:d3:70:ca:76:53:a5:60:3e:a0:ca:c7:5c:30:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0C:74:D8:74:4D:DE:C8:1F:61:03:71:9A:F7:64:05:B7:B7:54:AE
X509v3 Authority Key Identifier:
keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f2:35:a9:ad:56:f6:62:d7:e6:14:66:14:53:ec:10:32:39:
eb:1d:88:a4:57:3f:7c:75:8e:30:dc:56:eb:6d:87:e7:b0:7d:
ee:a4:8e:5b:f7:be:c9:6a:cd:21:62:48:4e:d8:33:4c:26:60:
6d:6c:10:88:fe:7f:79:01:3c:1e:70:2c:0d:1d:6a:9f:1e:ec:
44:62:7e:c2:b4:22:50:2d:0a:72:91:24:cd:9c:9e:ab:cb:d9:
c4:c0:33:0c:53:f6:f2:05:57:35:48:49:4b:c1:12:51:b3:dd:
98:98:b8:21:9e:f2:b0:37:cf:c5:a8:08:d9:07:71:3c:5c:a7:
e0:a3:c0:a4:19:f1:3a:f1:c0:67:5d:db:50:70:18:3c:2a:24:
43:7d:f2:4c:8f:00:5f:4f:e9:db:67:ab:09:b7:0f:e8:cd:48:
06:f7:62:5d:3d:22:13:48:49:c7:8e:24:71:c3:bf:50:15:59:
e6:0a:66:f7:83:ac:d5:af:66:28:c6:2c:54:b8:20:4e:a3:e7:
12:48:4e:c8:b9:87:69:dc:fb:46:2d:8b:43:28:24:13:c3:7e:
ea:13:87:12:f8:37:b0:0e:63:fa:7a:a5:b4:df:b6:c3:c0:c5:
24:64:dd:2e:ce:fa:85:50:c1:7c:72:80:08:ad:19:de:38:fb:
b5:42:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:42 2026 by rpki-client