
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json)
Hash identifier: AdMo80mrKWNIQhZYg9VR8bHhx1ki9+tXY0GibPu4fV8=
Subject key identifier: 66:A7:C1:87:50:A2:F1:9E:BB:3B:12:99:21:FF:A6:20:A2:0C:97:F8
Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Certificate serial: 05AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
Manifest number: 0597
Signing time: Wed 20 May 2026 23:17:14 +0000
Manifest this update: Wed 20 May 2026 23:17:14 +0000
Manifest next update: Wed 27 May 2026 23:17:14 +0000
Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: xJpm8G1RHkNrj84tyChmQYOPlnrhN1XAOMSRzj8tA5Y=)
2: E66070EE36F911F0B0111510C4F9AE02.roa (hash: KwF38ZBP8Utf4qS1kbQsJebYoDtue89xp1vHyUdKSU0=)
3: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: nMAueD71AbMo3NTxzg/tId7Satepp1btvdBVnm0IwvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450 (0x5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Validity
Not Before: May 20 23:17:14 2026 GMT
Not After : May 27 23:17:14 2026 GMT
Subject: CN=6a0e40fa-34ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:e4:7f:56:6a:8d:95:c9:b6:e6:76:94:91:
05:f9:9c:09:17:1c:44:38:7e:9b:d8:a0:af:3e:f7:
de:c5:bd:4b:27:28:0d:9b:47:9c:f5:32:a0:ea:cb:
f0:10:47:14:ba:43:5a:18:96:cc:91:26:8e:63:98:
49:3e:13:c2:88:64:18:56:b7:b5:51:7b:4a:cc:23:
fd:10:1e:29:d5:58:b4:63:53:6a:36:29:67:dc:68:
f3:6c:6b:c6:ce:53:9a:5c:df:5f:0e:87:14:78:30:
b2:c5:11:db:2e:ed:e7:da:a2:0b:a6:b1:81:56:7f:
69:d0:20:61:72:63:79:9d:e1:b4:48:39:e8:0c:46:
7e:22:85:40:48:29:0b:6e:66:f8:13:46:a6:d7:fa:
ba:98:ac:e1:45:b8:f2:4e:f5:b2:93:19:1b:49:b7:
aa:01:40:9d:23:52:d6:40:65:8d:6a:d7:52:32:93:
1a:a0:5d:2b:e6:07:4d:b7:88:e2:10:1b:ac:6c:0b:
6d:98:9f:d1:af:be:df:c5:27:3b:12:a3:c8:14:6a:
ef:55:13:05:53:d9:81:ef:bb:5f:36:5a:27:86:96:
02:e7:34:d0:11:12:b6:d4:de:c9:96:dd:f8:29:5a:
26:03:38:aa:e0:a5:09:4c:ea:35:f7:20:f6:ca:a3:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A7:C1:87:50:A2:F1:9E:BB:3B:12:99:21:FF:A6:20:A2:0C:97:F8
X509v3 Authority Key Identifier:
keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:ad:cf:e9:7f:4c:02:72:90:35:e7:3a:63:9a:ff:dd:d2:f5:
a2:6b:20:c8:b0:3a:6b:e8:69:17:31:dc:82:48:cc:db:a1:43:
3d:81:09:7d:83:57:4c:7f:00:bf:67:7b:06:2e:c7:f3:47:e8:
1d:eb:0b:8d:d9:45:98:d4:69:78:fc:35:16:0d:2a:29:df:a0:
f0:92:bf:26:1e:1a:f4:0d:b5:4b:82:da:82:9d:b8:5f:e7:70:
c4:fc:22:79:9a:91:3b:11:88:2f:7b:d0:a2:61:f3:32:ce:8a:
42:e2:29:86:19:15:42:06:85:04:a0:8e:90:89:64:ac:b8:46:
12:a3:21:ba:4e:84:08:bc:b0:6f:15:d3:6c:eb:77:79:03:76:
5f:63:79:4b:ae:f9:7f:79:6e:03:63:f8:c3:cc:c5:d2:b3:7e:
84:7d:8a:88:da:28:35:fe:39:6c:88:02:aa:04:da:5b:bc:9b:
6a:ae:e6:bf:2b:8c:70:f1:60:83:33:89:c1:47:c7:09:0a:06:
6d:10:05:f8:ed:53:a6:7e:20:ca:5c:31:b6:f9:e2:6c:90:41:
c8:33:d6:68:2c:a9:cd:6e:5c:8c:76:60:7f:ab:c7:41:b5:1c:
5d:29:bb:52:ca:63:8c:4f:f4:b5:1b:cf:8a:3f:19:bb:dd:7a:
ae:80:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:11 2026 by rpki-client