
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json)
Hash identifier: ErQeV6rzTehn21j1FC34LemaNT8EAtff5u5NPJP1V84=
Subject key identifier: D6:91:31:A3:02:C0:D4:43:1F:AC:48:AF:7F:90:A0:79:0A:20:68:F1
Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Certificate serial: 090F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
Manifest number: 0902
Signing time: Wed 20 May 2026 20:19:29 +0000
Manifest this update: Wed 20 May 2026 20:19:29 +0000
Manifest next update: Wed 27 May 2026 20:19:29 +0000
Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: cg2sokaK38/HVFJLfz0aBZF6sR5K9bukqfeYphtg1sM=)
2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: 4jcjYW/0FMetLdx19LfkYx1V1hLHWxOLQGODOyvAQC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2319 (0x90f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Validity
Not Before: May 20 20:19:29 2026 GMT
Not After : May 27 20:19:29 2026 GMT
Subject: CN=6a0e1751-8307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:b9:4b:54:86:70:83:52:e9:0f:78:bf:98:
50:c1:71:16:3a:0b:b2:cb:86:3c:73:fd:3f:29:b6:
85:c5:18:dc:58:59:02:57:17:db:9c:a1:64:7b:40:
3e:99:db:e9:9f:54:7e:2f:4a:4c:47:3c:c1:11:a8:
c4:64:2f:9b:6f:45:bf:5b:fa:5c:d7:5a:62:a2:7f:
a7:50:c6:e1:7c:cf:d0:06:a7:7d:00:ec:18:de:d9:
8e:53:04:d9:09:ee:72:0a:18:d8:50:83:27:15:02:
a6:df:fc:9a:74:8f:a8:e1:2e:5c:2e:7b:78:17:29:
08:93:5c:8b:31:07:cf:df:ee:e9:3d:d1:bf:db:d2:
42:45:1e:57:de:4e:f9:be:dd:27:c7:eb:03:af:93:
99:04:ee:40:a0:dd:41:d2:15:cd:9d:5e:b7:d0:59:
05:65:a1:4d:9e:92:c5:82:96:f7:7f:78:47:59:30:
6b:d7:e8:b3:f8:8f:2e:e0:08:1a:72:e5:55:60:49:
9d:26:4f:b3:c7:2b:90:43:69:4b:79:3d:51:7c:5d:
45:e2:1b:a5:2a:ad:69:d1:92:55:ef:18:91:92:d1:
12:64:d1:b5:5e:c5:be:1c:0a:5d:51:74:ed:e5:48:
be:a4:33:76:d2:46:59:4b:d3:56:5d:15:5f:29:72:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:31:A3:02:C0:D4:43:1F:AC:48:AF:7F:90:A0:79:0A:20:68:F1
X509v3 Authority Key Identifier:
keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d2:71:73:a4:97:66:e9:3e:c4:7f:04:3e:b2:53:4a:a0:42:
c2:8b:7f:2b:3c:f6:ac:dd:87:ad:f6:66:d6:aa:f1:5b:45:1f:
af:4d:7b:e8:76:55:30:95:de:47:f2:47:5f:1c:d0:10:8c:c0:
ef:65:44:44:8b:8a:f0:8d:4f:76:a5:19:46:8e:51:2f:3b:80:
31:46:c5:8b:82:ea:fc:33:21:e7:6a:52:e2:84:f6:02:d3:22:
ff:5a:61:cc:8b:3f:5a:1d:20:13:10:21:83:bd:e9:41:e3:91:
ed:01:02:94:2b:64:a8:de:4b:a9:45:36:91:40:ba:cf:34:25:
8c:84:06:d5:d8:5c:3b:2c:94:1f:19:6f:7b:c0:44:f8:bc:14:
9f:68:f5:e8:ae:ca:c0:bf:a4:b0:b3:2b:63:52:0d:7d:1e:0d:
4f:fc:a8:63:f7:06:69:44:bd:4d:c3:25:62:36:d0:58:22:19:
43:e9:6e:0d:26:84:77:0f:b2:14:2b:d4:3b:f6:00:10:50:da:
72:2c:d1:4b:6c:f2:37:d8:de:e6:98:6c:8e:2b:62:c6:08:09:
5a:c8:e0:9a:02:89:e7:38:fb:cb:03:4c:1d:80:38:46:3d:6a:
fa:78:bf:eb:e5:5f:7b:70:e4:f8:47:7f:50:a1:3e:a5:8e:b7:
62:11:57:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:04 2026 by rpki-client