
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json)
Hash identifier: 5b6980gwYHHhB0jF4kh5UWoEJ1zjDDBwBzUEervDuZo=
Subject key identifier: 25:62:BF:C3:BC:1B:11:77:E5:81:B2:53:C2:4E:24:6F:38:19:81:07
Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Certificate serial: 0D0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
Manifest number: 0D04
Signing time: Tue 02 Jun 2026 18:12:43 +0000
Manifest this update: Tue 02 Jun 2026 18:12:42 +0000
Manifest next update: Tue 09 Jun 2026 18:12:42 +0000
Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: KwSiD1594n1/5xShSeKUZWrZTLJdgJIglykL4lAKniQ=)
2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: 5SXsoRZviOsZAGmaYCG+zK9DFm8Eh25q9V/rNn5L4vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Validity
Not Before: Jun 2 18:12:42 2026 GMT
Not After : Jun 9 18:12:42 2026 GMT
Subject: CN=6a1f1d1b-c3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:d4:cc:01:4e:e6:a9:66:fd:51:5f:14:78:
21:08:63:56:4e:45:f2:8c:cc:ca:4d:de:f8:3f:b5:
80:d5:06:25:66:eb:35:49:88:2b:1e:19:50:fa:16:
d8:f2:44:a7:e1:16:81:ab:41:f3:74:ee:d2:96:fb:
63:b6:7f:eb:f8:86:df:35:87:bf:2f:1f:0e:49:95:
0d:3a:cd:19:64:09:b0:ad:54:9f:39:36:a4:82:46:
13:de:2a:a2:5c:9a:35:0e:98:31:94:58:2b:d2:94:
03:89:64:85:ad:de:9e:bf:f7:25:f7:0a:dc:be:04:
34:46:75:ea:61:bd:8d:a1:2a:8b:64:9d:a0:e6:41:
7b:19:3b:be:ca:e3:73:b6:cf:c7:f6:31:84:62:47:
bd:a4:c5:fd:73:93:57:92:56:49:62:49:a7:ae:0c:
a6:9c:93:39:cd:4f:dc:b7:e3:59:c8:85:3d:64:b0:
04:9d:6d:07:32:59:cd:c1:9f:cf:3d:72:a9:32:75:
e8:c4:1c:9a:d6:9c:8a:8c:36:bc:16:b8:6d:17:fc:
2b:a2:3c:60:7e:a3:d2:30:76:d1:d7:73:c9:d8:f3:
9e:2e:03:8b:71:94:38:1a:1b:5b:53:a8:a4:59:88:
34:12:65:c5:c2:72:f2:86:34:15:da:37:28:48:e7:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:62:BF:C3:BC:1B:11:77:E5:81:B2:53:C2:4E:24:6F:38:19:81:07
X509v3 Authority Key Identifier:
keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cc:bd:a3:ba:b1:f5:6e:35:6f:39:f4:33:e0:5c:c8:ad:40:
99:de:b0:0b:56:4c:f8:d5:55:ae:4f:ed:ac:00:43:b8:66:ee:
25:37:01:72:6b:19:26:a3:8c:30:af:c4:3d:8e:fe:eb:9a:0d:
df:b1:e6:35:a2:05:40:72:90:5a:e7:f9:ae:a8:a5:d9:ed:f3:
82:2a:bc:8f:05:c2:fc:53:77:ec:fe:ae:0d:d2:c0:5b:52:01:
bb:60:23:6c:d1:63:ba:65:a7:ce:0f:2a:a6:82:57:df:cd:25:
e0:55:8e:30:78:c0:5e:0b:be:7c:91:65:d0:64:e1:7c:d7:e9:
1c:78:75:74:64:62:bc:91:80:74:54:71:0a:37:75:50:26:13:
86:18:0e:34:af:f0:39:96:65:55:db:92:bc:6a:2f:65:d1:e0:
a0:1c:0c:a8:1c:90:ed:1a:6c:73:59:88:a0:a8:1b:92:6d:04:
a8:35:0a:4b:80:cc:38:a2:5c:4e:72:7f:11:96:17:d5:46:d4:
c4:77:49:87:52:0a:88:da:e7:86:36:b6:e5:21:27:4a:2c:39:
82:8c:e4:41:26:10:ee:08:19:00:3b:78:48:37:c3:0a:8b:9e:
9b:14:07:a0:6c:ad:3b:f1:cf:58:8e:f7:82:24:30:35:29:c2:
9e:7d:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:40 2026 by rpki-client