
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json)
Hash identifier: OtDk65/ScdD0t0QJ5BVkKvV0OGg8unJlfig3Cqy4fnQ=
Subject key identifier: 32:30:9F:DB:13:EF:68:4A:4D:3E:3B:20:41:84:FB:CB:6B:23:4A:AF
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial: 0C26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
Manifest number: 0BB9
Signing time: Wed 06 May 2026 19:08:30 +0000
Manifest this update: Wed 06 May 2026 19:08:29 +0000
Manifest next update: Wed 13 May 2026 19:08:29 +0000
Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: x5kNGgnn/qdfkjHqHPw0sfi3KzSIYtzdAV9KhlllaTY=)
2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: uv7rdnmyI+gc1dDgRNGKvt12no6t8v6+Sh+LAKmYBS0=)
3: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: ZCVyWhNkXCNm36AW8HvL8obBGE1kXtO5k/l1MbGslew=)
4: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: /IKxncGwcVAUWd16lVeAqQuGXRqTtvt9Ll/KgYku0+M=)
5: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: w7eYnxJy/ErX8uBHC7lb97b71ahe13DgTz190X2OvQU=)
6: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: a5ETmaqpNy6qeOL+PmbuFg5Hvj7coJZt0e2vYVREM4A=)
7: B66F0C58817111EFB121970CC4F9AE02.roa (hash: vY3JgYrHf50LIMon2cQ4xi3ayVXFANYUAF1HUUmukAc=)
8: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: FIe/ZxZ/czs73Iv9mGeR+sUl8NFbSaTBZOQUejuclqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Validity
Not Before: May 6 19:08:29 2026 GMT
Not After : May 13 19:08:29 2026 GMT
Subject: CN=69fb91ae-438a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:fd:51:f9:4c:03:1b:d4:b9:69:f2:1b:a0:
fd:cd:1d:db:7c:af:e5:39:0f:97:94:6b:f6:32:d4:
5b:3f:03:f3:05:17:49:4a:a6:1e:ee:aa:13:56:72:
9c:77:69:ac:31:29:86:e9:68:b6:23:d6:9c:fc:98:
77:dd:cf:c3:74:9b:f5:f6:6f:dd:df:69:f2:b6:28:
99:0f:14:32:da:be:5f:cc:c1:d0:9d:0e:70:72:e8:
e5:0e:60:e9:8c:43:01:40:24:30:0f:46:55:54:9f:
62:91:a7:db:21:06:85:c2:a6:78:45:bc:cf:14:5a:
11:46:6f:0d:a9:b3:88:64:6d:12:ba:2b:bf:a0:50:
2b:7a:c3:1b:fc:d9:a6:7e:b0:e4:8e:9f:9c:24:be:
fe:54:49:fd:b1:9f:61:bd:02:77:60:6a:09:ad:64:
23:e6:c0:e7:27:38:d7:40:84:54:28:f6:4c:ed:ef:
c0:4d:65:5c:28:67:05:66:94:25:97:79:e8:07:d4:
fe:41:39:49:40:af:02:3f:09:90:94:5f:9c:7a:8b:
4a:99:33:d9:61:56:ad:5c:10:17:7d:b9:c0:f1:5c:
90:ae:b2:cd:5e:f7:12:ea:b9:e1:87:8f:68:63:1d:
b6:aa:44:d3:fb:6a:6c:26:a5:52:f3:29:69:aa:10:
cb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:30:9F:DB:13:EF:68:4A:4D:3E:3B:20:41:84:FB:CB:6B:23:4A:AF
X509v3 Authority Key Identifier:
keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8a:e4:73:cc:5a:22:56:a8:3f:23:a5:26:ec:8d:81:f5:da:
c8:90:78:a3:09:8f:01:27:51:88:d9:92:72:8e:85:0f:de:94:
51:fc:25:1b:b2:7d:55:66:b3:af:bd:81:63:55:4a:d9:d0:c2:
ad:17:5c:37:4c:0a:c5:b0:2f:06:13:4d:75:cc:2d:cd:a9:42:
5c:a0:03:c7:58:d2:c7:6f:ba:3e:1e:6b:8b:81:ef:8e:63:e2:
89:41:a0:c2:a0:d5:3c:09:ea:04:87:a4:6e:c8:1d:e3:43:97:
6f:8d:94:83:03:10:b3:b9:57:32:dc:2e:a8:8d:b2:cf:2e:df:
be:9d:21:6b:51:f6:b3:70:50:98:16:f9:22:41:78:3b:9c:44:
d3:05:a1:a4:87:c3:e6:d9:d3:7b:b0:a2:95:cc:9e:82:93:2e:
d3:77:c5:36:72:ef:f5:3a:5a:21:d7:ae:8d:35:b2:4c:26:45:
a0:fb:e0:a8:23:bb:f4:c4:2d:02:ab:a0:6c:fa:8b:5a:85:6f:
f3:f2:51:c5:29:8e:fc:a5:62:cc:44:33:17:cd:c1:a8:f2:1a:
b0:54:f6:ff:97:23:63:de:87:bd:cc:24:cd:44:85:2d:c0:9a:
b8:3d:d7:3c:f5:35:a0:be:3e:9a:79:38:fe:55:38:d9:32:b1:
c8:b2:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 04:19:29 2026 by rpki-client