
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json)
Hash identifier: AA7Fktbx5ueFLrJKJEskAeU6hO4qoTk7uc7uhArCyDw=
Subject key identifier: 06:DA:C2:05:CB:83:F2:3B:45:F0:4B:10:B9:30:8B:3B:02:2D:B4:B4
Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Certificate serial: 0D02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
Manifest number: 0CF6
Signing time: Wed 20 May 2026 18:18:52 +0000
Manifest this update: Wed 20 May 2026 18:18:51 +0000
Manifest next update: Wed 27 May 2026 18:18:51 +0000
Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: gEXi8qkQR9YXbAutXn94SSDIi4lbecDyF9xJsGNHhfM=)
2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: b1VtTeZ3i3+p56WxtkqO9+Z/XK8otu366dEwvuMxQIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50FB, serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD
Validity
Not Before: May 20 18:18:51 2026 GMT
Not After : May 27 18:18:51 2026 GMT
Subject: CN=6a0dfb0b-2e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:71:09:bd:e2:9a:46:4e:12:ff:4a:99:78:
27:f2:47:d6:24:3f:ec:94:eb:87:85:2a:be:98:d1:
7e:e4:03:27:47:6f:8e:0c:75:3a:08:be:0c:c1:bf:
3c:37:a2:27:2c:c9:2e:05:de:fa:72:a4:ff:05:92:
50:c1:6d:e5:9b:65:cc:61:02:e0:e5:ed:15:5c:58:
d7:88:68:df:38:c4:8a:71:29:c1:65:6e:51:ad:9d:
92:6b:a1:31:91:42:30:b6:e6:ef:43:6c:66:9b:66:
91:b3:c3:3f:11:48:cd:a1:a6:71:f6:f7:1a:28:bb:
6f:35:35:65:b5:94:9e:5c:61:9a:0d:66:56:cc:af:
01:72:e0:fe:8c:85:df:90:03:54:59:98:d8:11:c6:
6d:f6:5d:f6:cf:d1:f1:2d:25:e2:83:3c:9a:10:45:
8a:4a:a2:4c:7a:f5:f7:6d:d2:a2:90:ae:b1:a5:08:
4e:6b:b7:e4:68:38:a4:a2:2f:b5:1e:81:6c:9b:1d:
9d:02:c7:1c:7a:4d:4c:ce:a9:f0:6e:fb:2f:9e:5a:
9e:94:3f:0f:ad:91:94:ba:32:5f:53:38:10:96:f9:
18:a2:b6:f4:ed:ed:04:7f:a1:a4:48:0a:e6:1c:8f:
9f:fc:57:da:cc:9b:76:2d:af:78:70:20:0d:5d:b9:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:C2:05:CB:83:F2:3B:45:F0:4B:10:B9:30:8B:3B:02:2D:B4:B4
X509v3 Authority Key Identifier:
keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9d:a8:b2:9b:81:cf:be:44:79:60:75:ac:f3:f3:6d:11:a1:
c3:07:6a:5c:f7:86:47:b0:4f:ad:55:8b:71:e8:19:cc:7c:7b:
ba:da:24:da:0d:2c:97:e1:8f:2a:0b:46:6b:36:70:24:5b:f8:
1f:dd:91:ad:e5:e7:c9:6f:18:b6:7f:3a:51:c0:fc:25:ff:71:
d2:49:88:7b:70:77:1a:c1:ee:d5:3a:3d:01:32:7a:43:74:b1:
87:e8:18:d6:fb:1c:55:c5:c1:bd:ee:f9:fa:75:a3:ff:56:25:
d1:7d:b0:ea:91:d2:9d:ab:43:68:1e:2c:12:7c:b3:88:5a:0d:
a4:dc:26:76:f2:38:0a:90:4c:c6:1e:44:25:4d:df:d0:8f:5e:
0d:0f:b5:10:7c:af:e3:de:62:55:28:37:38:4c:3a:d9:8e:ae:
ed:10:13:35:a7:57:f8:2b:9f:07:e2:5f:57:47:03:d7:b1:79:
77:5b:31:06:80:fd:22:74:c1:55:63:cb:a2:44:bd:5c:66:30:
70:22:e4:98:72:3d:ee:52:31:75:40:a1:28:7c:8c:42:cf:8e:
ad:85:5d:fe:f4:44:5e:bd:a7:da:7f:dd:90:8e:31:03:b7:cc:
80:08:72:22:1a:4a:4f:a2:19:2a:c5:13:43:48:34:a7:ae:ef:
d3:59:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:31:08 2026 by rpki-client