
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
File: cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json)
Hash identifier: mW5G0M249/Ip5m9EgWaGRn/PUB0IUglbQDnoRnLIfDU=
Subject key identifier: 7C:F8:AC:C0:EF:78:94:E9:24:22:27:CD:DC:47:FF:AB:31:F0:76:1E
Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Certificate serial: 0887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
Manifest number: 0877
Signing time: Sat 16 May 2026 20:39:42 +0000
Manifest this update: Sat 16 May 2026 20:39:41 +0000
Manifest next update: Sat 23 May 2026 20:39:41 +0000
Files and hashes: 1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: eNBYgJTvBHXQIMeDijoBiJS0pMQZAlW13WkYKa0H5tw=)
2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: aHXBmA0NtyR13VuTHpIm+ZaiBP/Di2n0/CwGR7lCYqI=)
3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: 5RUGr84S9u/MYGYJzdR1/AUpkucviMpdR/eHj0IncTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Validity
Not Before: May 16 20:39:41 2026 GMT
Not After : May 23 20:39:41 2026 GMT
Subject: CN=6a08d60e-9da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:08:71:e9:c9:e1:6b:98:da:31:bd:60:27:
cd:42:ec:7f:c9:ec:96:82:13:bb:c8:5b:71:3c:fd:
7c:46:b7:bb:0e:e8:be:e5:35:be:25:4e:f7:3d:df:
3b:46:e4:98:ad:82:0d:4b:cd:c9:4c:de:08:4d:02:
95:6c:5a:55:c2:09:53:40:3c:e3:ec:15:7e:2e:06:
24:2a:6f:63:62:07:94:44:e7:69:7b:c4:b9:79:30:
67:d5:f9:a9:6d:d6:89:86:3e:2e:04:fe:03:e6:9a:
b3:ca:53:fe:5c:37:ad:eb:f0:c5:29:1c:32:f5:71:
43:66:9a:e2:af:f7:32:e1:aa:76:9d:df:dd:51:00:
4a:e9:d6:1d:78:76:68:ea:69:7f:cc:97:eb:9c:e6:
d8:dc:b5:6e:09:30:30:6b:d0:15:12:1c:39:2c:1d:
e3:74:e5:eb:66:e9:a8:37:aa:05:2b:c6:a0:02:0b:
c6:52:9d:78:ff:d5:95:5f:c8:47:a7:82:f6:e1:e5:
a8:5a:ef:5d:0e:64:f1:51:ba:4e:ca:19:4d:3a:24:
94:79:13:3c:ac:ea:79:73:2c:f5:33:d3:56:c6:95:
ab:c6:bd:5c:f6:31:cc:24:ef:f9:7e:7c:73:46:ef:
94:96:e0:bb:27:02:fd:14:cd:8c:f1:de:21:b9:9c:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:AC:C0:EF:78:94:E9:24:22:27:CD:DC:47:FF:AB:31:F0:76:1E
X509v3 Authority Key Identifier:
keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:43:9f:ec:96:69:d1:33:09:8b:48:a7:86:c8:97:4d:39:cf:
bf:cf:2f:a3:a3:70:76:fa:2a:3b:e0:20:02:68:e5:fb:82:af:
43:b3:4e:bd:15:18:3e:52:aa:f6:ba:ff:cb:0f:dd:43:92:c8:
30:21:07:f9:66:8a:c7:30:04:55:76:85:98:a7:f6:38:0b:f4:
f4:69:22:b6:cf:21:0d:f8:dd:5e:b6:21:75:3c:69:de:eb:fd:
36:70:ae:06:64:a9:2d:6d:2d:26:56:7a:a1:4a:18:b5:a3:d3:
8d:99:d5:2f:24:a1:d6:31:b7:62:fb:60:0e:3b:d5:f0:66:ed:
ed:ed:15:c8:7d:76:be:e7:af:37:01:8f:9e:12:04:04:6b:c5:
ff:08:82:00:f3:2e:03:46:b6:97:51:b3:ad:45:fe:95:f7:c8:
7f:21:2e:4e:b1:83:7b:99:d7:e3:4b:4b:1e:da:cd:a1:ee:d6:
8e:d4:1e:cd:ea:fa:14:d2:54:ae:36:45:b9:92:3b:88:0a:6b:
af:73:f7:6b:cf:27:fa:48:ec:3a:96:73:78:2e:70:33:8e:60:
7b:5a:55:98:12:7b:64:82:7d:70:f3:e4:d9:a4:24:b3:72:0b:
4d:9e:bc:4d:b8:2c:4d:77:d1:50:23:0e:56:53:32:45:07:ca:
b8:93:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:45:42 2026 by rpki-client