
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json)
Hash identifier: ci7ucbP/iRMBYV5j7ywgaW6nwGMSOV1tV+gSLr2bmlA=
Subject key identifier: 6A:EF:07:B1:FF:F9:F9:10:56:B5:0E:30:D2:95:94:42:7F:30:BF:B2
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial: 0555
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
Manifest number: 0541
Signing time: Wed 20 May 2026 23:35:08 +0000
Manifest this update: Wed 20 May 2026 23:35:08 +0000
Manifest next update: Wed 27 May 2026 23:35:08 +0000
Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: 7nwMgUrYA/FyBwk2KxCVd3Y9zl2MYcAAfTAuqj0sQVk=)
2: CB7E6CF0DBEF11EF9FC5007CC4F9AE02.roa (hash: VJgHTQOVu03GlBSuXPQzuVHdwrsQzGniIaHaw00H0Kk=)
3: 30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (hash: VIlx0l5j7GQ7Beoam2Qgv31QWbO2E+gcDdeVz2IPgAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365 (0x555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Validity
Not Before: May 20 23:35:08 2026 GMT
Not After : May 27 23:35:08 2026 GMT
Subject: CN=6a0e452c-73e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:6d:35:e8:41:fe:a9:07:a3:56:11:e8:29:
0b:18:b6:d5:43:62:c0:d3:23:81:97:b9:5e:6e:bd:
53:97:aa:de:97:2a:61:d7:74:cc:4d:15:69:fb:80:
d7:c6:a3:f4:df:20:ef:ed:05:ed:aa:d0:0e:65:d5:
d0:16:5c:d2:99:06:6d:47:99:73:2c:44:72:d3:a0:
c3:47:a3:f2:26:a6:15:d3:63:ab:9b:0e:55:1f:e5:
0d:2d:3f:7d:b0:47:27:65:da:02:b8:ea:b5:ed:39:
ba:4e:55:7e:c2:7f:ea:b5:d4:b1:09:58:4a:6a:a9:
67:b7:dc:91:7e:40:72:45:01:3c:c1:41:0a:d5:77:
9d:0d:4c:f1:89:ed:25:d6:05:9f:03:83:66:eb:03:
43:80:20:94:26:66:3d:e9:1b:7b:77:de:cd:0e:b5:
49:6f:47:79:b9:b7:ab:2f:51:47:96:25:b0:0f:a0:
00:61:57:8c:25:69:5e:2a:e1:be:09:51:79:f5:b7:
c1:ce:af:54:4a:ad:55:a8:86:64:b7:90:76:08:80:
40:3e:c8:95:22:7b:9a:03:f6:9b:55:5a:f9:a3:37:
60:07:b5:50:7d:01:81:b1:ad:a7:ca:f4:03:dd:10:
c5:6c:04:2f:23:db:e4:dc:0d:65:cb:c8:d7:ca:ef:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:07:B1:FF:F9:F9:10:56:B5:0E:30:D2:95:94:42:7F:30:BF:B2
X509v3 Authority Key Identifier:
keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9d:17:6b:88:8d:29:62:2d:47:cb:6a:27:29:38:3d:05:51:
fb:07:34:f6:c6:f2:0d:61:02:12:10:bd:24:87:44:bb:c8:4e:
f9:d8:f5:68:39:31:ee:75:19:b3:6c:6b:89:36:4e:c8:39:76:
fd:e4:37:a1:6c:1d:e6:b7:6e:49:9b:de:cd:a7:94:4d:f3:5f:
85:2b:72:92:f0:18:b7:dc:77:ff:dc:f4:a1:4e:a7:08:fe:31:
58:53:74:e1:13:5c:33:6a:b7:36:15:42:14:87:30:19:1f:85:
16:8b:30:e5:60:1f:07:83:07:ac:e9:7c:6f:8b:33:dd:e4:9e:
06:78:b2:5d:6d:e1:2a:00:37:0f:37:ea:42:90:86:5c:6a:0f:
4c:5e:52:a5:f1:ce:ff:79:28:d8:df:6f:58:b1:c4:9b:5d:2e:
bb:76:88:a0:21:e6:ab:f9:2e:6b:59:cb:7d:d5:bc:e9:e1:41:
12:61:af:d9:fb:3e:cb:18:ca:b4:3d:15:7e:cd:a2:05:dc:12:
73:ed:b2:92:87:f4:9b:93:fe:ed:ba:04:3a:08:cd:f8:b2:26:
5a:c6:e2:6b:12:f5:af:04:7b:b6:d4:bb:e0:27:2a:44:d0:b2:
4a:e0:d2:b1:46:4a:67:7a:5c:cf:e7:1f:07:1a:27:9f:3b:e7:
2a:5e:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:04:48 2026 by rpki-client