
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
File: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft (raw, json)
Hash identifier: U/61x5u9G0owq4bh2GO40q87ytjw2mCo1hoDPyWJQ0M=
Subject key identifier: 9A:08:CF:0A:0E:9C:D2:A7:7A:DC:7C:15:17:A7:3B:D9:3C:C4:2E:7F
Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
Manifest number: BE
Signing time: Thu 21 May 2026 07:00:10 +0000
Manifest this update: Thu 21 May 2026 07:00:10 +0000
Manifest next update: Thu 28 May 2026 07:00:10 +0000
Files and hashes: 1: f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl (hash: 7UbY3ZcD1xiV4ovW2mbms6lX/gUE8MzQTcXIRaJ/3uE=)
2: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (hash: AqLmjH9rQIfWc4pDj/9l1XeaE5IDbCOjNUtl76LoxHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Validity
Not Before: May 21 07:00:10 2026 GMT
Not After : May 28 07:00:10 2026 GMT
Subject: CN=6a0ead7a-c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:38:48:00:76:ee:52:a8:55:a8:83:8b:dd:
27:81:06:fd:d7:f8:cf:bd:92:24:e1:a8:e0:a6:31:
ee:e0:53:5c:64:ba:6e:e4:fa:1a:b3:91:4b:c0:1f:
87:01:87:9f:9d:bf:65:54:19:a0:b2:68:1b:96:5a:
4b:d3:c5:38:71:db:bd:2d:a4:e2:24:c9:2f:83:9c:
83:61:5f:7f:84:41:18:b9:53:de:ee:30:7f:70:05:
d8:b9:d0:da:ff:af:64:b8:68:80:7b:83:11:06:c7:
52:e3:c6:81:dd:8d:69:9b:eb:6a:be:98:6a:69:61:
d0:54:57:2d:46:de:42:4f:b4:59:1a:f6:de:ba:be:
f7:9c:0a:ef:f9:e0:ef:b6:4a:06:79:9c:7a:f1:1d:
d6:df:c8:6e:44:10:e2:33:14:b6:87:6e:6a:32:61:
05:d6:2f:2e:7c:21:bc:56:b1:43:e5:c3:0e:db:1c:
19:e5:0d:33:d2:43:c3:29:2b:89:7d:5d:ea:ec:bd:
52:f9:c2:0f:c9:08:dd:d1:06:86:25:77:df:f4:63:
e6:6d:7e:17:b5:7c:8b:3a:11:60:f5:25:10:c7:55:
1f:2e:c4:52:05:38:52:42:52:af:a5:dd:ca:b0:5d:
e9:c8:1b:e5:15:9e:0a:e2:04:5a:15:39:eb:43:a4:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:08:CF:0A:0E:9C:D2:A7:7A:DC:7C:15:17:A7:3B:D9:3C:C4:2E:7F
X509v3 Authority Key Identifier:
keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e2:37:7c:f7:2f:bf:a5:f9:bd:fd:94:84:4e:54:63:0d:dd:
89:6f:0d:a4:64:e4:8d:1c:07:6b:f4:4a:dc:4f:09:e1:e7:cb:
fc:89:c7:9e:dd:96:0c:c2:16:b1:8e:46:3f:f3:27:46:9c:5b:
4b:ef:6f:de:46:b4:0a:a8:51:40:07:2f:15:08:32:dc:f4:68:
c0:a4:15:c6:4a:ea:59:cf:83:d0:0a:f1:e8:1f:e0:96:fa:07:
df:df:87:72:59:7d:5c:a9:71:7a:80:92:4a:90:0f:e4:67:18:
c2:d3:a3:64:48:2f:4c:c1:88:a8:81:c6:1e:99:af:87:bd:39:
e1:0c:4e:c7:3c:66:44:6f:f7:fa:4e:b3:6a:6c:5d:e0:76:93:
0d:4f:aa:d4:6d:7c:f1:20:5b:6d:a7:e4:e8:0c:a8:59:47:66:
01:b7:69:52:48:fc:06:1f:fd:2d:c8:c2:f6:2e:65:d9:80:41:
52:9b:6f:f2:61:a4:61:f0:ce:0c:2e:24:b4:3b:85:c6:f1:be:
8a:d7:b3:da:03:de:14:f2:04:23:ce:87:07:85:ee:15:20:3c:
5c:f3:30:f7:cc:07:ce:ee:48:47:1d:7a:ad:cd:6b:1e:9d:b9:
c7:f3:0a:69:08:f6:74:9d:46:67:a3:40:b3:21:70:27:fd:25:
68:00:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:38:34 2026 by rpki-client