
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
File: 74x3yBft3T_cxmtjUtbqeNcsWsY.mft (raw, json)
Hash identifier: ncBGp0g+bTty/zR9of1uCfyQLiNrIlpH/TANfaW8EQ8=
Subject key identifier: D7:F1:A3:10:63:EA:CF:50:21:79:C6:CA:71:8A:0C:14:27:93:20:C0
Authority key identifier: EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
Certificate issuer: /CN=A91DABAA/serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Certificate serial: 60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
Manifest number: 5E
Signing time: Mon 01 Jun 2026 08:53:10 +0000
Manifest this update: Mon 01 Jun 2026 08:53:10 +0000
Manifest next update: Mon 08 Jun 2026 08:53:10 +0000
Files and hashes: 1: 74x3yBft3T_cxmtjUtbqeNcsWsY.crl (hash: XPZWfUMvpzveloPPxXsjGYE3OSi/gD9O1urdA5Fs8/4=)
2: EEEB4CEAD19D11F0B238D972C4F9AE02.roa (hash: KBecdMTFKnUpJ7QDfC5GLAYFAglDXZ+nTAZgDKN2WsU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DABAA, serialNumber=EF8C77C817EDDD3FDCC66B6352D6EA78D72C5AC6
Validity
Not Before: Jun 1 08:53:10 2026 GMT
Not After : Jun 8 08:53:10 2026 GMT
Subject: CN=6a1d4876-f5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:91:0c:e5:73:c2:fa:58:b1:7a:35:8e:7d:
22:7a:ab:8e:38:f3:99:ea:8c:78:36:ea:8d:45:6e:
84:fd:60:65:f6:78:cf:29:d4:95:75:eb:17:86:b5:
9b:f3:9b:3c:3c:0e:ff:4c:86:9f:fd:6a:1d:14:9b:
b3:eb:7d:e0:b2:3b:ea:5e:e5:23:6c:07:f8:a8:1a:
4b:1a:8f:94:53:d2:82:26:ae:5a:dc:1f:da:70:d0:
78:9e:ed:46:50:0a:75:4d:95:0c:e4:ee:08:90:cc:
89:e6:92:7b:51:47:11:5b:93:9a:a5:52:d1:54:b0:
ab:26:e4:bc:ba:6d:72:01:09:b3:19:bb:2e:50:50:
70:79:e3:09:76:af:1e:a5:9a:93:b0:ca:bf:68:0e:
00:a6:c2:38:57:29:3b:f1:94:51:f5:e0:f0:23:22:
59:63:3d:fc:4c:fd:2f:4a:a1:30:58:d4:e6:25:17:
3c:ff:53:20:98:39:1c:60:ce:cb:76:13:22:21:da:
a8:eb:1d:95:c0:d3:d9:05:31:d9:80:2e:d8:59:b5:
94:f8:9d:81:d0:b2:48:ca:c2:70:ca:30:ea:74:a2:
78:9e:a2:01:d6:5f:73:49:50:a8:86:c4:52:d9:25:
90:01:74:b0:7e:51:73:c5:97:90:c2:75:84:2f:f9:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:A3:10:63:EA:CF:50:21:79:C6:CA:71:8A:0C:14:27:93:20:C0
X509v3 Authority Key Identifier:
keyid:EF:8C:77:C8:17:ED:DD:3F:DC:C6:6B:63:52:D6:EA:78:D7:2C:5A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74x3yBft3T_cxmtjUtbqeNcsWsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/420C0F6ED19D11F083814170C4F9AE02/74x3yBft3T_cxmtjUtbqeNcsWsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:0f:f0:b8:bc:80:fd:44:71:45:7f:a0:bb:37:8e:08:07:2f:
00:dc:1c:c5:ee:b2:b1:a5:80:b3:18:18:1f:f4:a8:84:45:2f:
05:b1:35:65:dd:fa:4b:ef:d2:cb:43:c9:5e:3f:b6:4b:a4:8c:
84:65:78:75:c2:1a:4c:5d:07:fa:a8:37:6c:91:af:df:64:8f:
45:d0:7b:ac:36:5a:29:d3:e3:25:67:7c:aa:ed:bb:90:da:b4:
8d:ff:6e:ad:40:a0:c2:42:bc:32:6a:19:24:b4:df:bd:df:02:
7e:97:90:66:f9:31:3f:29:a8:e3:f3:4a:07:14:76:df:73:66:
9a:24:d5:9e:2d:8a:6c:34:d3:86:0b:1d:87:33:9d:80:02:72:
e5:b0:a9:4b:45:7b:b6:54:4e:63:c4:8e:7c:c7:7a:12:99:d0:
4e:2b:d0:bc:55:74:8c:06:73:1f:a1:3a:3d:ce:c7:99:01:b8:
66:92:5c:77:a5:a2:e1:6f:3f:46:43:e1:74:c1:ba:7a:25:fd:
bd:b9:2b:47:41:85:26:50:d1:6f:e6:d4:65:1c:0b:2f:cb:e6:
63:af:fb:3a:bb:9f:ce:62:e8:6f:66:26:45:04:86:a1:9a:09:
99:e3:9e:a3:01:68:7d:ab:e1:11:bd:02:31:f9:1a:e5:3d:dc:
f8:21:db:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:01 2026 by rpki-client