
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json)
Hash identifier: Wh0vmgsEBt+MgQbCXJpnHE2Q9sQRApdsqcziBAq7p7U=
Subject key identifier: D7:EC:B2:AC:70:54:D6:8E:9E:07:BF:5E:F7:3D:BC:C9:D6:2A:F4:75
Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45
Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
Certificate serial: 1CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
Manifest number: 1CAA
Signing time: Wed 20 May 2026 16:11:34 +0000
Manifest this update: Wed 20 May 2026 16:11:34 +0000
Manifest next update: Wed 27 May 2026 16:11:34 +0000
Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: 24ZNENdIgzpw/NnsrXol+gVgkAqK3bV7zrt+4iRk7x0=)
2: 5A927B8088BA11F0951D1687C4F9AE02.roa (hash: wZg2SjBeIs3sbQBsHHtlhSYA3htjRxqL+3CCyp3oKAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl
rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7373 (0x1ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
Validity
Not Before: May 20 16:11:34 2026 GMT
Not After : May 27 16:11:34 2026 GMT
Subject: CN=6a0ddd36-6dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:8b:fd:02:88:6d:d3:dd:c9:1d:dc:6c:ee:
ba:a6:d4:e1:58:77:7e:81:e6:d8:ef:d0:b2:5d:8d:
38:13:e2:ba:3a:05:84:18:69:eb:b7:c8:63:0a:25:
f7:a7:fb:2a:29:85:f0:22:20:61:97:31:31:c0:d6:
cf:e3:24:cb:87:90:d9:65:d6:6e:64:b6:50:48:f0:
aa:62:54:da:90:89:4b:11:76:ba:da:86:74:65:47:
94:45:3f:24:45:a3:42:00:d4:83:d7:29:8c:6f:2e:
68:80:cf:b1:2c:63:3f:37:7c:6a:30:54:04:c4:77:
3a:3f:b6:50:3d:c7:57:69:85:6e:cb:98:bd:bf:db:
40:00:af:94:3d:cb:6e:6f:ec:12:59:f2:14:1b:39:
7e:dd:6c:ad:19:e1:1c:04:d2:15:63:b4:5b:bc:43:
0a:2f:74:65:49:d4:c9:ba:b9:65:a2:b8:02:f8:5b:
6a:6e:53:22:4f:34:3f:2d:8f:da:76:96:3f:e2:18:
8b:70:98:70:ac:83:e4:ef:a5:c1:c3:d7:84:ea:35:
a0:31:2d:11:5d:68:dc:20:f6:e6:17:9e:1f:7d:87:
dc:8b:d3:22:28:68:5b:51:37:14:21:3b:f6:df:00:
3c:00:1d:34:5b:4f:cb:c6:cf:26:7c:22:21:0f:3a:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:B2:AC:70:54:D6:8E:9E:07:BF:5E:F7:3D:BC:C9:D6:2A:F4:75
X509v3 Authority Key Identifier:
keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:5c:1c:d7:bb:1c:51:f1:6b:c1:56:3e:05:7a:32:56:a4:1a:
d4:bf:fd:02:61:d9:23:6f:a1:ea:66:fb:2e:22:9e:68:47:73:
48:10:91:83:26:a1:02:1a:11:b6:5b:b9:c9:b8:56:70:65:56:
05:33:4f:c7:c1:07:2b:6a:1a:f8:24:79:51:00:a9:1d:ca:19:
c1:c3:ab:cd:c3:8b:8a:83:96:76:c1:ef:16:42:9e:0c:50:8a:
ad:8b:ff:c6:14:0f:c3:6a:93:0e:e0:74:a9:c5:e8:3c:b7:21:
80:c0:ae:b6:d0:61:a3:c4:48:8d:46:4c:9f:98:20:ca:b3:27:
96:af:d8:d5:54:05:65:1e:25:2b:9f:b5:02:b0:73:3b:49:0c:
85:13:1e:c2:a9:d4:c3:89:66:92:ca:74:f4:a0:1b:c7:83:40:
f3:8b:cd:48:f0:fb:3c:42:4d:82:70:d4:4e:30:4d:e6:28:5f:
51:08:07:2d:c3:2d:a9:52:02:80:06:86:48:d5:2f:8a:57:6e:
aa:bd:6c:e1:28:e2:e7:0c:34:18:6e:1d:5d:eb:77:fc:fd:a7:
b2:c0:03:3e:9a:67:a2:a6:02:c7:e4:ff:84:d4:3d:b0:2f:05:
5a:ba:8c:c7:0c:da:2a:32:ac:15:fc:20:58:07:e3:3d:e0:10:
fe:99:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:39 2026 by rpki-client