
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File: M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier: cnhE3iMd8eYqKptngf/tQQjOEQ12Q7hes02UAtZHh/0=
Subject key identifier: E4:3C:E9:FC:2F:71:03:58:C0:87:F4:E3:72:43:85:0B:B2:25:5A:69
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number: 0187
Signing time: Sun 03 May 2026 04:43:28 +0000
Manifest this update: Sun 03 May 2026 04:43:28 +0000
Manifest next update: Sun 10 May 2026 04:43:28 +0000
Files and hashes: 1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: niQtqdeJzRUQRNmXNGIe4LJoCjgoPhqnmXbm3SGF2nU=)
2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: eAadD5v+l/HQoMCel3Oba4UPEsg3F4rOQLerPh1yclk=)
3: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: 9ddaJnb2vB/K5havaxcmrS9aclGiXpdtn6ykn2Lek+o=)
4: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: 3lew0eWd1qOFTsxVuUp/2jEVgW6mEPimb05KX288f8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Validity
Not Before: May 3 04:43:28 2026 GMT
Not After : May 10 04:43:28 2026 GMT
Subject: CN=69f6d270-9850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:60:07:a5:c0:27:5c:26:5e:5d:65:98:d8:
a6:d7:71:6f:3b:7e:96:67:c0:a6:c7:88:b8:0f:3a:
3e:6c:05:1a:bc:76:0e:bb:93:4c:81:5f:cc:72:0b:
bb:be:fa:60:76:c9:99:fa:d9:cf:23:82:77:ae:09:
ea:8e:99:ba:df:d0:54:b4:12:d9:e3:ef:72:00:95:
aa:cc:9c:c6:ee:3c:65:d4:ad:41:11:02:71:92:a7:
bf:82:b7:c5:43:e2:b0:a1:b8:01:28:f3:63:6d:33:
3c:6b:ae:a5:de:45:66:f6:57:6f:3f:30:33:9a:12:
b7:c0:2e:94:fe:74:1e:a9:99:ea:6f:21:02:b5:70:
6c:12:3d:45:84:69:51:20:11:7b:20:bb:27:fa:e9:
70:0a:8c:4f:11:8f:d5:9c:08:69:3b:ac:06:82:53:
39:36:33:82:93:f6:a8:6f:c5:7e:b2:1d:b6:73:85:
96:96:73:df:d7:65:18:e9:65:f6:08:32:70:b6:5a:
2b:11:54:94:1c:74:2d:9a:25:6d:34:c0:c0:c0:15:
62:2f:41:8d:8e:be:ee:9e:0c:38:63:80:18:b1:b7:
65:aa:de:29:26:20:27:c0:1a:ff:3d:de:0d:4e:03:
97:34:03:86:6f:b3:8a:9e:0d:82:61:ff:b1:2a:ce:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:E9:FC:2F:71:03:58:C0:87:F4:E3:72:43:85:0B:B2:25:5A:69
X509v3 Authority Key Identifier:
keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5e:00:91:aa:61:6b:ba:19:08:a5:35:ae:ed:f3:5f:bf:79:
68:e3:ea:3b:b3:f6:f7:c9:72:72:75:e3:27:cb:0f:c5:e8:1b:
b2:b4:f8:74:b6:fc:df:81:f0:a1:34:9b:2b:70:b1:5c:c2:d1:
5d:50:f2:74:66:f2:54:03:67:da:f0:64:a3:20:c2:1e:7e:e1:
fa:9d:df:b6:2a:9f:23:86:c6:ae:a5:a7:f9:42:ff:14:e9:5b:
4f:d0:a1:df:ce:dd:58:5b:e5:e1:ee:84:3d:6c:d0:97:87:06:
4c:80:a5:27:7b:a7:31:3a:d1:74:00:d9:71:5d:66:1b:2f:de:
41:27:49:bc:ad:a7:f9:5e:65:4a:15:b5:a6:57:a9:39:08:81:
b7:30:e3:84:e5:43:0f:7f:d0:b9:29:96:f2:10:57:c4:48:fc:
56:b7:fc:4d:6c:76:e2:61:48:81:90:72:08:52:5c:11:65:45:
d4:b5:6a:c6:a4:33:b5:80:a5:94:0f:51:23:39:49:1c:5a:f3:
c0:6d:ea:1e:f9:ad:f3:fd:90:e2:50:d6:cf:9e:81:cf:cd:65:
20:8f:fb:7d:02:61:e3:26:11:e1:cf:a5:98:d5:b0:c2:f0:3d:
ee:11:97:0d:79:d0:ea:e5:57:26:b9:c8:29:64:cc:ca:42:d1:
e8:d3:f1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:15:23 2026 by rpki-client