
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
File: mV1wqX9WsuAAuspuykNz5iB7uY0.mft (raw, json)
Hash identifier: zbbhqFz2KxeRXQyMGRPq64pdE9Nue73734nA3DxGUyY=
Subject key identifier: 6A:4B:DE:A1:51:E2:6E:6F:46:F8:4F:F8:EE:DF:B5:47:96:16:59:29
Authority key identifier: 99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
Certificate issuer: /CN=A91EA850/serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
Manifest number: 51
Signing time: Mon 01 Jun 2026 09:05:37 +0000
Manifest this update: Mon 01 Jun 2026 09:05:37 +0000
Manifest next update: Mon 08 Jun 2026 09:05:37 +0000
Files and hashes: 1: mV1wqX9WsuAAuspuykNz5iB7uY0.crl (hash: ZGAKBcmygjY8xWNgH+zY5bdSxFP3ATaxBZpOfMzJBqc=)
2: CE6915C0ED3A11F0A5B7B5054B6F56BC.roa (hash: 18c0IjqREvvCbFh1OonuDqpoKVFbN0WBr8JimtNfp4Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA850, serialNumber=995D70A97F56B2E000BACA6ECA4373E6207BB98D
Validity
Not Before: Jun 1 09:05:37 2026 GMT
Not After : Jun 8 09:05:37 2026 GMT
Subject: CN=6a1d4b61-c138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:06:05:9e:29:0e:9c:5b:95:5c:1e:bc:62:
96:7a:fc:5e:85:d5:b1:75:c3:68:9d:83:96:e1:7f:
26:a6:ff:b0:dd:d3:e4:13:20:18:f2:11:2e:67:23:
08:9d:9c:2b:aa:a2:da:88:02:6f:7a:1d:09:2a:92:
79:15:15:ac:f4:80:df:3a:fb:fe:b1:16:35:33:7c:
15:b6:dc:08:bc:33:41:81:23:1b:fa:7c:16:fd:20:
6c:4f:e1:36:59:bd:50:62:ec:75:be:9b:99:4e:63:
8e:e1:e9:88:50:81:e2:cf:a5:7a:a2:a6:3f:4e:f8:
5d:4b:60:a0:5b:5d:f0:19:a5:ae:70:55:88:b4:db:
cb:81:af:92:3d:23:51:f6:27:e3:e8:68:dc:34:14:
2e:c1:8a:66:e5:a6:bb:41:0e:bf:ac:21:aa:6f:d0:
5d:18:6c:c7:d2:42:66:63:34:15:d7:6a:31:71:2f:
b3:83:48:f1:0c:b1:c0:aa:f2:17:04:df:ad:8d:3b:
57:e7:92:27:50:1e:0b:b3:8b:92:c5:a9:7f:92:44:
d0:04:7f:6e:4d:0f:78:04:b4:37:12:33:c0:67:11:
f7:55:c1:8d:aa:d5:22:35:30:97:23:be:7c:54:f0:
39:01:a2:28:8d:23:8b:e5:30:19:b3:f0:1d:b3:13:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4B:DE:A1:51:E2:6E:6F:46:F8:4F:F8:EE:DF:B5:47:96:16:59:29
X509v3 Authority Key Identifier:
keyid:99:5D:70:A9:7F:56:B2:E0:00:BA:CA:6E:CA:43:73:E6:20:7B:B9:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mV1wqX9WsuAAuspuykNz5iB7uY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA850/2DBC4948ED2711F0B397D379446F56BC/mV1wqX9WsuAAuspuykNz5iB7uY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:99:37:7f:ef:9e:33:87:0f:2e:da:18:75:61:ab:de:6b:c6:
ac:b0:77:c9:37:22:3c:15:18:b4:30:fa:8b:96:f6:90:11:91:
49:f3:9a:bb:d2:57:55:80:8c:5f:53:b6:d4:f5:d0:02:4d:cd:
ed:9c:c7:5b:d1:b0:08:08:8e:7c:bc:e4:e0:7f:41:44:b7:94:
a4:1c:05:76:5c:79:f3:dc:0d:71:89:a8:45:33:60:8f:c4:9b:
9b:96:16:8b:ad:63:44:f7:71:37:6b:b5:bd:e7:97:c3:09:e4:
2c:93:35:ef:84:00:54:2d:95:56:46:71:28:4e:c4:57:e4:bd:
20:71:b9:bc:00:17:8a:b5:48:6e:ba:84:e8:44:97:be:06:d5:
74:b1:43:28:f3:a3:40:f4:12:6a:97:f1:74:71:59:be:4e:44:
6e:fd:5b:ef:af:a6:5f:69:e5:1d:e3:9d:ca:76:ce:66:d6:c9:
ef:99:ad:b6:ff:ba:4a:e5:2f:56:96:34:d8:43:70:9b:46:94:
a0:49:ee:d6:c0:70:ce:e1:e2:ee:13:4f:78:a7:3b:9f:38:cf:
d5:c5:e8:76:b3:7a:89:4b:fe:17:42:76:c7:71:77:be:3a:c3:
7f:6c:0d:b8:07:1e:c7:28:2d:1f:76:c2:4d:59:c6:c1:f2:cb:
df:46:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:39 2026 by rpki-client