
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
File: v3H1vxFop4QFduAAbzu8ZfxINAs.mft (raw, json)
Hash identifier: pOS8ta0gTq2eNBVJmgdqvCLsUd/DpzL31c5sRmzh/Ys=
Subject key identifier: 79:76:46:61:FC:6A:A6:63:44:65:26:6F:07:59:0B:36:BA:5C:7C:75
Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Certificate issuer: /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
Manifest number: 0152
Signing time: Mon 01 Jun 2026 05:50:15 +0000
Manifest this update: Mon 01 Jun 2026 05:50:14 +0000
Manifest next update: Mon 08 Jun 2026 05:50:14 +0000
Files and hashes: 1: v3H1vxFop4QFduAAbzu8ZfxINAs.crl (hash: RALveoDAFoDb2qqRDBYuhatI7Wec7cFq0btGRX07qNg=)
2: 8580DC705AE311EF86351430C4F9AE02.roa (hash: 4qI4Ml9uIYG2SLfkLkYCessVGIjFflva1W8j/+okM6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Validity
Not Before: Jun 1 05:50:14 2026 GMT
Not After : Jun 8 05:50:14 2026 GMT
Subject: CN=6a1d1d96-f495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:ce:f0:ff:dc:50:0c:8e:73:da:78:7d:4b:
2d:e6:88:8c:30:8f:eb:c2:7e:4f:fa:24:36:f6:68:
b0:7a:2a:7d:55:8f:b9:f0:aa:6a:a5:a2:8d:8d:b2:
dc:12:44:fb:cc:61:0a:00:6f:e6:58:7d:a7:12:55:
84:d3:6b:9d:91:0a:cb:dc:2a:61:04:30:cb:99:70:
b7:a4:74:7f:8b:14:25:59:a1:80:0e:50:68:95:24:
ab:ed:f5:b0:c2:b6:6c:52:9b:0c:eb:c8:cc:f7:c1:
38:d5:e4:20:6e:48:5b:17:e9:da:7f:38:5c:1f:33:
93:03:76:ad:d4:a8:d5:b5:2a:02:5a:cf:a1:69:f6:
01:c9:61:a0:c2:36:aa:0d:52:e8:c8:08:76:6f:1e:
29:ac:ba:85:dd:a8:dd:d0:7c:1d:bb:87:44:5b:33:
22:2a:45:3e:35:29:3c:40:9b:37:7e:f4:9a:f4:97:
9a:8b:3a:0b:09:25:c7:01:1f:0c:78:af:bf:2f:1d:
95:03:cf:cc:8d:54:96:50:1b:ae:82:6d:84:ea:b9:
de:cd:8c:a4:9d:27:a5:da:ff:03:73:4e:e5:02:dc:
a0:a7:b1:7d:74:45:6d:17:a5:6a:70:c3:f5:78:c8:
ed:87:98:b8:c0:b1:f8:5c:17:7d:69:b9:9b:23:24:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:76:46:61:FC:6A:A6:63:44:65:26:6F:07:59:0B:36:BA:5C:7C:75
X509v3 Authority Key Identifier:
keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7d:1a:24:ad:95:10:8e:66:ec:23:b2:21:29:1f:41:27:d3:
be:57:83:da:61:16:9f:d6:7f:b5:a2:84:9e:e0:2a:a6:9c:ac:
1a:59:be:75:8f:1d:06:6e:c6:85:89:d1:03:2e:ac:ed:21:76:
51:76:e2:d1:c7:60:c6:4c:bf:03:1a:6d:56:c9:ac:98:c0:23:
12:8f:73:6e:28:42:de:c7:73:3a:89:4a:70:aa:8d:75:c0:04:
10:d6:1e:ea:7a:c7:84:b4:01:7b:3d:e1:fc:03:b2:c2:54:3b:
2c:23:ae:96:41:95:17:42:68:9b:26:22:90:10:90:cb:04:47:
ea:f3:e9:36:aa:e9:7b:61:d8:38:0e:8b:c7:e2:9c:68:ac:86:
b8:a9:fc:28:de:5b:37:05:90:7e:52:a5:46:f0:a3:f7:11:ea:
b8:bf:be:7b:77:70:4a:85:ab:c3:8d:fe:22:76:81:17:91:fe:
6b:53:08:f3:3f:1b:76:a8:60:f0:09:0b:45:6a:4e:c8:3f:2e:
84:2d:8f:ce:8b:54:86:5c:d1:eb:fd:6a:88:1b:9f:9a:07:37:
4e:10:7e:f6:9a:82:c4:ac:89:1b:f0:7a:7a:30:c9:24:b8:7f:
b8:39:eb:1e:74:81:a9:e3:ec:68:6d:33:09:4c:80:bd:7c:1d:
5a:92:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:59 2026 by rpki-client