
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
File: ciYIDnxlJSNDlihmsxOfAjhyxAI.mft (raw, json)
Hash identifier: PClXSoaBsetGLXtCcemiglBYmwNQ1Wnccva71a62pNo=
Subject key identifier: 32:E4:81:4E:D8:8C:20:BB:CF:2B:57:A7:5B:2E:20:DC:1B:7B:1B:9D
Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02
Certificate issuer: /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
Manifest number: 015C
Signing time: Tue 23 Jun 2026 05:10:14 +0000
Manifest this update: Tue 23 Jun 2026 05:10:13 +0000
Manifest next update: Tue 30 Jun 2026 05:10:13 +0000
Files and hashes: 1: ciYIDnxlJSNDlihmsxOfAjhyxAI.crl (hash: g6fEH+EQKtMljRZv6BSYhd5p2UVW0aaRPPuTi7y/+y8=)
2: C0C401905AE311EF90924C30C4F9AE02.roa (hash: rKKs75f3Fq0WXiFUQVZhwV3/C+6KDS0+3S6WBSvsbeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl
rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402
Validity
Not Before: Jun 23 05:10:13 2026 GMT
Not After : Jun 30 05:10:13 2026 GMT
Subject: CN=6a3a1536-3a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:44:8c:f7:d1:89:08:5f:91:c1:34:0b:81:
9c:16:34:03:5d:f3:12:79:0a:b2:8a:cf:37:2c:80:
4f:e5:66:5a:a6:b6:5c:fd:14:09:66:b6:28:fb:4b:
61:70:c1:71:04:c5:06:1d:26:33:03:44:6c:7f:56:
a2:83:85:cc:20:91:ad:44:d3:3d:b8:64:78:6e:0d:
16:1a:7b:4d:7b:b2:27:6e:e9:58:b5:2c:a5:37:5c:
f1:8b:d8:dc:4c:1b:3a:df:99:a5:16:d2:36:db:0b:
e4:ce:5b:4c:1e:bf:e7:05:f5:1c:6c:d4:e2:62:22:
07:68:ee:b9:c2:9f:91:a8:00:62:48:69:70:9f:9d:
20:fd:53:c9:4c:2d:27:fe:47:a9:30:9d:a0:e9:57:
cf:27:d5:39:56:2a:33:22:59:86:c7:ef:1b:12:b5:
ce:55:07:85:9b:44:10:02:0f:36:e9:69:30:b9:47:
ba:e2:bf:ec:f8:4d:bf:3d:b0:3f:d1:71:27:c9:e2:
17:fb:13:a3:f8:96:4f:6f:b9:f2:16:65:81:10:74:
25:e0:62:db:d8:1c:bd:a6:22:b7:3c:52:3c:4c:9a:
94:af:82:78:28:9f:ef:59:92:20:ef:fe:aa:f8:02:
b6:0c:e0:6d:77:7b:ba:de:17:22:08:2d:8d:c1:90:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:81:4E:D8:8C:20:BB:CF:2B:57:A7:5B:2E:20:DC:1B:7B:1B:9D
X509v3 Authority Key Identifier:
keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bc:83:93:df:bb:95:11:5f:04:03:98:58:05:56:22:3c:37:
98:57:a6:78:c2:b9:b7:38:5b:b7:71:2d:14:30:4e:0a:a8:a6:
4d:2f:19:57:6d:f7:4e:de:79:cc:81:13:65:9c:e6:25:2d:35:
81:6c:14:df:e1:96:be:d7:1d:3a:62:04:d6:6f:a1:4f:82:ac:
c7:97:00:f7:7e:20:5b:cc:1f:aa:90:2a:16:39:8c:7e:18:47:
c0:84:d5:b1:74:9e:7c:16:6e:9a:33:ce:7e:90:66:51:87:de:
9d:3d:d2:b4:94:7c:29:6b:79:1d:b7:0c:d3:d5:67:e6:75:ff:
d4:b6:44:6f:b9:2f:74:74:b7:6a:a9:d3:b6:73:ae:0c:fe:30:
25:1d:c5:f1:47:8e:ba:e4:20:94:6f:a3:f4:f0:c0:a5:c6:56:
8b:3e:87:94:d5:cd:72:02:cd:52:d4:ca:bd:33:93:c7:36:c9:
b3:e7:00:34:f0:8b:92:5c:df:7e:01:8d:06:fa:80:01:7f:92:
11:5a:2f:0f:5b:34:7a:aa:46:8a:4f:bf:72:b4:28:bb:d3:96:
b5:00:48:7f:ef:cb:89:f9:d0:fe:bd:6e:3d:ab:20:8b:db:50:
ce:45:3b:12:b8:b0:5e:60:9a:a8:7c:ad:fe:c0:b9:04:57:0d:
96:a5:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:26 2026 by rpki-client