
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
File: rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft (raw, json)
Hash identifier: 6MYo45+pZHPFOvRwGfEEV+o2jqizn8FNFu4L+S/Y06I=
Subject key identifier: 1F:A7:FB:1E:01:EE:12:C2:AD:BB:1C:06:8A:59:78:24:78:0E:37:6D
Authority key identifier: AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D
Certificate issuer: /CN=A91ED65C/serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
Manifest number: 2D
Signing time: Mon 01 Jun 2026 09:32:37 +0000
Manifest this update: Mon 01 Jun 2026 09:32:37 +0000
Manifest next update: Mon 08 Jun 2026 09:32:37 +0000
Files and hashes: 1: rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl (hash: Tb5NF8CCyOZlhYnRfKxw/1yapvmHY080FTvQKw3+B9U=)
2: 39CF61B81E3F11F196621670303D8C67.roa (hash: EYfYn+U3VhT59mtwpdO2I7nb2Hr1Kjf7NC15GXsbD8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl
rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED65C, serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
Validity
Not Before: Jun 1 09:32:37 2026 GMT
Not After : Jun 8 09:32:37 2026 GMT
Subject: CN=6a1d51b5-a2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:20:c3:89:ef:64:4c:ad:e0:e5:5e:1d:49:
a4:f8:38:10:ee:83:68:93:cb:ea:75:c0:b1:ac:11:
ef:6e:ab:f2:a2:4b:30:dd:d4:fa:bc:99:60:f6:b9:
64:d9:c5:23:de:d7:3b:8e:3c:fc:63:26:8d:90:c0:
38:99:a6:be:f6:19:9f:ba:2d:d5:ec:80:02:8e:b3:
c0:62:ae:ee:a8:13:12:3d:70:6c:bf:7e:cc:04:83:
e8:4a:58:b0:33:31:4b:ae:27:76:31:e0:4a:78:de:
f2:09:bc:55:e1:48:e8:e7:cb:47:9b:28:25:ca:65:
4c:6e:80:33:c0:25:d0:d4:a7:b4:b6:11:85:a2:01:
65:d2:4c:30:ae:19:2c:2f:c5:ae:c6:79:25:62:8f:
69:7e:f1:44:19:20:60:4f:12:94:06:15:1c:82:8c:
17:95:f7:a6:4a:a9:5a:db:b9:db:08:bf:bf:da:ac:
01:dc:a4:40:a0:5c:c4:5e:0e:77:0a:3e:fb:e0:ea:
55:42:35:cd:e9:69:27:3f:bf:8d:e5:37:c7:40:c5:
5e:af:20:8a:55:5b:7c:90:9b:3a:b3:5d:e5:11:8e:
f0:15:2a:2a:55:c7:3b:d9:ec:68:c7:28:0e:2e:d8:
a2:fd:d5:91:fc:75:1a:e9:18:cb:77:70:af:05:2a:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:FB:1E:01:EE:12:C2:AD:BB:1C:06:8A:59:78:24:78:0E:37:6D
X509v3 Authority Key Identifier:
keyid:AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:ec:56:21:4d:25:d2:6f:fb:92:b0:d1:3f:8f:64:38:e9:63:
5f:f0:19:70:da:6c:9b:18:d2:8b:b8:bf:a5:70:ab:df:9c:e2:
4f:bf:56:f7:55:5e:dd:ad:28:f5:59:dd:bb:70:81:be:30:98:
c2:2e:ac:2c:50:d2:cf:09:01:63:66:1e:08:be:1b:50:f7:e8:
22:a4:4a:91:36:d6:30:1b:5f:b8:66:96:fd:fc:08:fa:c3:68:
7d:cf:d4:fe:ab:f0:b0:22:a9:46:a5:0b:81:0b:ca:ef:22:92:
c7:e3:76:9c:6d:94:43:dc:87:68:0c:98:40:98:9e:ee:d3:01:
1c:d6:07:72:aa:d1:b1:0c:5c:53:42:ad:19:ae:4b:8e:e0:b4:
df:72:98:e8:18:1a:5b:73:e0:dc:78:56:be:09:34:49:56:f8:
39:21:be:23:49:15:ce:70:d1:f5:73:7a:93:be:d5:ec:96:f2:
31:a0:f8:f7:a2:c6:b5:29:29:43:76:8e:e3:62:b8:84:aa:61:
aa:f5:6e:39:44:b1:51:03:39:64:ab:44:42:c9:9e:64:ef:19:
4e:9f:43:6a:ed:db:dd:f0:11:9d:2b:68:4e:57:1f:6b:73:e0:
be:e7:57:0e:8b:c2:d6:41:09:0d:93:c1:44:e5:e7:a8:cd:d1:
20:59:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:22:23 2026 by rpki-client