
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
File: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json)
Hash identifier: JmT4h2QiviihakAXOqShGE3riCvL9a0cWHBe+VfIlkI=
Subject key identifier: 84:39:71:CA:B8:93:FD:7A:55:A3:96:83:84:68:F3:E5:90:C8:B9:B3
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Certificate issuer: /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial: 08A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
Manifest number: 0896
Signing time: Tue 02 Jun 2026 20:36:11 +0000
Manifest this update: Tue 02 Jun 2026 20:36:11 +0000
Manifest next update: Tue 09 Jun 2026 20:36:11 +0000
Files and hashes: 1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: hZecuM9nulPf7aC6drt2GIMMTHBU4FcHeIVfd3HzKVk=)
2: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: y7Iz2rPJdAOlGQ4MtuTgFktbk+yS4xEJ9nZlCdDX5sY=)
3: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: 8lKBmwh4w3njS1t99CtRQ9cpWrcLS15+u5yFjKAOlNQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Validity
Not Before: Jun 2 20:36:11 2026 GMT
Not After : Jun 9 20:36:11 2026 GMT
Subject: CN=6a1f3ebb-5a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:e2:f9:11:03:9d:f8:16:3c:44:44:1d:93:
96:d1:f8:41:0c:72:ef:0a:70:09:a7:6a:33:d1:8e:
14:86:cf:ab:f2:6e:37:5b:fd:56:08:0d:d2:db:76:
cb:1c:46:b9:7f:ba:28:5a:10:f1:94:bf:b4:66:92:
94:e8:fc:04:df:c0:bc:23:af:e2:12:7c:70:35:b1:
74:74:a2:9c:9e:c4:86:e7:0e:9a:83:59:7e:16:8d:
20:3a:32:68:64:38:6c:08:7a:57:ab:57:c0:cb:1c:
6f:ed:cc:e3:b7:81:3e:a3:37:1d:f9:18:fa:be:62:
31:b3:f4:45:63:e8:1b:7f:4d:8e:3f:06:bb:ea:84:
f0:7e:21:96:fc:e3:c2:5b:9e:fc:b8:19:95:52:f0:
24:e8:0a:f1:3f:93:77:0f:ee:72:2b:53:59:ae:bc:
e6:5f:7a:9d:77:f7:23:95:30:5f:13:7a:98:a6:55:
27:cc:28:a7:20:ea:af:5b:2f:aa:c6:24:5c:54:28:
d0:4b:f0:6d:e8:fd:ce:63:48:59:68:9b:51:db:ec:
82:cc:5d:08:9f:29:d5:9d:ee:9f:96:93:02:9f:01:
c8:57:13:3a:06:d6:d5:2b:c2:ea:27:f2:dc:ec:38:
59:ff:42:58:f8:3a:6a:83:9a:c5:7a:e7:f7:c5:5e:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:71:CA:B8:93:FD:7A:55:A3:96:83:84:68:F3:E5:90:C8:B9:B3
X509v3 Authority Key Identifier:
keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:3a:b3:f5:93:b4:32:82:40:56:cd:a0:80:80:54:91:20:0e:
32:d6:35:fb:62:87:cd:7e:76:0e:87:bc:45:8c:cb:11:8c:40:
d9:aa:9c:33:16:f7:c0:9d:64:01:73:4e:ee:9c:2e:1b:91:46:
c9:fc:df:56:2d:ec:50:68:a3:14:7d:14:94:7f:f1:3e:9a:36:
b9:35:95:1e:84:68:bc:5d:a4:d0:b8:39:fc:72:23:e0:89:7b:
c0:e5:d3:fb:cb:61:05:e2:c7:04:97:ee:53:61:ce:3b:a7:71:
57:72:7e:83:9b:cd:90:10:5a:81:38:16:72:0d:06:2e:0a:ba:
17:e0:df:e1:5e:ed:cf:3f:22:da:dc:86:af:b9:4b:f6:cc:2b:
f5:70:86:99:57:cc:c5:91:81:94:64:bf:43:2f:9b:a5:48:2c:
bf:60:29:18:48:84:5b:5b:20:c0:d8:69:72:95:5e:b9:73:43:
d9:c5:eb:ce:d8:17:16:d3:33:01:4f:ac:83:b9:b8:42:8b:47:
72:06:22:e8:30:b7:5e:4c:2b:f8:20:f8:cf:2f:fc:22:d9:ed:
73:6a:3d:fe:52:fa:83:14:b5:5f:87:72:60:01:09:c8:ca:19:
ff:72:0b:5f:63:73:94:30:f8:5e:cd:3f:6f:02:2b:58:a2:bf:
3b:62:88:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:23:35 2026 by rpki-client