
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
File: axGMFY4LjZuYTs3ceLJEgC5HBUc.mft (raw, json)
Hash identifier: wGXXJ4CeEtp8fG9O4tobFyiuQQ8+2sNKqPD7JaJ58SA=
Subject key identifier: 60:14:26:0B:E5:46:3F:15:D9:00:EF:24:94:2B:31:AD:AA:E8:5A:C9
Authority key identifier: 6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47
Certificate issuer: /CN=A91F1F2A/serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
Manifest number: 78
Signing time: Thu 21 May 2026 07:50:29 +0000
Manifest this update: Thu 21 May 2026 07:50:29 +0000
Manifest next update: Thu 28 May 2026 07:50:29 +0000
Files and hashes: 1: axGMFY4LjZuYTs3ceLJEgC5HBUc.crl (hash: XtC8KYSW8jLTwFjIBHqA3P9cbNf28ZTEqc/7gx39t3I=)
2: DE6BD6189F8F11F08976857BC4F9AE02.roa (hash: gEDKwshdmBsC3CB4+s8rKksc9ZXswjsTOQAKy74q070=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl
rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1F2A, serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547
Validity
Not Before: May 21 07:50:29 2026 GMT
Not After : May 28 07:50:29 2026 GMT
Subject: CN=6a0eb945-3c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:6c:df:06:ee:48:64:98:19:5d:29:97:58:
50:91:d0:b5:83:fc:88:dc:67:7e:e4:27:76:d6:96:
fa:42:fd:a7:3c:17:a0:23:d2:80:26:e4:ff:e1:38:
ec:86:a9:4c:e3:09:25:51:c4:f0:58:af:0f:3f:65:
a3:70:2d:27:d8:4c:2b:3a:ac:40:bf:d8:e9:eb:10:
09:9a:e4:5b:53:39:52:5b:25:1d:0f:4c:78:60:49:
cb:68:28:bb:0c:7f:15:60:b1:72:85:65:c4:ee:ce:
6a:f5:47:4d:eb:c7:ce:78:1c:c8:1a:29:0e:25:a8:
d6:d4:a1:01:7b:50:60:4d:6e:69:6c:55:8a:f1:68:
4b:ac:5d:d2:d7:63:c7:19:2d:51:9e:32:7c:0e:86:
eb:0d:da:52:2f:75:0f:1a:ab:dc:70:5d:52:ec:dd:
fa:30:5e:65:11:10:90:81:63:b9:23:36:86:65:b9:
14:45:f5:1f:ce:f4:49:2f:62:c9:13:3f:68:f5:f5:
93:1f:16:32:e4:11:0f:85:cb:a9:11:86:86:ee:f8:
17:25:03:f2:7d:bd:19:f7:64:13:ce:ee:1a:d0:d3:
e3:55:a4:ce:0d:47:7e:71:eb:39:70:70:2b:19:36:
f1:4d:9e:7b:c6:cc:b2:73:40:cc:23:fa:21:4a:ec:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:14:26:0B:E5:46:3F:15:D9:00:EF:24:94:2B:31:AD:AA:E8:5A:C9
X509v3 Authority Key Identifier:
keyid:6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:03:b1:c8:d4:4c:0b:2d:51:ae:41:96:f3:a7:1c:90:3a:cf:
05:c6:29:04:2c:35:9b:24:ec:32:7a:4b:ea:23:12:4f:8f:f4:
60:16:1f:89:7c:6b:55:bd:33:c7:2a:d6:34:1f:7c:92:b6:be:
83:77:3a:c0:03:c3:0e:01:50:98:24:25:5e:09:48:ef:b6:54:
ab:f5:9d:8b:3a:73:ee:c7:a6:ca:79:f8:e5:3a:fc:ca:b5:e3:
00:18:64:ae:ca:4a:dd:a6:0d:25:a0:58:2b:6b:cb:f5:df:78:
3a:66:00:07:5e:02:7a:30:af:73:08:c5:46:6b:12:42:7f:21:
b9:8e:18:34:93:7f:aa:32:9e:61:f1:0a:49:63:66:7d:ef:74:
9b:dc:41:3c:aa:6b:5d:73:a5:a3:aa:fa:54:6b:2a:ba:3f:ba:
89:57:c8:92:2e:9b:ab:51:2d:20:a9:5b:24:18:9e:04:2d:7a:
94:ef:92:92:cd:1d:48:b2:f1:c0:d2:e5:c4:17:2d:a7:40:82:
81:23:d8:a6:d8:16:fe:6e:36:6e:00:e4:ce:2e:22:e5:6a:0d:
c0:df:1b:bc:7a:d8:18:78:82:3f:f7:fe:43:70:4c:b8:2a:45:
5e:1d:47:32:87:63:01:0a:2a:e9:f8:60:67:4b:55:01:59:b3:
af:f9:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:45 2026 by rpki-client