
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json)
Hash identifier: mttws9gt0lp9iAvxdfXJmHgtvHAbQylxrHx3wKJxVio=
Subject key identifier: 2B:FB:10:17:D5:55:B7:C6:59:AB:5B:67:BF:E8:A2:17:5F:B7:8F:62
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 0617
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
Manifest number: 05BB
Signing time: Tue 12 May 2026 23:21:46 +0000
Manifest this update: Tue 12 May 2026 23:21:45 +0000
Manifest next update: Tue 19 May 2026 23:21:45 +0000
Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: sD0I8nmDJ1/BVqdgqISQgdkKw+FZF9XuBATKh+qosTM=)
2: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: 1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=)
3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ=)
4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: p0QtasiXfN8/dE9L47jUX4sIVuhY7a3tPfYaZVlyQMU=)
5: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=)
6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9T7eAkjvrOk7zwMcNgqYoD07VX3V7BOca4enSrOlqyo=)
7: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: AgzdJ8YeczC0jH58Lt1PJBql93I4ssj/fkdCRiuIJTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1559 (0x617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: May 12 23:21:45 2026 GMT
Not After : May 19 23:21:45 2026 GMT
Subject: CN=6a03b60a-9f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:55:d1:2d:a2:b2:26:06:89:39:81:8a:d6:
73:b0:82:a4:b3:71:7d:f6:35:c9:54:ce:02:3f:64:
98:e6:8d:72:01:56:2d:6e:d1:e3:c4:5c:1d:57:74:
f6:ee:c0:78:35:36:0f:b7:6e:3e:f4:a2:f9:46:0b:
b4:ee:bf:5c:56:cf:f8:62:2c:e3:1f:e2:f6:8c:3f:
8d:a6:ca:f2:23:e5:93:c0:45:96:b6:46:a5:c4:88:
f6:e5:d5:b8:40:4c:6c:95:7d:a7:32:b1:1b:12:4e:
a2:e9:08:0e:36:d6:92:ab:4c:ff:c4:e5:fc:f7:fc:
e2:7b:6e:d5:64:c9:0d:e4:bb:b6:fc:3f:24:d9:3b:
32:d1:97:9a:18:cb:75:7d:ff:ed:78:cd:44:23:ae:
b5:61:5b:fd:b9:72:c0:f2:a4:84:5f:17:6e:ae:da:
1a:fb:b5:2a:72:4b:6b:b6:dc:3e:ca:16:50:0a:71:
ca:fc:8d:6c:33:d8:5b:8c:42:7c:b9:a9:6a:13:67:
7f:01:6b:52:4d:cc:00:dc:87:b3:a2:8f:30:ef:f5:
b5:2e:4f:99:ff:89:1a:9a:8b:24:d0:a3:88:7e:08:
8c:a4:68:1e:fe:e2:92:db:20:49:02:95:f8:f1:a8:
24:04:19:4a:c3:28:30:e4:05:89:c1:d4:8c:18:f2:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:10:17:D5:55:B7:C6:59:AB:5B:67:BF:E8:A2:17:5F:B7:8F:62
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:02:21:81:01:7f:61:b8:47:2a:02:4d:46:16:21:a7:00:50:
ef:f1:f4:f1:38:3e:d3:0c:a5:db:ef:86:03:04:67:3b:bf:0a:
96:c2:60:21:33:65:70:e3:30:ed:28:53:94:e6:36:61:b5:26:
11:35:5e:d6:2a:bf:71:3d:73:77:1f:f1:7c:90:68:a5:6d:78:
31:f0:8b:0f:2e:84:dc:14:80:fc:90:9d:e9:ec:c8:e5:dc:90:
bc:bc:58:eb:a9:04:77:09:08:bc:e0:87:cb:b5:ac:ab:79:7c:
4b:b1:7e:4a:0c:da:b9:46:52:72:3c:50:3d:ce:f8:f0:33:f6:
29:db:7a:86:2f:2b:a2:7b:60:50:9d:e7:ec:cc:9c:be:61:2f:
93:32:44:41:69:d9:aa:03:4c:41:48:fd:c3:93:60:d6:b4:78:
1f:aa:d5:80:0b:89:63:28:2d:bb:db:f2:4d:2c:4d:6f:b3:32:
24:26:af:18:94:27:d0:74:0b:20:30:94:1c:c8:a1:d9:de:69:
c5:89:1f:11:c0:4e:6c:06:4e:3c:9d:47:a1:27:6e:d4:7f:58:
7c:45:ae:c1:9d:e9:37:97:5c:cf:51:ed:60:d8:21:82:e0:7d:
36:63:9d:b1:25:8b:4c:d0:38:03:d2:85:c7:49:03:f3:f6:d9:
38:f3:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 13:04:01 2026 by rpki-client