
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
File: Df2AHulmIu0X31XXqqZMce_5t70.mft (raw, json)
Hash identifier: y/iEXymRbcST5GDy83r+dGfD+1piFbU92Gnvpz3+jrE=
Subject key identifier: 84:C0:2C:50:D2:30:0C:1E:61:BB:64:6A:51:AC:D5:28:8C:6B:AA:BD
Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD
Certificate issuer: /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
Certificate serial: 0C40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
Manifest number: 0C37
Signing time: Wed 20 May 2026 18:46:29 +0000
Manifest this update: Wed 20 May 2026 18:46:29 +0000
Manifest next update: Wed 27 May 2026 18:46:29 +0000
Files and hashes: 1: Df2AHulmIu0X31XXqqZMce_5t70.crl (hash: oE313bdwDPZSZYvid5Kt9mxzVlF1l1J2q7J4i+W4BkM=)
2: 72F52C962AF511EA8C989441C4F9AE02.roa (hash: y7I7T2g0mI0lsLqMSMjVPNFG5gKcdIMy2Rd0f1B2C0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl
rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3136 (0xc40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
Validity
Not Before: May 20 18:46:29 2026 GMT
Not After : May 27 18:46:29 2026 GMT
Subject: CN=6a0e0185-6b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:2b:e2:8d:53:3b:7c:6c:5e:b2:55:d7:a9:
bc:a1:24:2b:7e:47:54:d9:42:97:d8:f4:83:90:ac:
12:d2:24:95:db:57:55:88:7e:d7:6f:de:6a:29:70:
93:dd:ba:5a:da:57:4a:7a:31:28:d2:fd:1f:8f:c0:
85:9b:df:88:35:85:52:a9:d9:96:a3:b0:1f:6a:fd:
f4:50:85:c3:30:01:63:46:77:6a:54:29:74:35:f7:
84:39:18:c3:43:96:42:f5:95:88:dc:cd:b7:0c:3e:
c3:21:51:89:8b:d9:b3:57:8e:74:1d:65:ba:05:d7:
c5:67:4e:ef:72:68:6d:d4:11:a7:70:1c:cb:1e:0d:
37:91:e3:a9:27:20:ce:14:8b:7c:26:eb:42:54:96:
f8:45:bb:1a:96:b4:2f:bf:0e:16:d1:88:bc:da:23:
4b:f0:44:f7:72:e2:61:e9:3c:05:6e:20:86:40:15:
c5:fd:2f:3e:ee:65:4e:f5:a2:e6:1f:0b:0a:4e:9a:
46:44:0b:d4:ce:d2:37:b2:66:e5:bb:81:9a:ff:0a:
80:3f:4a:4e:dc:b5:cb:cb:64:47:c4:63:34:6b:7a:
4b:0e:4a:ba:7a:d7:07:85:d5:51:9a:de:30:70:5a:
3b:ae:3c:b3:7a:2f:51:da:cc:1f:fd:ce:9d:f1:09:
58:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:2C:50:D2:30:0C:1E:61:BB:64:6A:51:AC:D5:28:8C:6B:AA:BD
X509v3 Authority Key Identifier:
keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:ad:a3:1a:28:ef:bc:65:93:a2:6e:8a:c3:b6:60:46:71:da:
7c:37:fb:5b:30:57:73:42:48:fe:ba:94:5b:ec:11:c3:06:93:
2b:f7:61:38:00:71:eb:4c:49:fd:6f:2a:7e:ba:c2:01:8f:70:
b3:a7:91:53:c2:37:0d:e0:67:c3:e2:12:6c:84:2f:8e:3e:ec:
09:53:7e:4d:31:d3:d5:b6:c5:78:9b:5a:29:53:56:63:b7:43:
39:e8:40:f9:b3:ee:45:a9:1b:a5:73:00:c9:5d:fc:3b:6e:17:
41:2d:97:2e:a6:f0:2a:4d:90:1e:de:8a:aa:6f:3e:b8:83:06:
25:4a:6b:bf:2c:e8:1d:a4:d8:19:7d:db:25:e3:2f:9d:08:00:
84:15:9d:a1:56:f9:11:e2:51:8c:39:6e:3a:08:c0:cb:ee:8a:
eb:d7:45:fe:31:1e:fd:45:76:d3:1d:6f:9f:0d:ff:fb:9c:63:
08:7e:6f:38:36:0e:d8:22:72:98:96:04:8a:ac:7c:33:35:da:
1c:40:6a:fe:b4:08:10:76:b2:c7:b2:44:49:63:d1:9a:96:c2:
cc:74:e1:f2:eb:8e:81:97:72:57:23:a1:33:cd:83:10:3d:45:
01:19:7f:57:22:cc:b5:09:79:f7:c2:40:20:53:e9:7c:ec:10:
70:87:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:27 2026 by rpki-client