
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
File: jKszW_vzkiyQjyAPyLk4vIHMkwI.mft (raw, json)
Hash identifier: mR5j2aHW7aSlJnuFueg5gSxDhbS3pjQ32BrqelTlWjA=
Subject key identifier: 3A:9A:45:28:A8:64:C0:70:6B:0C:E9:73:95:FD:9F:2F:AB:8A:11:7C
Authority key identifier: 8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02
Certificate issuer: /CN=A91F8AD4/serialNumber=8CAB335BFBF3922C908F200FC8B938BC81CC9302
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
Manifest number: 04
Signing time: Mon 01 Jun 2026 10:01:54 +0000
Manifest this update: Mon 01 Jun 2026 10:01:54 +0000
Manifest next update: Mon 08 Jun 2026 10:01:54 +0000
Files and hashes: 1: jKszW_vzkiyQjyAPyLk4vIHMkwI.crl (hash: lfqH89ua9rAeAbLJY+IHYDY4bv2/U4JDM5DhexmF7XE=)
2: 0D504AD25B6411F1BCACB5ED9D833773.roa (hash: 3iyJLgKvX9P6A2EKlBdLN7L+RbKwbi8Xb0hFQxLvoas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.crl
rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 10:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8AD4, serialNumber=8CAB335BFBF3922C908F200FC8B938BC81CC9302
Validity
Not Before: Jun 1 10:01:54 2026 GMT
Not After : Jun 8 10:01:54 2026 GMT
Subject: CN=6a1d5892-7843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:05:b0:f5:3d:b1:17:ee:ef:ac:32:4e:e2:a2:
da:78:23:6d:e9:55:70:b6:97:1d:29:86:10:37:f5:
7e:ed:ed:18:e1:21:66:46:fb:03:4f:46:03:52:11:
5d:ba:4c:ca:8a:c7:15:50:ee:b5:d1:0a:f4:a6:3c:
1a:db:9e:40:2d:03:a3:fd:11:a0:7b:9a:de:19:88:
57:b8:d2:65:74:a4:52:e8:42:cd:dd:7d:7d:d9:26:
7a:5f:60:a3:18:a9:12:4f:2b:45:00:0d:2b:12:6f:
2a:a0:4e:e9:7e:fa:32:82:27:c2:60:66:73:dd:1e:
70:26:ca:99:2a:eb:5a:3c:5b:9c:19:2c:f0:fb:a4:
ce:64:9e:35:73:93:1d:83:db:81:48:b7:99:2d:44:
7c:df:bf:8d:c5:1e:26:9a:e1:5e:d5:ca:e2:2f:19:
c2:0c:23:74:a7:ba:b2:06:d4:86:5e:31:15:c3:ad:
a4:f1:52:00:ab:21:e0:a3:9b:aa:73:e3:80:23:2c:
0c:27:17:d1:a4:d7:46:7c:63:c0:f1:fb:8c:99:33:
30:89:5e:ab:cf:63:63:89:69:93:b1:84:a9:c9:cd:
c4:26:4b:cc:77:17:8d:06:95:35:b7:1c:71:66:06:
a1:75:7d:ac:7e:5d:d5:74:a7:b7:52:08:8c:35:ee:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:45:28:A8:64:C0:70:6B:0C:E9:73:95:FD:9F:2F:AB:8A:11:7C
X509v3 Authority Key Identifier:
keyid:8C:AB:33:5B:FB:F3:92:2C:90:8F:20:0F:C8:B9:38:BC:81:CC:93:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jKszW_vzkiyQjyAPyLk4vIHMkwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/9FA14A8C5B6211F19340B9EE9C833773/jKszW_vzkiyQjyAPyLk4vIHMkwI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:c3:cd:b2:65:a1:8c:d4:ed:7f:46:11:09:c3:9b:5f:3c:
0f:bd:d0:8a:c2:c7:b6:07:10:cc:2c:76:1c:cb:a7:19:b3:2e:
48:65:17:26:a8:57:4f:f4:49:5e:64:c3:62:59:70:77:69:d7:
36:b4:2d:b4:a6:17:4d:e0:0c:e6:47:c7:ad:f2:07:c8:1a:22:
c6:97:cb:af:ef:ae:71:e0:b2:07:1e:b9:3c:14:28:ac:74:05:
42:95:27:03:39:e6:0c:a8:4f:ea:fe:03:22:f1:f6:15:68:f8:
b1:c3:c4:4f:0f:61:54:ed:9e:99:b1:bf:eb:7b:76:b5:e5:32:
e3:a7:8a:23:d8:72:62:a2:08:8f:ce:85:70:c9:88:c9:63:3e:
31:5b:28:b7:97:91:66:b5:5d:04:e8:6f:5e:94:7e:c2:45:00:
4e:11:49:c4:95:ee:d1:ea:36:46:ec:1d:3a:bf:7e:83:76:fc:
2d:dd:97:f1:5d:ab:00:9d:95:c4:1a:df:b1:cc:87:a7:41:02:
7e:52:bc:d9:a8:4c:a4:db:0d:c0:d7:a7:1e:2c:49:23:b9:38:
6b:b7:55:9e:e6:44:24:fc:35:14:d6:39:09:35:7a:cb:1a:fc:
9a:00:13:3d:9a:07:9a:34:92:8e:ec:9d:fb:54:6b:e6:14:1d:
8c:eb:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:50 2026 by rpki-client