
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File: 53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier: eHF1Af8t+filvMMAbb1Ood+M/xt/tfieVsvtOiYf+AI=
Subject key identifier: 05:D8:84:EE:0C:E7:F5:6E:20:9D:28:67:BB:A7:A8:FF:BD:D6:FD:11
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer: /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number: 023A
Signing time: Thu 21 May 2026 02:35:40 +0000
Manifest this update: Thu 21 May 2026 02:35:40 +0000
Manifest next update: Thu 28 May 2026 02:35:40 +0000
Files and hashes: 1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: mBEydiRSb5CiygoN7KyKuhNn7Wew2M5YcJtldV5gJc0=)
2: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: NdG+EESk6AxDfSsv+CEMSa3ytYfunyOHRDzMUr7MG1A=)
3: F3210638F06D11ED9055A212C4F9AE02.roa (hash: h5xh1R0tEre7HmC/xYO8AoJTBuo2TI6B3de4UegYPas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Validity
Not Before: May 21 02:35:40 2026 GMT
Not After : May 28 02:35:40 2026 GMT
Subject: CN=6a0e6f7c-2f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:7c:99:5b:0e:fc:41:84:72:d4:56:e1:2e:
67:cc:ab:ad:68:b5:ee:fc:a4:7c:53:80:8c:98:cd:
66:52:3e:4b:0e:8d:f3:53:29:9a:24:11:87:e8:b1:
29:26:d2:0a:8b:32:a7:9c:b1:f9:1d:2c:1b:5d:a0:
21:71:3a:c2:1c:24:4b:84:60:43:b8:24:40:ed:21:
21:33:58:41:03:6a:61:16:e9:bb:01:6e:f3:44:ce:
12:85:2a:62:75:47:51:c3:b1:bf:f3:74:ea:24:d4:
99:fa:c5:8b:f2:a0:8d:ec:90:fb:64:d4:4a:ae:9c:
32:e3:68:a3:11:ed:25:b9:6b:fc:44:00:5d:8c:eb:
ea:cd:39:55:ed:e3:1e:82:e8:49:56:3e:5f:1e:23:
fa:04:9b:87:fb:7a:2c:f5:c6:b1:f8:a0:59:5c:6d:
39:d6:01:07:b3:13:74:af:d4:92:d1:ed:71:bc:fe:
ef:ca:e3:91:9a:05:19:b5:36:46:fe:5b:c7:f6:53:
ee:b0:06:ed:7d:1e:89:da:46:98:2c:a0:c3:bf:df:
63:11:fd:64:26:03:03:87:4c:c5:04:16:94:13:2b:
53:65:1b:df:26:5c:55:82:97:9d:aa:42:99:76:f1:
8e:a3:e3:8e:e7:a2:a9:54:b8:d9:97:8a:74:4e:e7:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D8:84:EE:0C:E7:F5:6E:20:9D:28:67:BB:A7:A8:FF:BD:D6:FD:11
X509v3 Authority Key Identifier:
keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:d5:65:19:bb:af:87:8b:b0:7f:86:f3:58:65:aa:3e:db:59:
92:a7:fc:c1:f3:76:c4:2f:f8:2b:b3:8c:7c:36:57:c5:be:6e:
9e:d1:98:84:17:19:f9:ab:86:34:85:1a:48:88:c5:3b:e3:e4:
db:d4:41:da:eb:7d:ff:94:5d:a3:9e:7f:6f:8d:0a:97:45:fe:
57:b0:7c:e2:6d:4c:53:e6:2f:92:37:d3:fe:fc:71:8e:6e:10:
dc:7d:77:86:42:5a:96:fa:8b:60:2c:b5:eb:12:18:d2:f8:a8:
03:53:06:af:e8:2d:37:6c:c7:57:c3:8e:45:d2:2c:2b:fb:13:
b8:22:4f:86:33:52:f1:35:e8:ad:65:25:1c:3d:06:f1:a0:da:
3b:ba:12:9e:57:bb:6c:24:d8:0e:cc:7f:b5:53:e7:62:ce:b8:
4d:62:d8:2e:3f:28:8d:ae:b2:86:25:77:43:48:c8:f8:d4:f3:
80:01:d0:77:b5:43:b2:47:a0:fd:78:c8:be:20:5b:fb:6b:da:
3d:e9:b1:86:2c:b2:2d:dd:93:4b:e3:d2:09:ef:7a:e9:35:89:
f6:8b:2f:52:2e:1e:f1:b4:b3:ca:0a:03:f3:87:0b:1c:6d:6d:
0e:c8:a0:bf:ab:b3:58:e5:60:fd:e1:95:69:eb:df:07:b7:3c:
a6:55:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:36:38 2026 by rpki-client