
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
File: j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json)
Hash identifier: 6c/V4XUJ3X8iQeEfmLjU8306a1uJu4iwRQc7aAKAt30=
Subject key identifier: D6:35:DD:82:7A:C3:D5:5A:31:BD:D9:90:18:85:84:30:EF:D9:0E:54
Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
Certificate issuer: /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Certificate serial: 02ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
Manifest number: 02EC
Signing time: Thu 21 May 2026 01:22:30 +0000
Manifest this update: Thu 21 May 2026 01:22:29 +0000
Manifest next update: Thu 28 May 2026 01:22:29 +0000
Files and hashes: 1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: BJ7hziimJ2P75rzonLz0ynujwSTRE/DK+mX8+BdGo7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Validity
Not Before: May 21 01:22:29 2026 GMT
Not After : May 28 01:22:29 2026 GMT
Subject: CN=6a0e5e56-5561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:51:70:8e:83:06:0e:8e:ec:f5:72:ea:f2:
b4:07:4e:b6:d8:e2:1b:ec:0b:a0:34:32:51:92:4c:
7c:d7:c8:42:ef:59:24:0f:ab:b2:db:64:db:21:2f:
f4:eb:88:f2:de:4b:35:0d:13:af:ae:40:a5:82:79:
8b:7a:95:27:50:e5:ef:2f:db:ec:28:0f:46:89:77:
b1:63:92:37:11:15:b9:f8:d9:29:dd:ad:df:19:6e:
08:77:8f:46:d5:a0:88:2d:db:b0:1d:c1:1e:1f:50:
7b:d3:db:d3:b9:03:67:64:fa:de:5a:49:02:a2:e2:
67:80:65:cb:c1:c4:c6:f8:05:8a:6c:ad:87:95:f6:
73:33:92:47:02:a1:e6:71:68:11:5c:42:7f:21:9d:
9e:7d:03:73:8c:58:bb:2f:41:cb:a9:4d:fc:52:52:
d5:7d:af:e7:97:f0:d2:84:9c:e6:a6:cf:5c:fb:ca:
22:5d:52:76:7c:65:3c:06:b4:1b:b8:cb:29:43:38:
c0:52:7c:6b:90:95:bf:9b:a9:9e:7b:70:a8:7b:3c:
ca:0a:07:00:b5:6f:be:84:9a:34:8d:51:53:9c:e0:
1e:ac:d9:2c:01:f9:09:e3:4a:15:a7:b4:b0:6b:e0:
60:4a:78:85:67:fb:54:3d:92:5e:31:53:a0:ae:37:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:35:DD:82:7A:C3:D5:5A:31:BD:D9:90:18:85:84:30:EF:D9:0E:54
X509v3 Authority Key Identifier:
keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:8b:dc:91:a7:34:5d:0e:74:e7:82:8a:ed:64:29:d2:56:05:
9c:5e:c5:3f:b5:14:79:03:96:22:b9:14:a2:b0:32:a0:96:b0:
45:59:87:29:8f:1f:62:1d:25:c3:3b:e6:b8:d1:91:b6:39:c5:
7e:fc:e5:d7:0b:bd:fa:38:41:47:83:65:75:fa:b6:d6:4d:77:
7c:b5:38:a6:61:d6:5d:cb:51:5a:16:6b:bb:38:da:94:59:bc:
5d:10:6f:2f:ae:ff:a7:c8:88:76:7b:56:db:5e:4d:fe:ff:6a:
a2:9a:01:41:f1:fd:24:65:f4:7a:9a:df:80:4b:f1:c9:e0:aa:
d2:63:63:ee:a4:33:8d:b4:cc:43:a6:ce:8c:d1:0b:9a:52:64:
91:09:28:9b:36:86:f1:76:eb:79:4d:e6:5a:ea:a1:ed:fb:08:
2a:53:81:07:0c:5b:b5:82:d0:73:2b:57:50:ac:c7:01:81:af:
dc:f0:8e:b8:cc:93:ed:68:83:c9:65:08:e0:8f:e3:1a:5d:09:
4e:dc:9f:b9:c5:6e:2a:66:16:d7:8a:40:0f:7c:93:29:d2:7b:
4d:ae:f9:db:a4:d8:c2:38:9b:e5:d8:d3:11:65:ac:8a:98:b6:
55:2c:a3:cb:62:07:35:cf:06:4a:36:00:29:c7:74:38:ce:0b:
3f:57:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:52 2026 by rpki-client