
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json)
Hash identifier: y7FEH/ZAiIDvcfYdeDYyJf23K+Vk/PJeMzzdiNLJIi4=
Subject key identifier: 09:5B:65:33:1D:CD:B8:3D:5F:EF:39:B6:9E:26:87:64:DC:5A:CB:19
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial: 2369
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
Manifest number: 2356
Signing time: Wed 20 May 2026 15:49:52 +0000
Manifest this update: Wed 20 May 2026 15:49:51 +0000
Manifest next update: Wed 27 May 2026 15:49:51 +0000
Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: wuXyefgtZlAryHu8/mR8TJj+A5ufXZFw4/QiKrltjCo=)
2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: s8TTg9P3l8A2JinlhgnrgySiNnwBKzYcLgd2CwnP9lU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9065 (0x2369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Validity
Not Before: May 20 15:49:51 2026 GMT
Not After : May 27 15:49:51 2026 GMT
Subject: CN=6a0dd820-5531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:e6:02:d9:94:b0:0c:d4:ef:b3:d7:82:49:
c6:3e:a4:ec:ff:99:be:54:6d:e3:56:ed:30:b2:ed:
54:be:74:1a:d1:77:d7:e7:ea:ff:ea:6d:c8:3d:d1:
65:9d:7e:ff:75:d5:84:25:bc:17:32:78:d6:1c:7e:
45:c9:cc:f1:8c:c5:5d:d8:ba:d6:9a:82:50:1b:41:
d9:a6:a0:9e:5d:5c:ab:17:b2:bf:84:ee:55:63:b1:
06:9b:01:8c:ad:e5:6e:6c:bc:da:b0:b1:00:42:8f:
74:e3:61:7f:cf:06:a4:87:39:77:cd:67:33:9a:02:
57:7b:02:89:cc:6f:62:74:1e:fd:4f:0f:ad:7b:7f:
8b:9f:38:e8:0f:f5:48:53:10:94:b7:40:b6:3c:d2:
21:77:8f:20:20:e9:aa:62:92:29:70:50:98:7b:22:
1f:31:34:73:4c:7b:02:95:f8:c5:4d:66:e0:29:dc:
05:84:68:8e:72:32:41:10:d5:ba:24:3f:96:5e:ea:
aa:db:d1:e0:67:ed:96:cb:be:9d:e8:30:05:1c:ce:
cb:8b:a9:1f:0e:c9:7f:ed:66:80:05:84:df:14:dd:
37:b4:46:2d:cf:67:b6:65:eb:8e:36:e8:90:24:05:
64:46:55:f9:41:07:f1:60:13:17:7a:63:60:48:7e:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:65:33:1D:CD:B8:3D:5F:EF:39:B6:9E:26:87:64:DC:5A:CB:19
X509v3 Authority Key Identifier:
keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c1:b0:37:9a:b0:fd:5a:43:d6:2c:7d:ee:a5:28:b4:b1:d9:
be:76:91:6c:ec:bc:50:b5:cc:0a:2d:d4:8a:43:2f:75:8d:94:
67:0c:ac:1d:02:e2:0a:46:07:7b:ea:7e:30:c4:d1:3f:dd:d5:
ed:81:05:e7:58:cd:18:88:1a:e4:45:25:ba:8e:ed:a0:c7:cb:
1d:5c:c8:d0:6c:02:0c:53:a4:b6:9b:bb:dc:0e:6a:34:e3:22:
45:1d:17:2c:d0:88:a3:17:f5:24:65:cc:7a:83:20:5e:eb:13:
ce:be:20:6d:78:68:dd:7b:62:a0:04:ba:69:6d:1d:19:21:eb:
38:d7:99:47:d1:33:77:c6:5b:ad:76:e3:5e:57:09:a4:e8:fd:
a9:27:52:46:29:cb:5d:1b:93:f3:db:7b:07:85:38:ad:7c:e8:
16:50:f8:aa:9b:c2:35:49:09:eb:f5:74:f4:b0:9e:a0:f7:90:
a2:34:71:1b:5b:15:c4:bd:c6:3a:b3:f7:1f:73:76:9d:c7:c4:
1f:a2:ef:55:0e:c8:17:52:b6:45:e1:4e:c4:a4:d1:51:ce:32:
40:c5:00:38:fe:53:28:df:2a:f9:ad:8f:c1:52:f1:12:bd:f6:
02:11:25:11:c1:35:22:9f:61:e3:ab:6e:10:a0:05:d0:c3:c2:
9c:96:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:40:36 2026 by rpki-client