
$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
File: MayWR8f4cKZrot54hUTNjDJr3_k.mft (raw, json)
Hash identifier: a75EC5e/LJ/Ho7It/KJH47EJVOvvJfJExhoz/e4DNTg=
Subject key identifier: 7C:1C:DF:F4:2C:84:CD:92:24:A4:8F:9C:A7:89:B2:4D:C3:44:89:BB
Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
Certificate issuer: /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
Manifest number: 012A
Signing time: Wed 29 Jul 2026 07:01:35 +0000
Manifest this update: Wed 29 Jul 2026 07:01:35 +0000
Manifest next update: Wed 05 Aug 2026 07:01:35 +0000
Files and hashes: 1: MayWR8f4cKZrot54hUTNjDJr3_k.crl (hash: GeqV4/mor+h7Dv6gPvgxGRFKGUnfQxMHKMrFNWQMSuE=)
2: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (hash: Q2Qdv0ZpyDXIc6w4oc2ztFa/mTiFE2ozOR+lXjgvebo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl
rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9
Validity
Not Before: Jul 29 07:01:35 2026 GMT
Not After : Aug 5 07:01:35 2026 GMT
Subject: CN=6a69a54f-173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:a6:7a:e7:54:a7:90:8c:33:73:0a:47:cf:
77:e4:40:99:1f:b5:ec:b2:b9:74:70:5a:b1:44:20:
ff:fd:a5:35:45:08:a3:83:5e:78:e9:37:ea:9d:5d:
f4:f5:ad:8e:1a:fb:98:95:d8:7e:bc:f2:e8:a0:d2:
b9:ab:c1:46:ca:76:e3:dd:d4:f5:8e:ac:c1:42:ce:
0d:03:a6:05:93:60:9d:c8:2d:65:3c:53:18:47:f2:
75:b3:90:9c:d9:47:52:6b:ab:1f:b4:a0:6b:22:b4:
bf:c8:51:f4:b5:0f:d1:09:9f:82:46:03:9a:f6:d1:
a8:e5:90:7b:64:76:f8:13:78:26:5c:37:ff:01:a4:
47:eb:c7:1a:7d:4f:c3:7a:0c:fc:7c:5f:27:79:31:
97:5e:62:e0:c6:46:3b:a8:ad:0c:1c:06:95:7d:53:
0d:ee:e8:fc:4c:cf:e5:aa:8e:7c:b7:4e:a0:b1:da:
13:09:a7:f6:c8:76:4f:05:35:4d:cd:fc:d6:5d:30:
cf:ad:32:d5:72:54:47:9b:16:c1:1d:9f:a9:1d:7b:
eb:e2:9e:21:30:c8:e5:c3:b1:3b:a0:d2:da:7e:a0:
e3:51:14:65:d4:8f:f7:ad:22:18:1b:8d:b9:27:d8:
80:45:b4:1e:67:4f:ff:eb:0a:91:27:fb:5b:76:f0:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:DF:F4:2C:84:CD:92:24:A4:8F:9C:A7:89:B2:4D:C3:44:89:BB
X509v3 Authority Key Identifier:
keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a3:d4:ba:02:22:bc:34:06:48:ea:31:82:3d:29:4d:5e:16:
76:61:6c:f1:65:5f:b8:96:bc:cf:e5:eb:7e:3d:68:db:f2:21:
18:4d:cb:28:3f:0c:27:1b:69:ea:a8:17:cb:29:c7:e0:6f:01:
92:7e:73:e1:bd:88:d0:aa:31:82:71:c4:8d:2a:9d:42:6e:1c:
57:86:1e:2b:97:12:71:57:74:62:ab:90:25:61:47:c9:74:05:
29:8f:0e:f4:5a:a6:82:a0:51:aa:9d:7d:93:cf:ba:82:75:e7:
e5:72:19:22:0f:bd:b6:dd:f7:af:93:32:18:ff:90:1b:0e:5b:
2d:f2:74:91:f9:f1:51:34:ef:8c:be:8f:3d:ba:4b:e4:30:64:
c7:60:c8:5d:bb:6d:a0:0b:c0:9d:bf:28:fe:1d:d9:d5:39:27:
23:98:f2:50:c5:c0:51:e3:34:a6:7c:af:1d:87:ed:8e:ee:c6:
6b:86:d8:31:2f:e3:36:9a:65:30:d4:03:01:f3:0c:f9:18:41:
4d:5b:2c:2d:90:30:b3:0f:1b:72:d7:9a:e5:1f:32:10:ba:ee:
47:09:7e:3d:67:c0:f8:d9:c4:a5:9a:e4:2f:25:40:77:bf:b3:
e6:5f:3f:6d:75:43:69:ab:16:99:29:69:a3:e0:cc:14:d3:d3:
df:f2:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:36 2026 by rpki-client