
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
File: ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json)
Hash identifier: m4cOOLUJS2rPRcYVDdnfzo064hMx+iRzBjANNjrh1hE=
Subject key identifier: 2D:16:F4:66:E2:E7:41:1A:C4:A9:41:57:70:99:C2:A3:44:40:11:AD
Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
Certificate issuer: /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
Manifest number: A1
Signing time: Sat 13 Jun 2026 07:24:21 +0000
Manifest this update: Sat 13 Jun 2026 07:24:21 +0000
Manifest next update: Sat 20 Jun 2026 07:24:21 +0000
Files and hashes: 1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: iIEkeIy5MFE23fBt7h8Il4RaiQha4VrKy379kAzT0ng=)
2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: mhTd4sXqZQkM0yZzJxLZu/7dsOvN9ird2NK8A1L8tLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Validity
Not Before: Jun 13 07:24:21 2026 GMT
Not After : Jun 20 07:24:21 2026 GMT
Subject: CN=6a2d05a5-db06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:89:1e:92:98:b3:4d:55:e2:c2:10:cd:a5:
24:59:47:6c:3c:4d:fc:dd:6a:4c:2d:c1:2a:53:bc:
c6:9b:de:6c:bd:82:72:a1:15:e8:c3:6d:13:56:bf:
77:bc:51:9f:8b:02:ef:11:e0:0c:7f:ea:46:12:0b:
d5:a3:f7:01:87:b6:a4:78:40:60:a1:10:69:00:62:
62:c9:93:da:19:ef:c4:8c:89:aa:f8:d3:b4:9a:c6:
df:cc:40:1e:81:fb:b3:ed:1b:02:48:4e:29:57:87:
dc:ff:6b:27:76:40:1a:11:1c:41:0b:ca:ff:2c:8b:
de:9c:59:08:1c:02:ee:31:31:ac:c2:6a:0a:f9:2c:
0f:96:d9:fb:71:6f:e2:3b:8b:ab:a0:d1:a1:67:a2:
e4:4c:23:d1:e8:31:94:fd:e2:3a:95:dc:20:e4:70:
66:d2:e4:54:93:d8:f7:4c:58:7d:b8:70:46:81:67:
5b:d0:b3:23:98:22:a0:a2:89:c7:58:55:59:4b:70:
2b:de:bf:57:2f:30:25:5b:cf:f8:d1:63:1f:90:0d:
ef:f9:78:84:9f:9d:f3:db:a1:d0:de:20:62:74:e8:
77:88:7c:87:12:de:ac:39:87:e5:fa:dd:2f:ef:0f:
b7:5f:24:29:87:1e:33:5f:81:6c:f8:c4:6b:39:f4:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:F4:66:E2:E7:41:1A:C4:A9:41:57:70:99:C2:A3:44:40:11:AD
X509v3 Authority Key Identifier:
keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:f9:55:90:e6:5f:82:ff:8b:cb:7c:4f:8e:ed:25:85:3c:
f8:f9:f8:7f:e1:a7:76:f8:ea:b3:ed:41:b7:9e:b2:ba:82:20:
2c:d8:6c:6c:32:6f:8a:35:c2:ad:a0:6c:f5:c6:b5:5d:f7:49:
c5:48:90:59:71:a8:e0:d0:47:f4:26:c6:d2:ab:b6:bb:6c:0e:
79:c7:28:fa:f8:f6:b1:c6:02:47:65:39:4f:3d:2d:5f:c0:c3:
fb:41:c3:23:d8:2c:73:93:ea:8b:b3:ab:33:8d:39:84:67:53:
1a:ec:30:b3:18:0b:0d:de:c8:23:d8:85:ea:a0:5f:a7:e9:33:
0b:27:df:15:89:67:b4:9e:93:4c:c4:e2:dc:4a:98:da:d2:35:
3c:5a:2d:d5:d6:b4:43:a8:69:4d:e4:c3:c1:1c:20:2f:82:89:
75:ac:a3:e5:bb:98:08:01:d7:f0:86:61:80:1a:c1:90:27:a8:
60:33:47:5a:20:8e:ad:84:1d:ca:ca:09:6f:34:8e:93:b2:a0:
9f:40:c2:7a:70:2f:e8:10:4a:af:48:8e:17:e2:41:8c:46:99:
4f:76:96:0d:16:67:73:a2:5f:22:99:77:30:f8:61:8b:d9:a5:
ea:8e:f7:35:c1:79:a6:90:f8:13:b4:58:f1:ab:5e:c9:71:64:
09:0e:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:57 2026 by rpki-client