
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json)
Hash identifier: U0g/EXBHTrG0925gGbO4pcUB5tNPPrrTdKtRzr/jyBA=
Subject key identifier: 1D:5A:A9:7D:07:FA:0C:B8:E4:50:8E:38:2A:3A:65:13:60:28:A9:B3
Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
Manifest number: C5
Signing time: Sat 13 Jun 2026 06:57:40 +0000
Manifest this update: Sat 13 Jun 2026 06:57:39 +0000
Manifest next update: Sat 20 Jun 2026 06:57:39 +0000
Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: WxEDh7A3wWjIsly4U1YHGe285hWu960RocAFRIXHkMQ=)
2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: ff9Hb3p8NVhNbBeRoRPoSLLnHieGzUbHBlT6U/ikvfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Validity
Not Before: Jun 13 06:57:39 2026 GMT
Not After : Jun 20 06:57:39 2026 GMT
Subject: CN=6a2cff64-3a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:55:f3:fa:a8:05:1e:e4:55:c0:d9:ff:20:
e7:b2:8b:64:9d:17:fc:79:46:4d:4c:07:41:17:2c:
e1:e3:de:ed:0d:03:59:6a:7b:b4:08:6b:83:45:82:
7c:ed:3c:da:64:26:85:f2:02:6b:b9:2b:22:2a:73:
7a:45:d1:41:68:c4:9b:a3:d2:3e:b3:75:4a:e6:81:
fc:e1:fe:0e:19:c7:02:60:ab:65:bd:d9:27:08:a8:
60:df:a5:7c:1f:4c:6a:29:78:e8:15:ad:22:7a:7c:
85:cd:76:c7:d3:e7:37:70:2d:02:c8:c1:35:10:85:
72:b7:a1:45:56:2d:ef:e7:38:4a:38:f4:5a:6f:53:
44:b9:f7:dc:52:1e:b3:6f:4a:d3:a2:42:06:d7:76:
7a:ef:db:0b:ef:c0:24:4a:6f:e3:8c:f0:01:bc:95:
ca:0f:59:4e:b0:ae:af:a6:4f:01:33:3c:9a:27:7c:
62:73:0c:ac:2f:48:02:d7:b7:e4:b0:98:c3:a7:2f:
ec:c9:d7:15:93:e7:1a:29:93:ec:3a:fd:e4:09:72:
34:97:b3:28:73:1a:9f:73:a0:72:c3:da:76:dd:b3:
a3:15:09:fa:cf:f0:6d:2a:07:d1:b4:5f:be:89:35:
9e:de:17:32:cc:09:dc:dd:3a:96:9c:f3:20:a2:74:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5A:A9:7D:07:FA:0C:B8:E4:50:8E:38:2A:3A:65:13:60:28:A9:B3
X509v3 Authority Key Identifier:
keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3c:e6:48:99:83:48:86:1f:39:fc:6c:33:d2:7d:90:74:8d:
6a:df:f2:b7:11:43:6f:d3:13:05:33:c8:98:6e:12:59:29:4e:
5f:8b:be:9e:5b:f7:23:a3:b9:fc:b1:7f:57:cd:f5:da:67:09:
10:aa:06:e5:8b:6e:2c:fa:63:a6:ea:e8:fb:aa:05:f3:a4:37:
3a:a4:92:56:ea:2e:5e:15:71:b5:2e:d3:52:8b:d2:b7:52:ec:
e7:0c:f7:f2:6f:9e:dc:9c:e5:51:e1:43:01:60:78:b1:43:1c:
0f:03:b6:04:91:aa:ba:69:08:d9:12:ec:fc:92:d9:aa:a4:84:
53:15:e1:7f:7c:a1:08:44:41:52:2f:9c:33:bd:39:b0:43:ec:
92:da:ed:6f:05:0a:e7:6a:92:11:d6:d1:00:f1:39:b6:c8:ce:
8f:d0:4a:4d:d1:81:eb:3c:b7:0c:0c:73:52:0f:e0:9c:bc:fb:
72:6d:e0:a4:4e:0b:94:a2:f1:55:88:56:50:6f:1c:cf:16:08:
e4:80:36:81:ec:11:c6:c2:7e:83:06:67:fd:cd:2f:ce:81:cd:
6e:c2:c8:14:2c:de:8e:1d:53:b7:f5:bf:2a:09:6c:bd:8e:e2:
65:15:23:47:cc:04:c3:c2:49:18:a2:e7:56:6d:39:58:5c:fb:
47:c9:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:21:27 2026 by rpki-client