
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json)
Hash identifier: +iLfhlTG26dkX81qzGxttLXdSRQmKrqgg8H7Sf0/6fM=
Subject key identifier: 68:69:9A:CE:10:23:1D:11:3C:3C:29:21:C8:2A:AA:5D:82:9F:94:AC
Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
Manifest number: 012F
Signing time: Sat 13 Jun 2026 05:36:17 +0000
Manifest this update: Sat 13 Jun 2026 05:36:16 +0000
Manifest next update: Sat 20 Jun 2026 05:36:16 +0000
Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: kkzYMmrJj3+HPht70uXSrSL8scnrEtoqcd+7oLghrW8=)
2: 835EF5A2C9DD11F09DEB004DC4F9AE02.roa (hash: XxGdk2TiWSYL+s9+eYriQGRBlu9vhfdeWmlV4N+TUNs=)
3: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: trVTzJLMk0YYPZd2GJXZbw8hjd3VyHaYjDSjZyfSaIc=)
4: DCAD7228C9DD11F0AAF51581C4F9AE02.roa (hash: I1++mHrzNJqcHerLAm9oVxqpl6Ew26O0T9gv6+CjfZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1
Validity
Not Before: Jun 13 05:36:16 2026 GMT
Not After : Jun 20 05:36:16 2026 GMT
Subject: CN=6a2cec51-ba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:ee:69:1f:bc:c0:d2:b3:1b:b8:c6:d7:58:
31:48:2a:36:b5:b1:50:0a:99:9a:6d:7a:57:39:21:
b5:ac:8c:dc:f5:fd:48:df:37:ca:fe:7a:02:42:eb:
ee:5a:50:9f:03:d1:d8:51:1f:1e:3c:c0:0d:e4:48:
a7:b7:c2:6a:16:e4:5b:ac:f7:3b:07:82:59:97:1d:
b7:14:fa:f5:f1:e9:ba:1b:84:1d:65:d7:b8:a4:d6:
23:6a:c0:02:69:df:28:52:4a:28:f4:bd:f4:4b:4d:
3f:6f:1b:fb:a0:36:6a:e7:cd:cc:f5:4e:59:bb:bc:
3e:b5:fb:30:52:a3:dd:0d:a4:77:28:83:61:07:0e:
04:05:b5:3a:3d:6b:2d:93:70:30:35:9c:c9:02:29:
15:20:6e:d1:10:f5:e7:cb:b0:02:02:7a:9e:0a:32:
a9:d8:d4:7d:f2:87:55:82:9e:f9:99:af:4b:67:26:
63:34:57:70:83:c7:dc:7c:ea:d3:99:22:18:a6:d0:
08:3d:37:17:e5:92:ff:15:b6:50:1a:a6:89:fb:33:
64:46:45:70:99:10:49:43:0f:49:d9:de:4f:71:b4:
34:6a:8c:ce:c1:68:95:d1:cd:b3:dc:7a:80:77:d5:
b2:da:a8:45:ef:6d:34:23:75:1e:47:93:9b:b7:25:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:69:9A:CE:10:23:1D:11:3C:3C:29:21:C8:2A:AA:5D:82:9F:94:AC
X509v3 Authority Key Identifier:
keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6f:a6:16:3c:a3:6b:89:5a:71:35:71:ba:4b:71:d9:67:8f:
14:3f:80:c9:98:c6:9c:cb:77:9a:2c:0a:50:c7:80:88:6c:88:
4d:76:26:bf:a8:70:22:66:40:bc:f9:50:44:99:a1:14:ab:c6:
8a:b5:0d:9e:1d:50:82:0b:bb:a9:aa:cd:d4:62:3e:49:9f:74:
5c:5e:2e:01:dd:dc:76:9b:35:8e:04:5d:e5:9c:ef:00:97:be:
3f:f8:ee:3d:4a:aa:21:e6:f9:e9:09:4b:04:94:c2:b6:21:fb:
c9:8c:40:a5:84:9c:f2:d0:21:0d:db:1d:c3:fe:5f:3a:67:1c:
b9:71:cf:da:e7:be:72:82:f7:35:d0:6d:47:cd:f8:f1:f4:58:
4e:00:80:29:36:74:19:f0:70:a5:98:12:d0:77:8f:b4:7b:73:
e5:97:b5:b6:be:6a:c4:86:52:f5:66:b3:ad:f0:d0:4f:8f:a3:
2a:df:33:34:b6:bb:79:c4:b6:ee:69:09:9b:65:38:06:a3:8a:
04:52:15:06:73:3e:bf:26:3d:57:3a:6a:37:d4:ae:57:7d:eb:
d8:70:80:94:13:2a:3a:fa:f4:b9:b3:6e:fd:2a:54:c7:5f:f9:
84:a9:d6:9d:70:74:39:09:db:76:51:c8:8b:70:6d:49:f9:7a:
64:7e:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:25:09 2026 by rpki-client