
$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json)
Hash identifier: dBRbQqrSzYB1DpA21Jq1ETeqoOlY8XiQ54Rvps6uZ3E=
Subject key identifier: 3B:5C:07:B6:B7:24:5C:F2:30:B2:BB:E7:1E:53:7C:87:39:01:1F:13
Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Certificate serial: 0A07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
Manifest number: 09F6
Signing time: Thu 16 Apr 2026 19:45:24 +0000
Manifest this update: Thu 16 Apr 2026 19:45:23 +0000
Manifest next update: Thu 23 Apr 2026 19:45:23 +0000
Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: IUTmHuzTEQm/ZgLfUYitF43PZGIkNjFNA2X4OD7Ho/E=)
2: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: gXIt2yd0FQgVFoledLc37A0tKse+hQfjfmJoALOtcpg=)
3: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: AMw54EUzBoYZAlXkNliaOixSikod3CRFz3MlZVcy56A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2567 (0xa07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016
Validity
Not Before: Apr 16 19:45:23 2026 GMT
Not After : Apr 23 19:45:23 2026 GMT
Subject: CN=69e13c53-c223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:e0:ef:f8:ce:fc:4c:30:34:c4:4c:2b:3d:
c0:ef:a2:f5:9e:75:40:6a:9f:86:5a:dd:2d:68:69:
e8:37:c2:b4:a3:a0:91:02:a6:29:54:9a:d0:d9:2f:
ce:0a:62:87:95:63:23:47:b2:01:ee:7b:1a:a8:92:
39:9e:5b:3a:50:98:88:a8:44:c9:88:5a:7a:e1:a2:
57:26:19:c9:94:1f:ad:ab:06:b5:6c:97:43:bf:2b:
22:12:99:14:e0:be:79:96:bc:d0:21:c9:08:40:39:
e8:7a:ae:0f:a4:0b:8e:f4:62:37:d7:b9:e1:0e:93:
8c:15:05:e1:dc:03:95:bd:09:be:76:d2:60:76:68:
89:e7:ab:ea:b5:b8:0d:2b:87:1a:1f:5e:1c:d3:d2:
17:e9:fb:9f:15:1f:fc:61:71:fc:4c:fb:43:6e:59:
08:a0:81:9a:f5:87:a3:4e:4e:8a:3c:29:93:80:c9:
a5:94:59:a4:4d:8a:40:a0:2f:b8:39:b7:d1:af:1c:
8d:e6:05:52:e5:88:db:ec:f4:bf:67:f0:dc:b0:6e:
9d:c4:53:8c:ff:79:9c:02:e2:5f:0e:15:b3:98:f0:
c7:5d:d9:28:80:d0:3b:21:af:ba:b0:cb:6e:53:8b:
4a:06:31:aa:ef:91:8e:d7:9a:e9:40:a9:78:fb:ff:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:07:B6:B7:24:5C:F2:30:B2:BB:E7:1E:53:7C:87:39:01:1F:13
X509v3 Authority Key Identifier:
keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a6:97:28:e5:b0:21:25:e7:36:34:e5:31:cb:2b:d1:51:60:
62:1e:65:a9:aa:fb:a4:a9:98:89:a1:c3:b9:2d:72:3b:b5:f7:
a3:2c:16:98:8e:87:56:9d:26:33:0a:a4:ca:a1:9b:34:9b:89:
41:bb:38:0f:18:2b:8e:75:84:8a:3a:97:ef:27:2f:e6:41:50:
9a:5c:38:ca:30:a2:d2:0e:5a:2a:fe:57:a9:34:ed:81:2e:d0:
a1:58:eb:72:37:43:ac:6a:89:aa:ee:d4:6a:75:77:7c:98:d2:
8a:d7:d7:4a:d6:d4:8f:f8:e9:38:e3:35:06:5c:f4:50:bd:4f:
04:78:a0:01:8b:21:cf:d0:43:2e:c6:4b:d4:aa:c0:ca:39:85:
93:c3:6d:44:93:fe:f3:62:48:40:26:86:83:78:1c:b9:8a:7a:
3a:a4:31:8c:54:84:89:66:21:c7:25:ee:b3:35:7a:2e:e2:49:
fa:4a:97:6e:b0:de:99:73:0e:db:7a:5a:98:27:3b:dc:a5:d7:
a1:3e:be:c1:71:f8:ec:38:64:cb:b3:6d:47:03:cc:29:70:25:
11:91:2d:b9:91:55:ed:6f:eb:7d:be:83:9b:a8:bc:ef:ec:21:
13:e2:87:20:6e:96:39:d6:7c:95:e5:7e:6e:3f:43:bf:10:07:
a4:9e:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:33 2026 by rpki-client