
$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
File: rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json)
Hash identifier: fAiWvOR/nxsDkYY0vAJIuebB2w2pcFBCRfbQ8LNCwfE=
Subject key identifier: 02:08:0D:B1:CB:63:D3:19:66:72:DF:D5:BB:4F:08:99:BF:38:5A:E5
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Certificate issuer: /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
Manifest number: 32
Signing time: Fri 17 Apr 2026 08:22:11 +0000
Manifest this update: Fri 17 Apr 2026 08:22:10 +0000
Manifest next update: Fri 24 Apr 2026 08:22:10 +0000
Files and hashes: 1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: 0eRQitjNXbA4IyebrS+11yTc/1bo6gEgbqhvvh26lbQ=)
2: A6977620FC6911F0B9F21353506F56BC.roa (hash: 2+c+kkZNH5WFLaEH+Mtz0KAlZ3T9lg2Gax329RYsTqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Validity
Not Before: Apr 17 08:22:10 2026 GMT
Not After : Apr 24 08:22:10 2026 GMT
Subject: CN=69e1edb3-2a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:0b:44:ec:67:d3:0c:93:14:06:05:0b:64:
a6:2d:72:c6:3e:b2:33:28:50:b3:a5:32:07:fb:b0:
e3:c8:55:e6:5a:67:8c:a7:4d:9a:4b:af:cc:29:22:
45:c4:c2:09:b6:d9:03:9e:92:74:98:79:e3:66:ed:
75:7d:e4:d1:e2:55:c0:ab:a7:5e:48:ef:99:71:c2:
b7:e3:d1:4e:f9:fc:24:08:e6:ae:c6:17:4f:56:19:
01:e1:9b:bd:a5:46:f1:0d:8d:fc:54:0e:5e:57:32:
b7:a4:e3:d1:e8:88:5c:d9:79:ad:b5:94:e4:0c:9f:
c9:42:45:96:19:8e:61:fb:34:3c:15:5d:05:b8:5d:
7f:4d:49:e8:20:dc:14:1d:52:62:9a:11:18:2d:e7:
b9:d5:0a:a3:b1:38:54:d6:78:2b:3a:84:66:5f:f0:
9a:d1:e3:9e:e3:b7:99:c6:10:5b:5b:2f:7c:55:98:
71:13:5e:ba:40:6b:9d:e1:0a:89:43:f9:6f:4f:00:
57:2d:e5:6b:c8:73:ef:5e:9e:8b:74:69:de:3e:7d:
0c:6d:e6:42:8a:d3:5a:a1:a0:17:11:e4:9e:90:e5:
72:cc:80:af:49:14:66:d0:57:13:e4:d6:4a:a2:82:
77:a0:97:65:12:10:ad:52:ea:04:27:e3:64:b3:22:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:08:0D:B1:CB:63:D3:19:66:72:DF:D5:BB:4F:08:99:BF:38:5A:E5
X509v3 Authority Key Identifier:
keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:53:9a:f6:79:12:e8:94:00:ba:ae:08:cd:fb:cc:ae:67:49:
2e:43:e0:1a:ca:da:5e:ae:fa:76:4f:81:1d:fe:5c:c0:61:97:
17:9f:3c:1b:66:40:28:46:6a:ea:78:d4:39:66:de:3d:bb:e2:
ee:df:ec:72:35:b7:41:4b:11:41:15:c3:3d:8c:09:3f:0a:7e:
d6:79:c8:21:fc:91:20:80:18:19:a2:75:ce:fc:05:1f:a5:2d:
50:7e:5c:cd:8d:cd:f0:5e:54:4e:13:a6:68:50:b7:16:35:2f:
5a:1c:2e:f8:e6:f7:4d:00:ff:93:e6:38:59:d1:ea:5c:42:b0:
93:b4:80:8d:f5:a5:ed:ff:ba:d0:19:2d:82:07:bc:c6:01:d2:
e0:e2:a1:0d:00:4a:7c:68:90:35:a3:bd:d2:a8:e5:58:bd:d7:
b7:f4:dc:22:e6:56:69:21:0f:cf:a6:d3:53:80:35:7e:79:26:
d5:ee:50:82:8a:46:d4:2b:c2:e2:ab:c5:9f:2b:27:35:0c:ee:
ad:5f:6b:32:61:98:89:11:24:f9:fd:e5:09:e6:4e:c8:6c:c4:
58:ee:ed:67:5b:d4:8a:42:7b:84:34:87:6c:c0:2c:7a:e4:ec:
8a:48:44:f1:fd:6b:a3:a0:52:a5:eb:fd:3b:e2:90:87:c2:71:
ca:0c:66:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:56 2026 by rpki-client