
$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File: k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier: xhPFWUOH9tu2Ut8/aMcddElZ/NiPtW9J6ZWdgOagSX0=
Subject key identifier: DA:B4:A1:99:3B:13:D5:95:1B:88:9C:75:10:E7:FF:CF:6E:03:6B:53
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer: /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number: 53
Signing time: Fri 17 Apr 2026 07:51:47 +0000
Manifest this update: Fri 17 Apr 2026 07:51:46 +0000
Manifest next update: Fri 24 Apr 2026 07:51:46 +0000
Files and hashes: 1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: b3cgeP9Io2AF6+Y6yUPcTzZvsiSr6VYIJWzQgP+5HE8=)
2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: W13G9UJDUOXNhE35H+xQmcCjaFGO3pjeXgy05QF6k+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Validity
Not Before: Apr 17 07:51:46 2026 GMT
Not After : Apr 24 07:51:46 2026 GMT
Subject: CN=69e1e693-b106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:81:af:58:24:b4:62:07:e3:b7:59:b8:7e:
72:10:2d:ea:22:b7:a8:d5:64:16:7e:d8:33:b4:09:
73:a2:92:d1:7e:ea:81:96:6d:fe:b3:4f:d3:4e:81:
fa:4b:fc:a7:b1:5e:82:9f:9f:d4:94:cf:04:1c:7d:
c8:60:03:ff:f6:33:11:a3:e6:03:72:d5:2b:fb:4e:
b9:65:91:32:89:06:56:f2:8b:86:6b:e9:09:ec:fb:
69:0b:55:64:90:a6:f6:71:f2:12:f1:0a:b5:c7:ac:
4e:5b:b6:2c:92:31:fa:d9:f7:42:e2:9a:a2:ee:58:
a9:8f:ad:45:ad:77:bb:1f:3e:36:18:c6:60:d2:15:
7f:de:5d:42:12:77:fc:7d:b7:55:97:78:40:56:29:
ac:f8:05:3c:d0:0a:07:66:ee:88:7a:bb:0b:05:6c:
43:e5:74:9d:f9:f7:1b:33:00:2e:1f:6a:17:b8:f8:
a8:aa:64:d9:db:5d:5c:15:c7:ae:4f:2e:2b:91:20:
7c:ec:9c:23:f3:7b:8c:a8:10:82:c5:ad:d6:db:d3:
cc:f4:35:fa:54:7f:7a:e0:eb:92:ec:aa:63:d7:70:
19:cb:60:15:02:2d:e3:ef:e5:e1:7d:2c:2a:55:89:
6e:86:f8:8a:c7:40:9f:0c:c8:cb:8a:4c:18:d2:5a:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B4:A1:99:3B:13:D5:95:1B:88:9C:75:10:E7:FF:CF:6E:03:6B:53
X509v3 Authority Key Identifier:
keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5b:64:08:bc:e5:7e:ef:e4:02:88:09:85:90:c1:84:74:05:
f9:d6:10:20:bf:1c:86:a7:4a:85:64:b0:fc:0e:24:a4:6b:0b:
6b:aa:d7:6f:4b:7a:9f:80:ad:21:5f:8a:45:27:52:1d:de:4e:
bd:97:86:1d:9a:58:26:3b:06:b5:d8:34:02:fd:06:5a:b3:95:
de:11:2d:f1:b0:ec:df:f4:ab:0c:25:0a:61:11:56:61:48:c4:
09:c9:27:be:32:e6:e8:b5:57:3f:7b:70:fa:3b:14:f2:46:59:
51:45:82:00:18:3b:57:4e:88:23:c0:65:73:99:b3:79:17:51:
f4:c2:de:aa:4f:86:f1:4d:59:f5:14:1b:e1:07:51:14:59:4b:
78:d0:b4:74:6c:7d:a4:fb:9c:9e:c8:4d:15:55:0a:58:2b:7e:
34:0d:de:cd:b2:fa:10:18:65:99:e3:f3:da:62:1c:51:7a:25:
af:91:a1:5d:46:c9:47:2a:0c:1b:0b:82:0d:62:7d:bf:f1:21:
c0:58:59:aa:93:a6:64:8c:b0:12:d6:49:38:0f:4a:f7:0b:b6:
64:4b:a4:10:fe:47:82:15:8f:83:bd:eb:02:98:c5:38:a7:25:
23:73:23:97:7c:ca:27:2c:21:01:3e:b7:1e:c6:83:fa:42:1e:
93:a2:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:48:20 2026 by rpki-client