
$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
File: oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json)
Hash identifier: FeATpCkygR+swRIhNfG1k3P4BU4OHoNReMZfHHJzWBM=
Subject key identifier: FF:03:FD:EA:D7:EA:A8:B5:59:87:5E:41:C5:CB:DF:5A:48:21:65:D7
Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
Certificate issuer: /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
Certificate serial: 09E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
Manifest number: 21A1
Signing time: Sat 18 Apr 2026 16:29:01 +0000
Manifest this update: Sat 18 Apr 2026 16:29:01 +0000
Manifest next update: Sat 25 Apr 2026 16:29:01 +0000
Files and hashes: 1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: iiN/B4ELcgAUqu2t+vTrBYtKsaP76tb1aj7k7HG6qmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl
rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
Validity
Not Before: Apr 18 16:29:01 2026 GMT
Not After : Apr 25 16:29:01 2026 GMT
Subject: CN=69e3b14d-f118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:1d:66:c8:f4:bf:fb:3e:51:b5:34:8e:c0:
32:54:f2:0b:50:00:3c:20:ab:04:b2:c8:0c:c7:7e:
b5:59:80:99:11:49:14:72:b6:49:98:6e:23:44:ae:
54:a3:c5:e6:03:f0:3a:bd:11:a1:c6:10:96:54:27:
30:f1:e5:39:0e:81:0e:a1:0f:d1:78:c4:68:07:42:
a5:9a:0a:48:50:9c:0b:77:58:35:28:6f:34:59:f0:
ac:12:f9:c5:76:f8:ed:a1:79:9c:28:41:79:63:38:
52:3f:4f:fe:89:17:f4:51:38:1f:ce:06:5b:fc:24:
a7:11:a0:70:9e:e7:8e:f8:54:51:38:e5:c3:e6:6c:
1e:53:9c:82:71:5c:18:bb:f3:aa:b9:a0:c1:f0:53:
80:8b:95:cf:84:f9:8b:cf:4c:6f:ba:47:a1:b8:26:
31:eb:c9:bc:e4:2c:10:43:94:c1:16:82:21:34:86:
ad:77:09:d1:49:e3:ef:79:b7:7f:a6:89:e6:c4:fb:
48:55:cd:f6:63:a5:87:85:69:f3:bd:d0:93:a2:c8:
b7:97:f2:e3:84:e9:cb:04:78:63:23:7b:61:7b:99:
41:6d:6b:22:af:a6:81:03:1c:a3:0e:d6:5a:69:df:
55:89:bf:20:8d:3d:06:42:e9:5a:4a:4f:5e:77:6b:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:03:FD:EA:D7:EA:A8:B5:59:87:5E:41:C5:CB:DF:5A:48:21:65:D7
X509v3 Authority Key Identifier:
keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:a8:4c:b4:9d:e4:ed:e1:0b:fd:3c:cb:b6:78:d6:1f:ab:0a:
56:3f:fb:d5:73:80:98:f2:da:91:03:b7:e2:47:43:12:35:7a:
72:30:50:d2:ec:f5:32:53:14:9e:b6:3e:1d:5a:47:36:c5:4d:
a9:99:8a:00:55:fc:a0:0d:e3:90:6f:1b:fb:44:00:f8:ff:f2:
c9:9d:89:c4:1a:89:55:b8:ed:db:b9:cc:b5:b1:bf:cb:64:03:
c1:8d:b9:ca:e0:27:f3:d4:55:13:59:b3:ed:a0:ef:14:18:8b:
9c:30:53:af:45:56:1b:eb:93:66:19:ed:63:76:b7:24:c2:55:
ac:b7:06:c1:e7:b2:31:81:0c:23:13:08:31:11:90:93:de:8c:
c6:3a:b9:2a:00:ef:75:36:a8:61:cb:33:f3:e5:85:93:11:9e:
84:57:09:a6:1f:76:f3:98:b8:24:a5:33:f7:6f:74:83:f1:f7:
1c:e8:c9:23:7a:6b:78:d5:b5:1e:57:46:60:a3:64:4e:88:57:
9f:ef:f7:15:13:7e:d2:35:5d:b6:5f:e3:57:3b:51:53:c6:4c:
50:f8:ce:21:2f:22:ea:31:99:b5:1d:46:ad:99:99:2a:34:ed:
89:54:da:ef:57:10:95:cb:4c:97:32:25:c5:30:d0:5a:19:f6:
d6:a1:f9:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk4RTUxMTAvBgNVBAUTKEEwMkVGNzdDMDVDQTEzMEMyMjI5ODVDRDc0QUU5MzhE
QTc5QTRGQkYwHhcNMjYwNDE4MTYyOTAxWhcNMjYwNDI1MTYyOTAxWjAYMRYwFAYD
VQQDEw02OWUzYjE0ZC1mMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtfwdZsj0v/s+UbU0jsAyVPILUAA8IKsEssgMx361WYCZEUkUcrZJmG4jRK5U
o8XmA/A6vRGhxhCWVCcw8eU5DoEOoQ/ReMRoB0KlmgpIUJwLd1g1KG80WfCsEvnF
dvjtoXmcKEF5YzhSP0/+iRf0UTgfzgZb/CSnEaBwnueO+FRROOXD5mweU5yCcVwY
u/OquaDB8FOAi5XPhPmLz0xvukehuCYx68m85CwQQ5TBFoIhNIatdwnRSePvebd/
ponmxPtIVc32Y6WHhWnzvdCTosi3l/LjhOnLBHhjI3the5lBbWsir6aBAxyjDtZa
ad9Vib8gjT0GQulaSk9ed2uWlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8D/erX
6qi1WYdeQcXL31pIIWXXMB8GA1UdIwQYMBaAFKAu93wFyhMMIimFzXSuk42nmk+/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0
OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3d2lLWVhOZEs2VGphZWFU
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29DNzNmQVhLRXd3aUtZWE5kSzZUamFlYVQ3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3
d2lLWVhOZEs2VGphZWFUNzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcqhMtJ3k7eEL/TzLtnjWH6sKVj/71XOAmPLakQO34kdDEjV6cjBQ0uz1MlMU
nrY+HVpHNsVNqZmKAFX8oA3jkG8b+0QA+P/yyZ2JxBqJVbjt27nMtbG/y2QDwY25
yuAn89RVE1mz7aDvFBiLnDBTr0VWG+uTZhntY3a3JMJVrLcGweeyMYEMIxMIMRGQ
k96Mxjq5KgDvdTaoYcsz8+WFkxGehFcJph9285i4JKUz9290g/H3HOjJI3preNW1
HldGYKNkTohXn+/3FRN+0jVdtl/jVztRU8ZMUPjOIS8i6jGZtR1GrZmZKjTtiVTa
71cQlctMlzIlxTDQWhn21qH5Fw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:32 2026 by rpki-client