
$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File: C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier: 5hyAkRUqa9w4XUq4iHeIOtTFwSqzS5XiZ3gKJgj5/Vo=
Subject key identifier: FC:51:D2:EC:B1:DF:4C:2F:D6:E2:D2:70:33:84:2B:CB:4F:38:27:DF
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial: 0D66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number: 0D4D
Signing time: Thu 16 Apr 2026 17:55:17 +0000
Manifest this update: Thu 16 Apr 2026 17:55:17 +0000
Manifest next update: Thu 23 Apr 2026 17:55:17 +0000
Files and hashes: 1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: aJweJIOTL6n9N7FXsHJTd8/3sxamFtgTdHVPEQPNAao=)
2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: jSGQxP09SiqSKhxNXc5lw5g218RQ1wLEioMxa2d9E88=)
3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: utJ70W8kwk0UrAZBtfvLLdbnNC7YzT3hBvwvulsC1zU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3430 (0xd66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Validity
Not Before: Apr 16 17:55:17 2026 GMT
Not After : Apr 23 17:55:17 2026 GMT
Subject: CN=69e12285-cbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:92:0c:19:a3:98:28:80:55:b5:e9:1c:84:
b9:e6:dd:bd:1c:00:8a:16:b8:01:f2:96:af:15:06:
4b:3d:46:30:a7:98:af:59:d7:c6:ec:51:61:b0:46:
d7:e7:bc:c3:35:02:be:30:54:21:47:6d:30:8c:b9:
3e:aa:91:48:2a:32:6c:e2:e2:d3:ac:43:ec:1c:0e:
41:17:ea:b3:69:6d:5e:e6:7f:7a:2b:22:35:74:22:
c6:7f:ed:ce:cd:02:6d:ad:9a:24:32:97:32:04:f6:
c5:32:fc:78:e5:73:d9:9f:db:b0:ac:80:1a:0b:3f:
94:c2:bb:0a:f6:aa:07:88:67:87:87:41:5a:b6:c1:
bd:18:8c:23:a9:6e:c6:96:55:ad:9c:08:1c:37:84:
15:f1:ec:af:cd:65:65:09:8f:ec:9e:b5:f4:11:41:
80:a3:b2:fc:9f:e3:2f:db:48:81:62:37:2b:8d:cf:
5e:b7:3a:09:6b:0e:57:58:c8:63:79:6c:c4:8f:2d:
3d:1e:65:5a:85:2c:e8:3e:d6:81:d2:13:e4:71:87:
49:73:09:9d:d5:32:d8:8c:4a:c0:50:b4:af:21:59:
30:3e:ac:a3:f6:14:52:ee:96:aa:ad:91:d9:df:42:
be:11:50:34:8b:8e:cf:15:3e:21:0a:9d:85:54:42:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:51:D2:EC:B1:DF:4C:2F:D6:E2:D2:70:33:84:2B:CB:4F:38:27:DF
X509v3 Authority Key Identifier:
keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:6c:c2:0f:5a:b4:1d:d1:a3:a3:5b:9c:a2:83:00:e7:d5:9f:
a3:2d:8a:f7:c2:dc:63:11:53:dd:8a:32:d3:f0:a5:e6:a5:57:
52:7d:f9:a9:d3:68:54:d2:2d:40:cd:80:43:30:00:df:07:bd:
31:80:87:db:3a:6a:cd:6d:df:d7:df:ff:17:29:0c:88:54:44:
6b:ac:25:ad:90:f3:8d:3c:91:97:d3:7b:75:a3:d1:1e:f5:aa:
cf:a4:1c:f9:98:18:91:d2:71:b9:fa:20:26:bc:4e:1d:82:46:
9a:10:98:7f:fc:61:e2:e4:a4:11:65:08:f6:f8:1d:4b:c9:83:
0c:da:72:df:ab:0c:44:38:bd:86:0d:3c:70:d8:3e:9a:4e:ad:
a1:fa:bf:9f:c8:7b:88:70:3c:42:ec:18:ff:92:15:97:19:9e:
ba:27:4b:02:b4:99:c6:cd:f8:ac:d0:a7:07:22:86:38:43:05:
0e:2c:48:e7:37:87:2d:c2:35:92:93:48:b7:9f:a5:78:6e:4c:
2d:41:2c:6a:02:87:66:d8:eb:64:73:20:7b:d2:24:9f:65:65:
ac:e5:36:e4:c9:14:e3:65:0f:79:b5:7a:60:5b:55:dd:7b:da:
a7:1d:03:65:3a:22:04:b2:15:a7:c3:b9:26:4b:e2:d2:0e:55:
46:41:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:16 2026 by rpki-client