
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json)
Hash identifier: bngem5M22Y/Btf6BIGo4QrDGlpp1VfOREvJ6YiVaEVg=
Subject key identifier: 7C:E1:64:2C:1D:43:70:D3:28:0B:67:82:BB:45:13:A3:39:98:3A:BA
Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Certificate serial: 0103
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
Manifest number: F7
Signing time: Wed 15 Apr 2026 05:54:01 +0000
Manifest this update: Wed 15 Apr 2026 05:54:00 +0000
Manifest next update: Wed 22 Apr 2026 05:54:00 +0000
Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: /ctU/Qg3Qxboaz9TobEvR1bPzJ82sDP/K1C/QdjeJ5o=)
2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: HG74SSnFpVc9cW3sd7L9piB9ZAlq596CN6u14507KWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F
Validity
Not Before: Apr 15 05:54:00 2026 GMT
Not After : Apr 22 05:54:00 2026 GMT
Subject: CN=69df27f9-9fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:3c:63:ae:42:b2:81:30:75:8b:9a:2f:23:
65:51:25:4b:c7:97:56:8c:b7:cd:b3:51:d7:d8:d5:
fc:32:f5:19:08:cf:3f:18:6c:53:31:d3:a8:68:73:
14:9a:84:2a:83:11:e8:af:a1:4c:20:c0:71:e0:8d:
18:e5:4f:33:63:c3:79:0c:22:3b:1d:b8:63:50:a0:
54:df:25:b8:c7:3a:6c:17:0f:96:f0:97:82:c9:c4:
f7:15:94:b6:90:c1:1b:e6:a9:07:07:cb:ed:11:9b:
09:c0:66:ae:08:a2:77:12:07:dc:9b:7d:23:9f:c0:
d5:6f:ca:41:5c:45:63:e9:c6:4f:14:08:b3:81:ae:
75:12:c4:9a:42:5c:3f:f3:be:51:10:f4:81:b8:7e:
0d:91:8b:1f:43:50:7e:cd:6f:f8:66:b5:ea:23:d6:
8c:a6:99:09:12:38:69:f4:69:67:bd:2b:17:c2:01:
77:b3:d9:46:7a:ff:1d:d7:14:08:02:93:c0:12:38:
2e:57:5b:5f:63:ac:fc:73:8c:96:be:42:87:09:91:
52:37:0e:d5:2d:f4:62:0e:8e:f3:2a:0d:35:30:48:
83:f1:9a:fa:01:7d:f2:e0:20:21:72:f3:33:c2:9a:
38:5e:59:e0:3b:a7:9c:23:65:bb:ac:65:72:c7:01:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:64:2C:1D:43:70:D3:28:0B:67:82:BB:45:13:A3:39:98:3A:BA
X509v3 Authority Key Identifier:
keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:33:17:2b:8e:6a:bf:78:fd:25:b2:2b:0b:d0:27:60:03:38:
68:fa:48:b8:0d:0f:01:f2:30:7c:f0:2d:7c:b9:56:4b:e9:37:
f0:0e:9a:a2:7d:ed:6f:c8:a9:1b:b7:02:d0:e3:48:10:2e:e8:
ed:9f:96:f9:48:75:eb:f6:7d:ba:3c:80:d8:c3:56:7d:ff:cb:
7c:8a:06:04:88:bd:f6:8e:e3:54:cf:4d:4a:8b:05:9c:7c:e4:
4e:f6:fc:6d:d1:ef:0c:7b:1a:4b:02:9d:f8:f9:36:ca:fe:c7:
d0:ff:b2:83:f8:af:a3:6b:79:76:eb:b7:be:73:57:5b:89:74:
f7:83:b2:b1:22:a3:2f:ee:a3:30:f5:c2:c4:d6:82:3c:53:e1:
69:3c:10:e7:73:c3:04:3d:61:4e:ea:37:22:8a:10:63:df:a7:
bb:09:f2:4d:fa:20:87:87:4a:18:c7:f2:bc:8d:62:19:af:ea:
33:a2:9f:0f:d6:a5:5e:91:f4:55:4b:1c:1f:61:18:f8:68:1b:
3c:c1:0c:c4:52:da:10:73:aa:4b:38:81:01:3b:c8:0c:17:0e:
74:b5:80:5c:99:1e:f9:dc:8a:5e:74:5b:a4:34:f3:bb:46:94:
af:d7:e2:7a:79:ae:6f:8c:71:4b:35:7b:56:0b:38:f6:b1:b6:
29:da:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:33:08 2026 by rpki-client