
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File: T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier: oTQEnTY9J9fPt8uzQB3TdjBe4yc+ALBZsX1qlQpxb5U=
Subject key identifier: 11:35:96:A3:9F:1C:64:76:6C:C2:CF:F8:59:D8:70:F3:BF:E9:75:77
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number: EA
Signing time: Wed 15 Apr 2026 06:28:40 +0000
Manifest this update: Wed 15 Apr 2026 06:28:39 +0000
Manifest next update: Wed 22 Apr 2026 06:28:39 +0000
Files and hashes: 1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: AwVaIYc1YIvTyTE6WNdoRX3yhgvYEixLAvVe8OP5W34=)
2: 103C3FCAE4AF11F0B84F3FCD4D6F56BC.roa (hash: WN9jNLUDVkScc2VwyjVRjxoYh5SYPgH/o4+1aUQoPPY=)
3: 51837F10DFBA11F0A83E81424B6F56BC.roa (hash: LVprEoYWuua5rrzKiMs4poYTHMNe7AlnKomE4Yn7e3E=)
4: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (hash: 8GUCnWGwQKv7AVc43/CF2Tf/opw5Si0JDT9fOcD5AfE=)
5: 502C3A08DFBA11F0A83E81424B6F56BC.roa (hash: 6xHuo0DnepEGRmB08a/9C8nmjyPvfstg4avyUEG2ltc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Validity
Not Before: Apr 15 06:28:39 2026 GMT
Not After : Apr 22 06:28:39 2026 GMT
Subject: CN=69df3017-6b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:29:d2:3c:a5:1d:2e:ae:68:9f:5d:5d:e1:
5a:c2:49:1e:d5:5f:5d:8d:c6:ef:f4:38:33:44:d7:
43:98:df:21:e7:4d:ae:8d:f3:7a:85:cd:d6:f1:68:
ba:4a:18:ff:ce:c1:d1:14:3c:e1:3d:2c:4c:ff:4b:
97:ab:17:3b:97:94:b2:57:f0:9e:06:15:99:fc:d3:
f4:46:34:6d:c3:00:ed:7a:1c:7e:ce:bd:dc:18:2b:
9b:e9:7b:7e:2d:ac:23:1d:e6:a3:4e:2a:50:76:66:
40:a8:b6:53:50:88:b6:5c:d7:6d:d6:c7:22:a7:c5:
5e:fc:1c:dd:eb:6a:46:80:fd:f2:0f:e1:9a:99:ff:
72:f1:52:57:b5:44:ac:75:d1:e3:33:6e:e3:fb:2c:
00:c7:b9:9a:0e:60:05:0e:d1:6e:0e:65:bf:4c:61:
80:fa:b6:38:04:92:71:57:0a:0b:ef:c5:c6:5b:c7:
f6:22:54:05:92:74:ae:9c:19:2a:6f:69:8e:cd:e6:
35:1d:95:57:19:1c:cf:22:ef:bd:e9:0c:1a:e7:14:
37:5d:22:d2:61:08:f5:ed:f6:05:5b:b5:4c:e8:e9:
2f:42:68:c7:45:ed:ac:c0:f7:e7:47:a9:bd:11:56:
dc:4f:76:5a:b8:21:be:34:5f:af:dd:a6:52:d7:04:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:96:A3:9F:1C:64:76:6C:C2:CF:F8:59:D8:70:F3:BF:E9:75:77
X509v3 Authority Key Identifier:
keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:02:ec:3f:36:f3:76:6f:26:37:53:83:c7:62:32:fc:62:9b:
bb:af:30:0f:3e:f5:43:c0:ae:6d:3d:9c:b1:cb:14:ec:2e:40:
80:42:28:17:63:10:3b:9c:c7:c4:82:17:47:c9:46:e0:90:b2:
6f:48:46:c0:03:16:43:72:7a:59:95:3d:e7:87:c3:f6:e0:08:
71:b7:0b:ba:55:05:b0:ac:55:1f:e1:67:8a:dd:cc:f5:c8:8d:
78:3a:56:62:1f:8e:39:97:b5:a6:49:d0:d5:8d:8b:fb:7a:0b:
1a:3b:a6:08:5c:f3:7e:bc:3a:b6:b8:2e:4b:58:b7:9c:ce:12:
01:17:c9:24:e4:e3:3f:4d:28:09:c4:f4:a6:e2:47:eb:42:a1:
48:3f:a8:c0:09:ed:f4:60:41:5b:f6:66:7d:08:64:be:7d:b3:
45:f5:f8:64:e1:b7:5d:d0:49:3a:37:41:a3:29:ed:e3:9a:14:
25:c4:59:bd:d0:66:23:af:49:28:ee:a2:7d:f8:3d:1b:68:72:
8b:de:99:00:8a:b2:57:5a:5f:cc:b9:90:61:65:8e:c9:b2:88:
0f:06:88:fd:01:b8:42:b4:12:2e:bc:ac:a6:df:be:31:77:cd:
30:6f:a9:ea:8b:ee:42:ef:c5:bc:37:83:c4:5d:4b:4a:8b:78:
f9:09:de:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:23 2026 by rpki-client