
$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
File: 66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json)
Hash identifier: kMcIEvgPBTlGJZ7X05tTpWGV1c6XcVps/jirkiCLa7U=
Subject key identifier: 16:EA:6C:CD:35:C0:5D:92:D7:42:B7:E2:6C:B2:7F:24:08:91:76:EF
Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
Certificate issuer: /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
Manifest number: 0158
Signing time: Fri 17 Apr 2026 04:42:54 +0000
Manifest this update: Fri 17 Apr 2026 04:42:53 +0000
Manifest next update: Fri 24 Apr 2026 04:42:53 +0000
Files and hashes: 1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: MKZL2DZQ9iv+DZ0RxQUfPCalLikKGC6aAqK5Scnptd8=)
2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: TP1lZPycmwhzIV9eyCEIRMOWox0jw70KYaYid67Sq48=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Validity
Not Before: Apr 17 04:42:53 2026 GMT
Not After : Apr 24 04:42:53 2026 GMT
Subject: CN=69e1ba4e-36f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:64:fe:7b:5c:c4:47:f1:12:a2:07:b1:4b:
6e:42:65:58:a1:60:67:c5:eb:38:a5:b9:cb:f4:c1:
6a:f4:72:11:5c:96:b7:ef:8b:4a:94:4d:7f:8b:88:
2e:e1:a9:e3:77:8d:0c:ca:a4:05:9f:0c:28:8e:8d:
99:0d:74:83:af:ba:ac:5e:4b:3f:17:5c:ae:7a:2c:
38:2d:1b:0d:8f:18:c8:5d:8c:63:5f:54:9c:3a:f3:
94:05:60:96:51:b5:ac:b1:67:70:22:ca:2c:7c:5e:
56:9e:bb:9a:e8:bd:70:ac:4d:49:a8:01:d5:24:ed:
29:45:ea:99:8b:3c:76:67:f3:5d:e0:be:78:8f:e1:
1a:54:fc:d4:e3:8b:f8:61:ca:50:8e:42:ce:a7:c4:
04:4d:35:5d:aa:d5:b0:2b:d1:68:dd:f3:36:a5:ca:
3d:8a:17:91:b9:2e:ce:e2:23:49:38:01:20:31:d2:
89:64:30:08:ba:fa:8e:48:a0:72:b5:4e:32:41:1a:
68:18:89:73:29:26:15:8c:87:86:f9:fd:49:3f:51:
1c:63:a0:91:f1:5d:e5:5c:b7:c3:64:56:32:10:77:
b9:36:4d:c2:35:b5:41:da:53:d9:b4:c9:fe:d0:e2:
af:38:1a:18:8a:51:b2:06:f5:23:6d:77:19:c2:a8:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:6C:CD:35:C0:5D:92:D7:42:B7:E2:6C:B2:7F:24:08:91:76:EF
X509v3 Authority Key Identifier:
keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:a0:61:87:dd:7c:02:08:0f:46:3a:f9:3f:0c:c8:e3:57:
30:b7:c9:a0:9d:fe:4d:6f:65:32:d7:e3:49:41:23:a8:4b:1e:
ac:71:29:24:e6:f3:fd:e4:ea:a1:d4:6f:33:ef:b1:e3:02:85:
c4:80:f3:e6:35:f3:97:9b:bf:ac:76:96:e2:25:eb:93:8e:2b:
5b:26:82:90:84:e3:c0:32:ca:0e:c3:4f:2b:d9:d2:8a:c1:b8:
fe:22:a4:88:27:7e:c6:3e:da:8b:c6:0d:3a:06:f3:22:92:be:
79:a5:64:56:4e:56:a4:46:12:ad:04:b7:6d:0d:6f:b3:f9:72:
1c:a8:3a:0c:9d:f0:42:39:7a:77:4c:66:f2:26:fd:e2:37:da:
d7:53:bc:6c:a0:9a:df:cc:c2:83:2c:3b:1e:18:7b:db:54:c4:
78:a9:2f:cc:5e:15:26:9b:e6:b9:46:ef:75:f8:7e:73:e2:71:
ad:86:22:ad:cc:00:91:57:95:ba:28:7a:2a:8b:56:bf:d9:fd:
86:01:11:47:4b:fa:20:b9:6b:06:71:b2:f6:02:48:2a:bb:d5:
c7:e5:14:2b:ba:de:6a:f1:18:63:f9:1c:e1:3b:e6:70:51:2c:
59:6b:16:3e:78:b9:ae:d2:0c:37:83:85:e2:a6:2b:76:6e:c0:
61:86:b8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:21 2026 by rpki-client