
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json)
Hash identifier: ksiF8UPSSQoXBLjnXQgCuDnreg2TePW7K2R9iO5aU0w=
Subject key identifier: FF:66:33:43:3C:F7:3D:AB:2D:DA:EF:B3:AC:FB:33:38:BE:41:F9:57
Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6
Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
Certificate serial: 0340
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
Manifest number: 0339
Signing time: Fri 17 Apr 2026 00:59:44 +0000
Manifest this update: Fri 17 Apr 2026 00:59:44 +0000
Manifest next update: Fri 24 Apr 2026 00:59:44 +0000
Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: sFniW1xP3u56OuRK6LydHt9eFoLuIifynStjUS8i32A=)
2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: vDY7lV8edjns4HhVnBehxYGRkX0r+4hBoe2Cr3cXbqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl
rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6
Validity
Not Before: Apr 17 00:59:44 2026 GMT
Not After : Apr 24 00:59:44 2026 GMT
Subject: CN=69e18600-aa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:b1:e5:12:06:d2:ec:13:12:80:e7:7d:44:
9b:e8:9e:97:de:ec:5d:c3:c5:59:5f:1d:06:f1:d6:
a5:97:c3:83:b7:b4:22:23:4f:5f:23:3c:c2:5a:c1:
14:7e:8b:02:36:2b:ee:75:2c:79:15:db:07:54:8f:
cf:a4:ba:9d:d1:a5:5d:56:8a:9c:69:11:e4:ac:0a:
a4:3f:69:b5:de:92:f9:38:d7:50:64:d7:dd:b0:d3:
25:35:ec:28:3c:b2:9c:26:14:a0:aa:0e:eb:82:9b:
f8:5a:c9:fa:09:27:26:86:f0:d8:e1:2d:b7:72:79:
b9:85:ee:09:0f:91:b8:60:b7:65:cc:6c:9a:45:cc:
33:3d:79:6e:8a:2f:a2:c0:2f:02:55:55:2e:a5:d7:
51:bd:e0:fe:e6:91:ce:f4:a0:df:b1:58:38:5a:e0:
c2:49:50:ee:71:0b:bf:9e:15:bb:ef:58:45:ed:43:
33:de:fc:73:63:d4:0a:16:9a:6f:8c:82:40:a1:0c:
a1:fa:50:a4:f4:b0:35:63:4e:03:7f:e3:6f:8a:67:
cb:51:40:e3:b0:8d:ad:84:41:11:92:6e:05:e4:10:
2e:f0:74:00:e7:42:05:40:04:30:4f:2f:4c:13:e2:
44:9f:d0:2e:1f:fb:8b:40:20:20:5f:d6:36:1d:b3:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:33:43:3C:F7:3D:AB:2D:DA:EF:B3:AC:FB:33:38:BE:41:F9:57
X509v3 Authority Key Identifier:
keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:80:28:cb:24:2c:41:9c:80:d0:a7:cd:cb:05:a8:ce:63:1c:
b0:c4:c4:9e:93:45:49:00:ac:8b:48:f4:ba:0b:49:26:9f:81:
18:21:61:2a:22:c3:c6:d8:55:77:30:0d:6c:cc:c4:12:93:35:
13:63:28:ae:ef:d9:da:88:69:5a:41:7b:b2:c5:c4:50:69:f0:
1a:86:b4:3b:af:7d:e0:e9:d1:3d:d0:1e:ec:da:45:eb:a7:30:
cf:71:48:05:e3:12:23:c4:6f:2b:81:0d:e3:09:46:82:23:97:
00:a5:2e:9e:30:b3:da:95:0b:57:d2:4b:ee:87:10:46:4f:bf:
88:5c:df:18:31:f9:c6:d6:9a:be:8a:9a:68:db:c5:27:d1:c6:
54:b9:36:4a:21:59:50:e8:74:2e:7e:4e:38:5e:05:86:84:b9:
0c:e0:36:40:77:47:58:20:f7:0c:89:2a:a2:06:e8:8a:34:0e:
e3:0d:fe:74:fc:2a:1e:52:12:08:1e:8b:aa:ba:c4:24:a0:7b:
00:70:ce:a5:06:96:0a:01:9e:bf:ae:bd:2f:6d:4e:fa:f4:4f:
e2:a7:65:42:b0:e6:6e:f4:01:ab:89:65:7f:71:5f:b1:a8:d8:
38:cf:22:32:91:4c:b3:e5:71:12:96:b3:1f:8b:1f:f0:c9:af:
25:d7:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:31 2026 by rpki-client