
$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json)
Hash identifier: OuNZNydkB7j2X+wLtpHEtR/QxYOdLce2M8id5BR3zVw=
Subject key identifier: 39:74:85:95:25:D6:12:DD:D7:64:27:9B:00:C0:AD:76:E4:6D:47:2B
Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Certificate serial: 188D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
Manifest number: 1884
Signing time: Thu 16 Apr 2026 16:26:25 +0000
Manifest this update: Thu 16 Apr 2026 16:26:25 +0000
Manifest next update: Thu 23 Apr 2026 16:26:25 +0000
Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: IpsTPsKFoKFfc6VoZa69FcqwQnEr4K87o7OCfhu7UgU=)
2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: l5RtQonTXNSBGH8zDtmLZh3WC3KxiK5dhZgCVOyckgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6285 (0x188d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091
Validity
Not Before: Apr 16 16:26:25 2026 GMT
Not After : Apr 23 16:26:25 2026 GMT
Subject: CN=69e10db1-e408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:fc:89:4c:54:86:fa:88:c1:86:fa:d0:53:
76:ed:9c:d2:e4:8c:6e:7e:dd:d7:ec:a1:db:3f:94:
ba:5b:c7:5c:d5:ee:f7:6f:6a:65:ae:7b:7c:24:84:
56:2a:3f:af:db:df:f6:d8:50:e0:55:96:5f:3d:69:
a2:5a:0a:08:b1:60:d7:c2:af:3b:d3:ae:c7:e8:e5:
25:42:f1:84:39:6e:60:b0:a6:ae:a7:06:ea:1a:e7:
3e:e4:a1:97:9d:ff:fb:c5:9e:29:87:82:06:83:27:
0a:6a:3e:cc:5d:41:08:d9:93:11:a4:bb:ce:9d:94:
ae:41:ac:00:63:84:30:dd:fa:36:e3:8c:a5:2e:52:
39:70:5f:fd:9a:8d:ca:c2:a7:a6:36:f1:93:22:09:
f1:79:4a:af:24:5f:91:b2:fc:45:6d:c7:26:03:1b:
2b:6b:c7:c0:21:57:7c:91:07:a7:1c:f9:33:51:c6:
96:4e:9b:b7:63:98:d3:ab:69:9f:48:e8:80:63:49:
75:0e:fe:01:17:bf:30:dc:6f:0c:ff:03:ec:ef:eb:
b5:ed:dc:a3:c0:c8:7b:d1:d4:06:ad:aa:5d:61:03:
24:06:48:0c:8c:b3:8a:79:5f:a8:41:2e:01:36:96:
2f:ff:14:60:03:bc:f4:93:6e:8e:98:78:09:c8:de:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:85:95:25:D6:12:DD:D7:64:27:9B:00:C0:AD:76:E4:6D:47:2B
X509v3 Authority Key Identifier:
keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:fe:8e:38:b2:9f:4c:27:77:2b:ab:45:89:2a:b4:8a:e5:7e:
eb:cc:36:ca:3b:f7:13:d4:1a:38:c6:87:ae:c1:07:45:2b:86:
23:c5:c9:2b:92:65:3b:be:ef:c6:01:0e:3e:04:e7:8f:f7:f8:
bc:88:36:49:13:70:66:66:09:90:17:41:87:99:2a:d8:9c:d2:
e4:a8:e9:76:1b:54:00:b8:39:56:67:75:06:50:55:35:79:12:
7d:0b:23:24:5f:1d:59:6c:9a:25:f1:83:ea:ce:e3:64:9d:df:
f4:1f:54:2f:b4:cb:29:f2:9c:ce:d6:9b:59:ea:df:e0:f1:fa:
3b:2c:16:79:e8:07:67:a1:d4:8a:30:01:e7:11:e9:66:ca:57:
64:55:1e:99:6e:12:6c:e8:57:25:e4:1b:78:c3:dc:3e:51:d2:
0a:cc:c1:b8:ea:dc:37:f9:f2:e8:20:cf:0c:57:6c:e7:b5:2d:
f9:cb:4b:2b:7f:b5:17:21:9d:fd:da:cc:89:e2:98:81:71:fa:
a2:7e:7a:99:db:ab:8f:8a:45:93:3f:a3:86:68:61:59:38:fc:
c3:86:8e:2b:d2:09:07:18:49:14:de:16:4e:43:3d:11:71:7c:
5e:ba:18:11:8c:4f:fd:8b:72:3e:e0:33:08:12:62:7e:8f:19:
3c:70:c4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:14 2026 by rpki-client