
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier: koXwve6ty+y20DjOACXQTqhHyhuzluLQSk9eqeVdy/o=
Subject key identifier: 3F:62:AE:29:1C:A3:2F:B7:F5:FC:72:21:6B:BD:F2:C2:32:16:AA:7C
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number: 010C
Signing time: Fri 17 Apr 2026 05:40:30 +0000
Manifest this update: Fri 17 Apr 2026 05:40:29 +0000
Manifest next update: Fri 24 Apr 2026 05:40:29 +0000
Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: RrLUMnu05ENEJjkfz7Zke8x/gqZr2rpfLRP+DTFDEGk=)
2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: hdQpo+xnXuDoOPe/5r+BnsM8aeG+LI4VCVPfcf0L3eI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Validity
Not Before: Apr 17 05:40:29 2026 GMT
Not After : Apr 24 05:40:29 2026 GMT
Subject: CN=69e1c7cd-522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:ca:22:02:16:cd:17:fa:7e:57:cf:92:d0:
5f:0a:56:84:8a:91:9a:61:d0:19:4f:7d:e2:f7:d5:
80:db:d7:e6:39:24:37:ed:83:4d:4d:54:74:58:a1:
7a:79:da:a1:d5:b2:07:14:1c:02:68:d6:0c:43:e2:
f4:36:03:3b:3b:cb:a1:19:d5:f7:63:50:01:f4:87:
d0:6a:fe:76:59:00:8b:71:6e:43:2e:0a:74:6d:b1:
06:be:db:6e:cb:4b:bd:13:33:eb:bc:38:98:55:fe:
b4:db:d2:da:1c:78:38:0f:00:72:89:e1:f9:6c:53:
6f:1d:97:96:ea:23:2f:e9:ee:e7:90:0a:33:16:2f:
a6:e1:34:59:56:a9:6e:79:a4:a3:ec:02:b1:ca:80:
3b:e3:9b:27:03:e5:90:e5:b2:bf:ce:8c:0b:bc:7d:
f6:63:df:30:51:89:31:68:bd:96:09:ea:a5:5f:f9:
c6:24:9f:5d:4a:99:c2:a0:44:e2:7b:20:d9:54:dc:
0c:b9:36:c4:f3:df:90:ef:ab:40:79:de:d7:d5:90:
b4:a3:f6:b9:2e:5f:35:0d:cc:3f:6b:8b:7c:61:27:
e9:c2:1d:01:b4:93:65:64:ab:d4:8a:97:0f:43:25:
1e:f4:5d:a0:80:2d:6b:f7:2d:fd:95:8e:05:92:b9:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:62:AE:29:1C:A3:2F:B7:F5:FC:72:21:6B:BD:F2:C2:32:16:AA:7C
X509v3 Authority Key Identifier:
keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cf:ac:04:09:c8:b1:a6:76:d6:b6:72:2a:81:89:f7:25:71:
4f:0b:89:26:4f:41:e3:e8:a1:0d:89:fa:3e:db:25:67:0a:a4:
97:aa:ef:71:bd:89:0a:e1:25:40:fa:75:54:69:44:6a:35:f6:
9b:c7:1f:d7:c0:f8:c6:e8:6d:c8:08:02:bd:af:fd:06:fe:78:
77:de:36:30:69:ab:87:cd:67:5a:27:d6:ed:76:5b:b3:b9:19:
ad:18:ce:26:53:8e:01:b3:f0:88:c6:c6:2f:7b:97:fe:61:be:
d6:9e:fd:a1:5e:9b:87:24:e8:cc:5d:8b:c6:d5:3e:22:1b:c1:
0c:bd:dc:16:03:31:41:7f:4b:e3:8d:f6:0c:83:3f:8d:bb:de:
b2:17:95:ce:32:8d:83:a4:2c:d9:12:1b:fd:74:dd:e4:07:85:
d2:45:30:11:44:1b:f4:b8:ef:e7:fc:fd:67:32:3d:b2:03:d1:
c8:bf:6d:5e:61:8f:c9:88:8e:2b:87:fa:d7:02:6d:09:cc:b0:
e8:b7:8d:28:ab:dd:8c:c2:cd:c6:d4:82:fe:a3:0e:02:7e:fe:
46:87:f8:68:06:5e:96:c5:2a:b5:0a:2c:e3:6b:9a:2d:2e:24:
31:3a:b3:3d:09:da:f2:bb:6f:58:01:54:27:0e:1c:05:5b:de:
0a:7b:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:17 2026 by rpki-client