
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json)
Hash identifier: uGUkYAZrkea04XvRuAkYARpabzl+ptZGl3QLCECGo8Y=
Subject key identifier: AE:84:83:7A:F6:08:47:2F:E6:7A:2B:13:A2:86:83:63:64:8B:8B:60
Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60
Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
Manifest number: 021A
Signing time: Fri 17 Apr 2026 02:34:55 +0000
Manifest this update: Fri 17 Apr 2026 02:34:55 +0000
Manifest next update: Fri 24 Apr 2026 02:34:55 +0000
Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: GvDQoGJKMK7y1k6wcGFeyFgXXvQDBR4WSPPLXoYTfqM=)
2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: w83Gd1qNybw8NY4qox6lPSa3DzAa4i1Y84/n9D6sf/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl
rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
Validity
Not Before: Apr 17 02:34:55 2026 GMT
Not After : Apr 24 02:34:55 2026 GMT
Subject: CN=69e19c4f-0b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:b1:31:a6:a8:a2:09:b0:4f:f3:02:19:57:
4f:85:a5:2b:2e:5b:b2:45:53:8e:1e:85:68:72:cf:
b4:86:32:e7:40:1a:fa:c5:37:10:75:c2:19:71:18:
76:4c:b8:57:be:5d:65:de:86:cf:d5:6b:fd:c7:d1:
e1:5b:93:9e:22:7d:18:78:18:a4:9f:5f:df:c8:bf:
3d:fa:3a:d0:2a:72:3f:22:6e:d8:ee:53:c8:71:20:
db:b6:fe:93:62:16:ab:d6:30:61:35:82:2e:58:7a:
fc:81:f1:22:5d:56:f1:80:fc:dc:8b:60:33:c3:32:
9f:10:dd:05:26:9c:4b:85:fa:ec:38:8a:b9:50:63:
fa:75:9c:a6:2f:3c:e3:17:bf:00:3a:0c:80:45:7e:
cd:02:43:21:c7:43:2e:ad:b4:98:c3:56:e0:db:0a:
10:11:af:75:6c:19:87:63:c6:4c:de:61:6b:4b:01:
63:48:f8:90:42:e3:07:71:c2:2c:9b:e8:24:4b:da:
5b:2b:7b:3c:ed:6f:5b:9b:49:22:94:01:2b:ff:19:
8a:35:be:84:a0:f8:3a:0b:2f:2d:7b:a0:d4:81:4a:
eb:5e:7f:7a:75:2e:ad:30:2c:38:36:a6:04:5c:fd:
b0:26:32:21:64:22:15:22:42:52:23:63:e6:02:8d:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:84:83:7A:F6:08:47:2F:E6:7A:2B:13:A2:86:83:63:64:8B:8B:60
X509v3 Authority Key Identifier:
keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:c5:07:6d:fa:fc:59:a7:4e:a3:99:3a:eb:8d:54:f1:08:
0c:77:c8:e1:be:22:3a:65:5b:56:26:9c:b2:14:d2:ab:bb:0a:
16:0e:86:97:3a:c6:8e:0e:12:ff:dc:26:68:20:91:ba:08:44:
68:f4:64:14:b4:a2:8e:f6:ed:cc:b3:37:8e:5a:24:d6:d7:8c:
d7:2e:14:43:fb:ff:de:86:aa:e1:af:48:cf:b2:f0:ec:a0:17:
1f:4b:1a:d7:2c:bf:94:b4:55:c7:90:d1:55:40:40:31:ef:21:
aa:9a:a2:2d:42:88:6a:ea:8b:33:e7:a3:16:87:86:b3:3b:cb:
ff:fd:da:c1:5e:8c:e7:b6:ee:ea:f9:4c:49:f7:45:c2:b4:3f:
dd:7f:14:34:fb:72:cd:82:ce:63:8d:6b:ed:bc:75:ff:c0:c5:
9f:fa:2d:20:18:30:0a:50:b1:30:5a:c5:14:9b:93:ae:a6:c0:
82:f2:fa:87:63:f0:8e:e9:1a:32:5f:2f:77:f5:77:32:41:c5:
8f:17:d9:7d:d4:c6:bf:e9:80:78:39:07:85:d2:10:f6:8b:47:
10:d9:78:13:f6:af:e4:70:48:0a:9d:68:c0:fc:e0:d9:c0:16:
48:ed:59:c0:2c:de:0e:87:7c:24:29:d0:f9:3f:c1:e2:0c:ac:
ff:aa:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:37:35 2026 by rpki-client