
$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier: 31K5F9p5rHdcEyOl7R3T5QRhcUH3rdxLZHc8/IsmHNk=
Subject key identifier: D0:02:8A:6D:E9:47:23:2D:70:32:09:4F:3B:FD:75:3C:36:56:9D:F9
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial: 0838
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number: 082E
Signing time: Thu 16 Apr 2026 20:53:53 +0000
Manifest this update: Thu 16 Apr 2026 20:53:53 +0000
Manifest next update: Thu 23 Apr 2026 20:53:53 +0000
Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: VlDCUQ9ttzkSvYiCRht1DsTxJwGuOyAIqx6wtbaEQgc=)
2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: wjDSbRQKtPAWbh/Hzs+97MdegPLfvSS74VnDP3uybto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Validity
Not Before: Apr 16 20:53:53 2026 GMT
Not After : Apr 23 20:53:53 2026 GMT
Subject: CN=69e14c61-348a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:3a:f8:bc:16:05:b6:79:ad:f1:b8:64:c4:
cd:30:f5:a4:b9:0c:3a:62:df:69:bb:dd:6f:a4:ae:
26:05:6f:10:ef:c0:82:d0:0c:d4:b1:c4:f6:b4:d5:
2e:5c:6d:9b:56:14:8e:01:7b:3b:59:9c:7a:c6:6f:
16:2f:00:32:14:0d:eb:73:99:f8:b6:56:5b:05:de:
02:67:c0:13:bc:f5:45:da:ee:54:81:7a:fb:78:65:
76:96:80:21:6e:40:4e:83:dd:72:8d:d6:a6:68:de:
f1:cf:83:85:d6:54:5f:48:38:81:97:a7:3b:54:80:
c5:4e:51:7c:f2:3f:59:66:cf:e0:e6:4c:02:c2:c0:
5e:4a:12:e6:2c:7b:24:a1:03:06:3e:53:6b:3f:b1:
b8:c3:c3:6c:b4:8e:6a:7f:8f:e8:7e:86:ab:f6:6f:
23:5d:39:17:5d:4a:9d:82:34:32:82:97:ee:af:d4:
c2:88:91:c3:0b:54:95:ab:ba:cf:7f:11:e9:3c:78:
54:e7:55:de:58:f6:eb:68:7f:c2:51:50:12:6b:83:
40:82:4d:6b:13:13:fa:a5:c8:97:47:06:75:e4:bc:
84:83:30:d4:3d:26:6d:8d:0e:d1:bd:0c:d7:ab:10:
20:d4:22:68:75:66:e9:35:b4:64:a9:2b:6a:3c:e2:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:02:8A:6D:E9:47:23:2D:70:32:09:4F:3B:FD:75:3C:36:56:9D:F9
X509v3 Authority Key Identifier:
keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:4d:e4:cc:86:b5:0b:16:22:76:cd:d1:75:9b:97:d6:61:8f:
24:27:06:af:19:13:00:08:7d:b3:1a:82:ec:e7:5c:03:6d:1d:
a0:5d:a2:fa:02:9d:d6:62:01:3c:90:45:f8:7e:ee:f1:e5:27:
d2:66:40:b5:e6:c5:51:e2:0f:00:50:de:42:38:55:bd:00:d9:
db:c0:68:4f:09:0f:2c:3e:12:b4:70:44:46:fd:85:e7:9b:d5:
70:e1:5f:c0:88:64:08:52:cc:a8:7f:08:57:44:04:a4:da:82:
72:14:0d:bf:bf:aa:a4:d2:54:d5:da:bb:f3:d0:5d:21:61:89:
87:6d:ec:60:3f:5b:b8:bd:05:79:0c:20:d0:c3:25:17:f6:ee:
21:91:ba:41:c3:8f:be:42:ac:ed:2f:b5:74:db:b5:cf:b4:db:
83:bd:e5:7e:bb:83:36:f6:c3:74:40:23:9a:7f:8d:55:5d:7f:
4a:df:7d:70:f8:1a:d9:5b:73:9f:3d:b6:53:61:74:72:64:dc:
76:ac:54:2d:c0:40:9f:cd:78:61:67:eb:85:31:58:b0:1a:ea:
45:ae:45:a1:9c:1d:24:01:60:c7:c9:0e:90:28:b1:5f:8c:f8:
db:05:ea:02:dd:17:06:fa:04:95:97:55:4a:05:07:29:43:7c:
d7:98:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:43 2026 by rpki-client