
$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
File: R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft (raw, json)
Hash identifier: y2fs1dnj9gca+INiEggnfCwznAEKOzlRHKrwwhbpVhY=
Subject key identifier: 1A:57:5E:09:ED:F3:D2:E4:33:1B:24:06:18:47:AE:F7:11:04:51:23
Authority key identifier: 47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
Certificate issuer: /CN=A91918AB/serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Certificate serial: 3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
Manifest number: 3B
Signing time: Fri 17 Apr 2026 08:15:06 +0000
Manifest this update: Fri 17 Apr 2026 08:15:06 +0000
Manifest next update: Fri 24 Apr 2026 08:15:06 +0000
Files and hashes: 1: R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl (hash: Sxe+cfNs/R1QEB7R4Jm6Tl9mDR+bsAN6mx2UqssOgFg=)
2: 1CCFF4EAE94411F0858458963C6F56BC.roa (hash: zSizwmjwC1EUvKxUhWbJHmVerxHzuPrZmy1ydtzt1dI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91918AB, serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Validity
Not Before: Apr 17 08:15:06 2026 GMT
Not After : Apr 24 08:15:06 2026 GMT
Subject: CN=69e1ec0a-4be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:84:c1:d8:dc:93:8a:e4:07:3f:e0:18:67:
12:40:32:3b:26:42:73:1b:50:71:89:17:4c:80:6c:
e6:80:6d:f5:18:b0:89:1e:c9:29:d0:1a:4c:f7:4b:
9f:2d:fb:0e:96:b0:e8:82:2f:50:4f:46:4c:cb:62:
f8:4c:d5:99:07:5b:82:84:03:a5:9a:6a:62:0c:ba:
df:83:0b:d2:f6:3a:8e:3e:81:52:67:54:12:31:62:
f9:4f:0c:10:4e:ee:09:5e:36:63:c4:ff:bf:76:e4:
6d:50:53:dc:db:be:13:36:a6:76:d1:f4:5f:7d:52:
87:2d:a0:f0:a2:42:ac:7a:98:bc:5c:6c:a9:0a:fd:
5e:8a:c2:14:0b:78:6f:a7:dc:9f:12:0c:7c:07:ac:
d4:4a:4a:d8:ed:89:d0:1e:aa:d2:9b:bc:b2:8c:2a:
74:5a:2c:41:e6:26:58:7a:44:f4:21:8c:38:06:36:
85:d4:65:23:6d:95:11:b9:0f:f7:16:19:f3:57:ab:
80:6c:95:ed:d6:04:9c:20:e8:e7:7d:86:1b:5f:78:
a4:4e:7d:72:c4:cb:3d:bd:8c:91:7d:41:90:6b:0f:
dd:3c:8b:5a:80:75:a4:49:ec:80:c7:1a:02:23:c9:
70:1b:49:77:5e:fc:9f:93:10:0f:0a:da:a3:27:62:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:57:5E:09:ED:F3:D2:E4:33:1B:24:06:18:47:AE:F7:11:04:51:23
X509v3 Authority Key Identifier:
keyid:47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:e7:6f:c1:fc:ca:31:2d:1a:da:d5:55:cd:a0:49:6a:76:41:
4c:0f:11:94:20:bb:d5:10:69:d2:21:79:69:98:34:09:31:28:
bf:f6:b0:9a:05:1c:2f:46:0a:e5:d0:5b:cb:22:74:60:e0:f4:
53:0d:78:4d:13:cd:f8:e1:4d:df:90:42:29:03:51:bb:82:dd:
ea:3b:f6:58:3c:e2:61:4a:89:ab:d0:3a:56:78:c3:45:4d:d1:
36:44:56:6c:3c:d0:cd:75:53:9f:40:44:77:62:a9:4a:8a:35:
c4:78:48:42:23:d3:c0:59:af:f8:ec:61:f4:ed:4b:91:0b:d6:
01:25:f6:03:49:29:5e:2c:e1:80:ec:5e:fb:9e:64:4f:8f:fe:
69:d8:78:d7:2a:8f:62:60:1c:f3:cc:58:18:a2:04:47:39:ed:
3e:70:e8:bc:be:e3:e9:c8:4f:70:cf:ba:3f:94:c5:f5:5c:31:
98:80:42:7b:30:cf:fb:34:14:12:a1:16:29:1e:77:74:21:3f:
c5:49:54:ca:11:7f:c0:18:33:aa:92:57:4d:16:2a:da:4b:39:
92:8c:3f:3f:f3:0f:3b:b7:df:e5:b6:08:a4:86:ec:4f:6f:9c:
f0:e2:51:b5:e5:07:df:11:3e:a2:32:be:47:d6:43:63:97:06:
b6:4e:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:57 2026 by rpki-client