
$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json)
Hash identifier: qsMxxrK4YoOwV8chR+4es329QFRPCvPDkBzl+YCtRlM=
Subject key identifier: E3:C8:71:C4:B5:8B:90:09:8C:1D:01:49:3E:FD:3B:27:46:83:0C:E8
Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
Certificate serial: 0566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
Manifest number: 055C
Signing time: Thu 16 Apr 2026 23:21:22 +0000
Manifest this update: Thu 16 Apr 2026 23:21:21 +0000
Manifest next update: Thu 23 Apr 2026 23:21:21 +0000
Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: vZFjqWEllqv5+tLP9OdhM30p9ae/HY/U6zuO1m8hits=)
2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: ZFaS0mb5R6BUb+cE9Qt/8Ifm4cDm/dmrFXNIbrri4GI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl
rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923E1, serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0
Validity
Not Before: Apr 16 23:21:21 2026 GMT
Not After : Apr 23 23:21:21 2026 GMT
Subject: CN=69e16ef1-21eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:b2:59:6d:b5:de:ca:d7:12:3d:1c:d9:08:
dc:6d:be:ba:e0:1e:e5:69:c5:26:a7:b9:ba:b4:d4:
cf:c0:00:44:d5:b3:97:7a:d1:a4:40:59:f9:4d:ac:
df:d5:44:1c:9f:78:ed:54:b4:ec:99:f1:4f:0f:62:
e5:fd:fd:c1:27:1b:ce:99:3e:e0:f6:ba:53:3c:cf:
79:09:d3:4a:0e:72:b3:11:a2:40:f6:ce:17:be:6c:
55:bf:01:44:6b:2b:99:6f:a8:e4:0f:69:94:29:5c:
71:90:14:07:9c:ed:02:9b:df:80:50:e5:2a:6a:ea:
99:19:f5:3d:b7:f8:a5:dc:b5:26:2d:f1:af:b2:27:
51:dd:1e:25:8e:23:52:56:c9:90:4e:0f:e7:e3:c9:
98:e4:35:7b:5d:2a:9a:05:a5:4a:75:81:ab:aa:ec:
43:30:c9:54:8a:b2:da:4f:f3:2f:09:34:42:94:57:
d8:47:8d:b7:a9:9d:c2:6c:12:0e:17:0c:cd:92:b6:
03:83:5e:01:68:44:19:05:37:30:e2:94:47:6f:1d:
ab:84:0f:3f:7f:2e:a6:bb:1a:18:f0:a2:f6:f6:97:
29:57:6d:b1:56:8a:79:4f:8c:7e:8d:9d:bf:66:ae:
aa:88:69:3a:67:ac:56:03:94:6b:ba:f0:48:71:76:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C8:71:C4:B5:8B:90:09:8C:1D:01:49:3E:FD:3B:27:46:83:0C:E8
X509v3 Authority Key Identifier:
keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:09:e5:e8:bb:4a:dd:ca:6b:65:73:8e:88:90:52:aa:fb:f5:
6b:d9:e4:99:ec:4d:2c:0d:34:ff:f7:4f:ef:22:97:d6:b9:3d:
a0:d4:00:47:97:85:4e:f3:e5:36:4e:a5:3b:66:d7:5f:41:04:
df:d9:8d:52:58:cb:30:a8:d5:50:db:10:8b:36:0d:12:9c:fe:
1e:58:b6:41:9f:45:5d:55:b9:32:76:0a:c5:ab:ed:e0:27:c1:
3c:34:00:a4:85:d7:5c:ea:92:af:55:68:c8:1f:39:73:89:11:
08:a6:28:ae:95:70:b2:0d:c9:3f:7a:5f:5c:e5:29:86:6f:3b:
57:c3:69:f1:c5:91:f1:aa:bf:b9:7f:4b:13:13:e8:a2:bc:fb:
be:e4:b4:e1:47:e5:b2:87:ca:1b:38:c5:2a:19:16:92:59:70:
d2:6c:e3:73:eb:d5:22:be:f8:e1:8a:db:4a:ad:79:52:d7:a7:
72:be:87:7b:9a:3f:b0:a3:d7:20:b6:cc:f0:f3:b3:05:1f:aa:
e6:53:5f:60:69:e4:09:4f:d9:e6:04:16:1b:1d:55:5f:e8:a3:
76:15:0e:d9:25:a3:d2:0c:34:73:bc:c8:51:a9:82:48:9c:44:
8e:5b:9f:9d:11:d1:de:cd:40:45:fe:b8:38:f0:87:4f:2b:94:
9b:3b:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:18 2026 by rpki-client