
$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json)
Hash identifier: drgr7XVHduPhv7x3ujCTTlKA5U1di9uoXJga9OWaEwI=
Subject key identifier: 7D:AE:D8:BB:4D:5C:70:9A:66:27:5C:AF:66:F4:47:37:AB:54:67:E8
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial: 0C2D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
Manifest number: 0C23
Signing time: Thu 16 Apr 2026 15:10:34 +0000
Manifest this update: Thu 16 Apr 2026 15:10:33 +0000
Manifest next update: Thu 23 Apr 2026 15:10:33 +0000
Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: Z8nO+3w2ssp00HkJJ+5gakUFyKbz6QLMuz1Kt1hwKcM=)
2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /lTemBonHucyHdLH99iEZJS0pkpWT8EtwFhDtf78iXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3117 (0xc2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Validity
Not Before: Apr 16 15:10:33 2026 GMT
Not After : Apr 23 15:10:33 2026 GMT
Subject: CN=69e0fbea-bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:e6:18:18:36:13:c1:12:a9:a1:7c:0b:60:
55:85:12:80:b4:74:61:9d:d6:75:d4:a0:0c:ad:bb:
9e:2b:8e:6c:b4:8c:f8:3e:e0:44:1c:7e:1c:2d:59:
28:b0:61:55:01:c5:c6:37:ad:6c:2d:cd:b7:76:84:
3c:f1:e0:5e:be:cd:8d:db:de:d3:1d:af:90:96:45:
a6:06:3b:44:3d:07:7b:7e:76:f4:eb:e6:cc:88:5b:
40:83:57:18:1c:64:f7:5e:ff:c8:7a:b7:6b:ab:fc:
d2:cf:80:b6:e1:cc:5a:b8:02:a7:f7:72:bd:a5:68:
9b:6c:49:bc:c5:04:9f:81:f0:a8:bb:7b:a8:52:7e:
64:bd:c7:96:f4:f1:7b:84:03:ff:ce:9d:f5:a1:6a:
bd:1f:f1:8a:5e:6a:61:84:b8:8a:1b:e3:ff:21:7c:
ab:34:11:18:28:6e:9e:56:73:f2:e3:64:b2:04:f5:
16:02:c7:a4:5d:fa:6f:80:63:ba:79:d8:04:a7:01:
cf:00:37:67:ed:23:63:c5:a0:62:b5:a0:d4:50:39:
72:94:91:15:4d:07:87:ac:2a:20:e1:4a:f9:04:40:
f1:17:c4:0a:97:71:0d:13:8e:8c:6d:de:79:6f:f4:
56:57:32:92:74:5b:27:0d:33:cd:e0:86:01:c7:1a:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AE:D8:BB:4D:5C:70:9A:66:27:5C:AF:66:F4:47:37:AB:54:67:E8
X509v3 Authority Key Identifier:
keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:91:fe:a5:f7:46:78:30:b6:a4:ff:6c:de:0d:1a:ea:d6:b5:
20:aa:30:65:e3:a2:96:cc:1b:d0:cb:1f:b1:6c:19:12:cb:53:
6c:a9:2b:15:b8:1a:c6:fb:af:09:f7:42:2c:1e:a2:48:37:50:
cd:7b:37:ea:ea:b0:a2:44:55:dc:20:44:5c:bf:62:5c:2f:5a:
c8:45:a4:60:55:df:9d:ce:af:61:62:23:53:90:61:c3:fa:27:
30:3e:7a:0b:fa:bc:68:b0:04:3a:ca:46:96:c5:40:7a:ef:a3:
ed:e7:e9:4d:9c:bb:91:89:20:c8:4b:5f:80:31:b7:66:d3:be:
24:a0:fd:01:53:53:4b:46:a1:04:ba:e4:07:9d:32:5b:88:8f:
80:fd:92:45:22:b0:59:d8:3c:3e:88:66:c0:4f:d6:e9:38:7e:
25:97:9e:d2:cd:dd:d2:d8:8b:37:1d:85:00:d5:46:a9:a4:b7:
9f:f3:51:89:41:5a:dd:c7:e2:96:7d:c2:b1:a8:a2:6e:14:13:
80:c5:9e:12:15:e2:8c:0e:f7:a7:30:c5:18:7a:a6:bc:aa:d3:
9c:e5:13:8e:1b:1c:c8:d1:69:7b:00:e2:77:9b:c1:62:4d:32:
04:86:02:dc:dc:5d:0e:3e:45:8d:b4:63:ea:28:eb:ef:f5:7a:
62:7a:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:16:53 2026 by rpki-client