
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier: +wTMRs7gk6PXJm7/vLwz/vnBxfw5B1s+vx7SVCGDUjA=
Subject key identifier: 62:B5:E6:97:6C:D6:CB:70:F3:94:9A:ED:22:6E:86:18:9D:41:9D:99
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial: 02A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number: 0286
Signing time: Fri 17 Apr 2026 01:45:14 +0000
Manifest this update: Fri 17 Apr 2026 01:45:13 +0000
Manifest next update: Fri 24 Apr 2026 01:45:13 +0000
Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: MIcv82LmF2cPVJo6MtNMyEqHl/1oyIQ4zPr1pfrxS4Q=)
2: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=)
3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Validity
Not Before: Apr 17 01:45:13 2026 GMT
Not After : Apr 24 01:45:13 2026 GMT
Subject: CN=69e190a9-e570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:5f:25:f4:be:a7:ed:86:a0:91:30:ad:7e:
7f:a3:b7:4a:ab:72:49:55:43:9b:f0:c8:da:6d:cd:
5d:39:29:73:f6:8c:06:6e:c2:58:5b:e2:9c:d0:4d:
5b:46:60:2a:b6:b8:fd:f0:ec:eb:42:47:65:78:05:
cd:70:d2:ab:57:33:07:b9:93:22:5e:f5:83:23:b9:
9b:32:83:9e:63:be:66:60:fe:e8:a0:71:f3:11:65:
ba:75:e0:32:cb:11:93:96:c6:3c:79:3e:7f:d6:ff:
21:2d:ef:b9:c7:e9:89:01:b0:f5:5b:e6:10:ea:d8:
ea:5f:48:1c:de:03:93:8c:eb:c5:4a:19:f1:e6:7e:
5a:87:c6:8d:7e:1f:60:b3:77:88:41:8e:80:98:6a:
8c:1e:e1:0c:18:13:d2:41:85:d9:a4:c1:85:e6:cd:
d5:8b:80:31:9a:ef:64:96:43:50:c4:16:aa:e8:0a:
81:af:b8:55:04:f1:20:0e:3a:d9:74:2b:d3:48:15:
a4:78:fa:fb:21:71:7c:49:eb:98:21:5b:fa:04:51:
09:a1:a6:be:24:39:5c:e6:b7:27:75:21:77:ee:fa:
f4:11:3d:dc:44:48:b9:28:28:44:47:8a:68:ee:03:
be:4b:f6:b3:0c:26:f3:a7:7a:e0:58:0c:91:3f:59:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B5:E6:97:6C:D6:CB:70:F3:94:9A:ED:22:6E:86:18:9D:41:9D:99
X509v3 Authority Key Identifier:
keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:55:f4:a7:61:94:4f:99:7a:52:47:75:a4:45:e7:d9:30:49:
26:bf:0e:9b:39:12:27:84:2a:c7:dd:77:9a:71:12:32:29:3e:
39:90:25:c4:a8:e6:5a:9d:9a:c9:c0:8e:9f:56:80:b3:26:67:
92:17:9b:11:50:d3:94:32:74:83:44:a7:24:84:92:41:3e:0b:
31:2c:2c:90:21:a6:88:3b:36:c6:63:25:35:be:d5:be:20:29:
6c:fd:be:c1:e2:6b:1b:41:31:a3:b2:c9:4f:26:5e:56:ff:8d:
53:2a:4e:f1:84:27:79:cc:48:e3:bd:f9:78:8f:5a:b1:21:11:
a6:d9:2e:af:00:a7:a1:0b:36:d2:82:e0:45:85:b0:be:53:13:
0e:52:1e:47:26:2a:6e:cc:3f:e8:26:79:58:c4:41:b8:0c:25:
5e:e4:4b:29:fc:af:45:57:c9:ea:7c:6f:1c:be:15:50:71:06:
ea:90:e3:03:e9:f8:e9:1a:24:38:db:51:25:af:3b:04:f9:00:
07:bf:a9:66:f3:d9:87:80:cd:a4:28:73:f2:8c:7c:3c:01:5b:
56:2c:7a:c5:69:dc:6e:00:53:ef:96:c6:fb:46:69:88:42:cf:
de:1a:8e:36:88:0d:d4:3e:ac:05:ea:f3:4e:98:dd:7e:17:c5:
68:37:f4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:46 2026 by rpki-client