
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
File: _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json)
Hash identifier: k1o7/d7mn6Gk98CljEJ0cX+5GGNNuGrr+VuHQuW7+M4=
Subject key identifier: 9B:E4:DF:9D:42:09:91:64:12:C3:B0:F5:56:45:38:68:11:20:7F:91
Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30
Certificate issuer: /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530
Certificate serial: 1593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
Manifest number: 1581
Signing time: Thu 16 Apr 2026 16:42:51 +0000
Manifest this update: Thu 16 Apr 2026 16:42:50 +0000
Manifest next update: Thu 23 Apr 2026 16:42:50 +0000
Files and hashes: 1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: Zbs01Vpo9Nzw8VPWq6pJ9wRPSNUNdKcOrZyp31K09RE=)
2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: Dm9+B/EL1Dfdx6TdXOjf1eL0O0G9uMoL3EQ4RqzUVrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl
rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5523 (0x1593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0D9C, serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530
Validity
Not Before: Apr 16 16:42:50 2026 GMT
Not After : Apr 23 16:42:50 2026 GMT
Subject: CN=69e1118b-4751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:7b:fe:70:d6:c2:41:25:80:7f:2b:97:4b:
18:22:c4:bf:f0:d9:3d:c0:5f:f6:03:b9:8e:be:28:
0d:bb:e7:19:f1:11:8b:2a:5e:d2:81:95:fa:b6:38:
a7:af:f2:21:e4:a7:a8:3b:14:49:7c:48:ae:81:15:
52:5c:79:fc:71:8d:2e:cc:5c:f1:88:0e:51:16:2a:
45:1c:d5:c3:66:d3:c9:be:ac:2f:bf:e6:c8:db:cd:
d2:fe:d4:00:ea:75:d2:ef:2a:84:67:e0:c8:08:26:
7e:65:8b:f8:4f:b5:e4:f5:ba:76:4f:b8:b6:18:55:
8e:12:6b:ac:fe:c3:3f:7a:41:bd:4d:8a:d2:37:61:
35:f9:73:9a:fc:a2:b0:06:af:c3:91:da:d4:2e:c4:
e3:b3:3e:f8:71:14:0e:67:4a:cc:9b:93:d7:14:cc:
00:a1:86:15:5b:cf:ef:47:03:ec:6e:94:8b:63:5c:
f6:e2:b1:18:65:c8:ea:77:f9:2e:1b:14:1c:e7:d8:
4e:b0:b7:92:7e:1e:09:33:fd:ef:75:ec:3d:78:3d:
86:7e:9e:7c:fa:98:c3:43:48:e9:f6:5d:f3:b3:22:
63:8f:cd:28:7a:61:18:3c:6f:e9:23:32:e7:4a:af:
fd:cf:68:35:0e:8f:a4:9e:b8:ed:7f:15:9e:da:d6:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:DF:9D:42:09:91:64:12:C3:B0:F5:56:45:38:68:11:20:7F:91
X509v3 Authority Key Identifier:
keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:b4:51:b2:0c:e2:56:09:73:ba:69:d4:2b:a8:0d:c7:1d:24:
67:fd:cf:f7:2c:9b:16:12:ed:dc:17:8a:3b:1b:db:b4:f5:73:
b5:73:f9:78:aa:b3:83:26:b2:87:be:0d:97:2d:0f:14:fb:55:
2f:c5:1a:d8:ec:18:66:a1:8c:1c:6b:67:91:9c:94:bc:44:75:
f0:94:95:a2:01:17:f7:7b:d5:5a:64:7e:d8:4c:51:a1:55:f4:
56:a8:37:e7:12:5a:9c:a4:a8:82:d2:3c:28:09:08:41:0d:62:
90:3c:55:33:66:d8:72:38:95:cb:94:1a:02:5a:97:4b:29:73:
22:ba:64:36:55:3f:6a:61:34:e3:ca:e2:d1:e4:1a:ee:0c:fc:
e4:05:00:97:b7:a6:47:8b:15:59:e5:bc:50:54:ac:de:1b:19:
a8:98:82:85:d3:02:21:6f:89:6d:60:30:ac:1c:73:2f:29:02:
ad:dc:e3:8d:b1:26:f0:9a:8c:72:cb:3d:a6:ee:8a:3c:fa:ca:
a4:60:98:f7:ef:59:f1:dd:69:d2:8d:22:83:4c:23:7c:72:60:
61:f0:18:09:e3:69:00:66:9e:e5:d7:26:10:0c:84:82:fe:2a:
77:b1:6f:ed:a5:1a:28:b8:a7:5d:0c:2b:ae:1c:8e:c3:34:49:
a4:62:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:28 2026 by rpki-client