
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier: aL8NFzYpCRjt/sc10fzEwM6p8NVbSbNIh42QUGw9Des=
Subject key identifier: 6F:E4:BF:2E:ED:23:C2:54:77:A1:C4:78:87:3E:79:C2:28:32:B8:E7
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number: 01AF
Signing time: Fri 17 Apr 2026 03:47:40 +0000
Manifest this update: Fri 17 Apr 2026 03:47:40 +0000
Manifest next update: Fri 24 Apr 2026 03:47:40 +0000
Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: yQDzO4/z6YyI2P2BaJgNil+rkzUavOegGw38VvprQDA=)
2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=)
3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Validity
Not Before: Apr 17 03:47:40 2026 GMT
Not After : Apr 24 03:47:40 2026 GMT
Subject: CN=69e1ad5c-066a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:d1:ff:1b:ba:41:84:62:6e:93:bd:f0:25:
21:cf:63:5e:35:1b:72:d2:b5:59:7f:ac:2b:12:fa:
37:e2:bf:30:d1:08:44:de:ab:c9:2b:2e:a9:5d:73:
0b:3e:fa:a7:fd:bd:71:54:63:d4:74:61:01:2c:1f:
5e:62:a1:b5:28:42:2e:c6:a5:9e:41:f0:00:4d:8e:
dd:98:ca:ed:4a:9b:ec:38:5e:6f:a3:03:7e:0f:28:
91:5e:63:12:5e:79:59:b8:ff:25:b9:ed:af:8b:e5:
da:6f:8a:b9:e7:7d:7a:6d:ab:55:a1:17:92:18:27:
de:5f:86:94:86:2f:78:96:cc:73:c1:bb:7d:b7:37:
38:ef:b8:8e:34:78:e9:3d:91:4e:fa:2b:ab:b4:b0:
d6:1d:3a:24:03:bd:d9:a5:65:50:2e:e3:71:96:1a:
20:88:97:9e:eb:e7:b3:9e:40:c3:93:68:5c:04:13:
58:7e:59:5b:30:5c:8f:5a:a3:97:53:b2:f0:fa:1e:
23:97:6c:7d:94:ab:62:fa:81:df:fb:ff:33:25:80:
12:19:c6:65:1d:c6:79:39:7e:83:d1:f2:20:be:53:
df:6d:08:91:2a:5c:f5:77:b0:e9:04:8f:2b:1f:8c:
66:56:d0:1a:ae:ba:68:e3:8b:68:22:a1:6e:b5:6b:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E4:BF:2E:ED:23:C2:54:77:A1:C4:78:87:3E:79:C2:28:32:B8:E7
X509v3 Authority Key Identifier:
keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:0a:d7:59:14:26:80:de:03:47:51:87:72:b6:45:79:96:15:
e9:0e:c3:d5:e8:97:7d:1a:67:d3:73:e7:58:77:f4:50:02:25:
ab:58:ee:d9:e5:c7:85:92:9b:67:c3:1c:99:f6:df:6a:29:1f:
85:54:85:8e:3a:eb:fc:93:86:bb:b9:a9:c3:2e:db:b3:e9:07:
a5:19:49:48:c7:9a:7f:b8:54:d7:f2:d5:e0:4a:4e:cf:a2:8b:
f4:39:65:8c:73:4f:af:40:a6:55:79:89:e4:9c:18:33:46:6a:
46:66:09:a7:ac:a4:9b:b4:4d:f9:ce:49:41:b6:dc:a1:ba:e6:
ea:5f:ce:ac:b6:15:d6:c2:a3:db:72:cc:a0:c9:68:4e:65:15:
e3:6b:46:c9:8e:41:7b:84:09:9d:db:90:17:b6:5c:0d:54:cc:
23:3f:02:8f:ab:47:bc:3f:8b:7b:40:f6:cd:28:b1:f2:b1:f5:
fa:eb:fb:34:36:02:74:3f:0f:1c:7c:30:e7:4f:9c:47:1b:35:
59:41:1d:51:1a:0f:f5:8b:26:a2:db:c5:ae:e3:88:57:ed:68:
25:d5:ca:77:c3:e1:ed:a8:8a:9e:6b:e6:1e:d6:a3:a1:ab:85:
ac:a2:50:30:18:6d:86:ea:ea:71:31:21:70:0d:0d:84:1b:f7:
39:18:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:57 2026 by rpki-client