
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier: VylsRJ7faOpE6qTrAYvRCRkKyue+gth++SM8ojmwtNU=
Subject key identifier: 7C:C5:69:98:E3:9C:C1:B6:98:83:AF:B7:62:EB:9B:38:11:E0:F6:16
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial: 0D8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number: 0D81
Signing time: Thu 16 Apr 2026 17:52:56 +0000
Manifest this update: Thu 16 Apr 2026 17:52:56 +0000
Manifest next update: Thu 23 Apr 2026 17:52:56 +0000
Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: atdw/beo2pLKRkwIdHsIgIN95ve+XQHIu6f7yBWTmIc=)
2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: oix3uz2iO7DhsNaPKdZjSYeOooosW/vMEsfqrJxUpws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3469 (0xd8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Validity
Not Before: Apr 16 17:52:56 2026 GMT
Not After : Apr 23 17:52:56 2026 GMT
Subject: CN=69e121f8-2d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:1a:be:95:4e:81:0b:b2:0f:f1:2f:d2:5a:
49:7b:2a:3f:b2:1a:b4:e9:5a:1a:32:4a:20:83:b9:
ce:eb:90:6c:89:4f:e8:23:07:bd:12:f4:85:f3:d0:
c9:a2:d4:75:7e:68:8d:ad:c8:c3:e1:01:e7:d2:c2:
ad:16:0e:75:af:04:6b:b3:d6:42:9c:4e:1e:0b:51:
fc:4a:49:ef:1c:93:c6:98:d9:f7:cf:8f:9d:0b:ee:
47:1e:d5:d4:99:e3:e6:c5:b8:3f:54:3e:66:85:ef:
67:64:ab:ff:4a:31:d0:05:0f:af:21:56:63:4d:18:
da:c0:e6:ef:18:b8:06:12:ac:e0:84:6c:53:bd:94:
f0:e2:25:e1:e3:1c:44:cf:c1:ab:dd:85:be:d6:c5:
0c:c8:a2:8d:a7:1c:33:a8:6f:0f:61:b3:41:ce:e4:
e1:94:cb:17:09:1d:11:43:f1:d9:99:87:8b:67:7c:
35:7a:8e:d0:73:3e:c3:df:32:8a:c7:97:36:d5:aa:
65:98:c9:98:11:e3:92:42:30:9e:b3:e7:6c:19:ff:
9e:c0:77:95:10:d4:d0:4f:bf:86:f4:d4:db:07:17:
61:fb:57:38:2f:c4:5d:89:86:6a:cc:e0:15:9b:c6:
a1:be:6f:c3:a2:e8:1c:64:b8:53:a7:a8:e6:43:08:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C5:69:98:E3:9C:C1:B6:98:83:AF:B7:62:EB:9B:38:11:E0:F6:16
X509v3 Authority Key Identifier:
keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:53:9d:6e:88:13:d8:e8:63:e7:b1:c3:57:16:13:46:59:d9:
8f:2a:3e:3b:49:0b:5c:d8:2d:7b:03:7c:b2:90:fe:9e:75:64:
b5:df:4e:05:8b:1d:b9:d0:27:7f:d9:e7:2c:0c:74:a5:74:e5:
88:93:a0:d4:53:e2:18:e1:ca:c9:ec:ad:36:eb:cd:eb:c1:ab:
67:15:56:25:b4:89:8c:90:e2:b1:60:ab:68:84:9e:86:d0:51:
5f:46:1c:10:97:fc:0b:28:be:29:fd:10:8d:e1:80:28:fa:0e:
15:14:e6:8d:7e:49:ee:21:21:fe:2e:e0:3f:b4:a4:52:0d:2e:
2f:87:9c:03:cd:74:8a:43:e7:2a:b9:92:78:70:30:3c:aa:69:
27:42:53:ea:3f:4d:b4:bf:22:b4:10:14:92:91:8a:50:2e:58:
e7:9c:6b:26:d2:34:a5:37:ac:9e:b1:16:65:8f:ab:28:a7:66:
02:0f:27:99:57:ec:54:ad:61:a2:5f:b0:21:8e:71:c2:01:4b:
31:a1:c6:1f:0b:e3:54:65:50:db:d0:e5:6c:83:c1:f1:05:a3:
a8:6f:b5:cd:54:b8:34:4f:c8:91:16:79:a2:f4:45:84:62:41:
96:db:09:cc:ef:7f:96:94:dd:2a:38:bb:26:75:a7:31:17:12:
24:c6:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:50 2026 by rpki-client