
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json)
Hash identifier: YAXUe0x8B8FyCB0A+v+rWXqPCE35FQBsPfdMdmmO0dY=
Subject key identifier: B0:21:CD:92:DA:8C:C9:9A:1F:3F:F9:CD:36:EC:C4:47:87:D3:73:6A
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
Manifest number: 02D9
Signing time: Fri 17 Apr 2026 01:15:51 +0000
Manifest this update: Fri 17 Apr 2026 01:15:50 +0000
Manifest next update: Fri 24 Apr 2026 01:15:50 +0000
Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: dgBu+9+uRfdQSojUGIiH6E5aLfAro1qnoNPJAiv1fYU=)
2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: 3EomuYTOYpdRonmxsDgyICA/moRstX6OW0zEPClInuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Validity
Not Before: Apr 17 01:15:50 2026 GMT
Not After : Apr 24 01:15:50 2026 GMT
Subject: CN=69e189c6-2921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:3a:19:dc:36:fe:54:90:64:80:5c:b5:93:
7b:e8:85:a5:a1:b6:73:8e:38:a7:6d:e8:1a:98:01:
58:77:e5:cf:5e:31:0b:4a:77:01:9a:6d:17:85:1d:
fb:4a:6a:52:a2:79:a4:28:8a:da:15:8f:e8:30:a1:
85:d0:8d:78:71:b4:f0:87:74:63:31:d4:39:21:9e:
95:a7:2d:e4:11:0c:81:be:cb:71:dd:64:8a:9c:2c:
74:31:08:95:38:0a:dc:79:73:10:e8:2a:94:37:15:
fc:0e:29:95:64:ae:46:13:cf:38:f9:59:87:3e:2e:
5f:34:ba:5a:1e:7d:ae:a9:24:b5:f9:f3:dc:5a:a4:
7d:f6:df:de:4b:e9:c5:5e:2a:50:d4:1b:e1:97:31:
f4:53:7e:d1:ee:89:00:16:97:14:9f:c8:c5:70:9f:
07:b3:c7:9a:d4:40:b5:03:52:e8:7b:83:be:e3:2a:
db:59:3b:fe:31:3c:db:fa:a2:b6:67:b9:71:30:08:
03:7a:bb:0e:af:e3:2e:ce:25:b8:fb:18:c6:a3:92:
8a:6f:1a:d8:54:bf:4d:09:48:1f:e2:6c:ff:57:87:
87:3f:61:08:8d:3d:2e:76:19:ce:f7:e5:31:64:72:
9b:d9:f8:9d:1f:70:e5:eb:09:61:28:9b:50:47:22:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:21:CD:92:DA:8C:C9:9A:1F:3F:F9:CD:36:EC:C4:47:87:D3:73:6A
X509v3 Authority Key Identifier:
keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3e:1b:de:ee:2e:ce:7a:b3:6c:96:ad:9a:de:c2:ed:51:8e:
a9:ee:33:95:e1:88:92:5f:57:0e:63:d9:9a:29:a3:60:69:53:
f0:09:58:2e:48:b4:7f:cc:5c:46:1e:c1:11:b7:c3:17:30:49:
ce:ed:0f:93:2a:10:e4:a8:b1:1f:71:d3:ce:26:70:11:f6:18:
25:02:b3:07:b1:54:46:41:1b:be:c6:c9:92:48:ce:4e:da:f0:
67:ab:87:d7:33:30:79:a9:ba:e4:50:70:fc:8b:ca:5f:aa:cb:
e0:1b:4a:f1:b7:51:b7:16:47:b9:9b:be:a0:d1:8a:1d:48:ea:
e7:40:9c:26:a1:47:4f:d3:45:69:e1:47:c9:ba:10:77:b0:7f:
a4:f7:f9:95:d8:8c:d9:64:66:58:30:98:4c:c2:96:48:03:89:
45:5c:22:39:3f:05:3b:c1:00:81:a9:a5:ef:c7:c3:f2:50:d6:
27:9c:a7:75:77:b8:04:77:20:88:08:0b:de:30:88:ac:8f:8e:
f0:9b:c4:22:2c:10:be:8a:52:e8:17:f6:4f:81:cb:6f:cb:19:
41:08:fd:95:ad:57:7e:93:2e:69:6d:5e:51:fa:f2:53:65:15:
d7:8b:ee:2e:e5:e0:b1:d9:e2:e5:60:8b:8e:f5:d5:94:a0:01:
6e:58:69:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:40 2026 by rpki-client