
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
File: Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json)
Hash identifier: 6nC/pkjRiXpWpMHHhOKwbb00Eov9lot3qIP36lgbolM=
Subject key identifier: 10:EB:12:08:FD:43:E9:01:F1:F4:B4:9F:B7:BA:D6:05:14:DC:F4:1E
Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Certificate serial: 29BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
Manifest number: 299B
Signing time: Thu 16 Apr 2026 15:33:33 +0000
Manifest this update: Thu 16 Apr 2026 15:33:33 +0000
Manifest next update: Thu 23 Apr 2026 15:33:33 +0000
Files and hashes: 1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: 48JqhWjFK17Ok6hEgBZT8g+mfgm5d6kWkjdm9PlMKT4=)
2: 58292E96774111F0A079543BC4F9AE02.roa (hash: P3bTncrBFtGdAwQb7tAPqCqSxWsCZcWixC2KVwmQSd8=)
3: F4246CDA561811E98A165872C4F9AE02.roa (hash: TyPrJA81J72DgxXKRay/Nk8ROYHj+G2p/whskRMJwDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10686 (0x29be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073
Validity
Not Before: Apr 16 15:33:33 2026 GMT
Not After : Apr 23 15:33:33 2026 GMT
Subject: CN=69e1014d-5f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:c4:37:01:05:1d:62:e4:60:f0:6c:4c:4a:
1c:25:2e:df:17:bf:94:b7:be:74:bb:b6:da:80:1a:
1f:03:c3:75:b0:b8:55:c7:9a:23:0e:b9:fa:67:b5:
41:e2:08:27:a9:26:df:07:bc:58:ee:65:04:57:fb:
35:8f:17:6f:d6:48:dc:f8:86:ed:6d:2e:d0:75:1e:
d9:5a:74:b8:4c:ab:c8:af:ff:d4:82:7a:63:ef:b4:
9f:3d:83:46:73:7f:56:3e:5e:8c:43:71:35:ac:88:
c5:1b:27:12:bf:03:a7:e5:13:22:87:b7:62:e7:d0:
59:05:1b:a9:3a:f1:3c:f5:8f:61:2c:36:35:fe:1e:
d9:cc:48:05:a7:25:12:06:97:9b:71:6b:99:1a:2c:
12:b8:dd:a0:05:23:3b:73:48:2b:71:a7:e1:50:7e:
df:c4:ca:3f:da:6b:52:50:bc:76:3c:38:91:22:55:
cc:3f:98:26:a0:52:26:e9:8c:d1:b3:77:2f:77:01:
91:9a:c0:36:a2:95:d1:a9:4e:0e:5d:76:ac:58:aa:
33:6f:42:ef:82:2a:b3:54:47:4f:c9:d8:7d:25:b3:
26:0c:e5:03:9a:a3:af:66:68:bb:50:af:b2:85:b5:
13:eb:ac:1a:75:1e:b7:30:b9:e4:e2:42:67:a3:5f:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EB:12:08:FD:43:E9:01:F1:F4:B4:9F:B7:BA:D6:05:14:DC:F4:1E
X509v3 Authority Key Identifier:
keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:1d:48:b8:30:3f:23:f2:02:97:e3:35:8b:dd:d4:26:75:
49:48:a0:7a:38:f8:f3:30:02:b1:85:3c:89:bf:9b:0f:58:8a:
09:3f:26:3e:97:83:d9:e3:1a:9f:34:41:b4:63:b7:ff:64:0f:
7c:52:42:b8:02:a9:f7:07:99:11:5e:54:bb:90:e7:25:ec:15:
3c:42:7a:24:5c:56:00:4a:64:7d:4d:f9:0b:2e:b3:6b:ea:f1:
59:9f:d0:b6:86:af:60:6f:9e:a2:54:3c:a0:cf:b8:45:b7:39:
90:86:cd:67:fa:a8:8d:3d:57:ab:16:c9:7c:be:89:d4:b5:48:
2e:51:1a:a1:f7:42:8c:14:ec:8f:52:9d:47:c2:e5:10:0f:20:
c7:70:16:f0:da:53:24:35:a2:b8:f8:36:33:93:03:26:7d:dc:
72:ef:45:bb:9f:ac:7c:19:e4:a7:53:56:63:99:d0:8a:4b:14:
11:3e:f5:f7:12:34:19:c3:2b:bd:a4:1b:00:5a:a7:6f:8d:a7:
da:42:bb:94:30:14:94:bb:63:2f:f7:a7:b2:e5:fa:24:92:5f:
07:ba:64:4e:a8:c8:06:dd:06:f4:96:e4:3c:0b:63:d2:28:f0:
c9:97:dd:bb:e5:1c:a5:f6:48:f2:19:1e:b3:c4:ff:65:fc:e8:
ec:0c:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:06 2026 by rpki-client