
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft
File: I3Q0S3Gynw44NSDK_GyINQw1YWg.mft (raw, json)
Hash identifier: o68om1XnFw15SlKxAhSO0q+PK97ZoOTxffcDIxHH5LY=
Subject key identifier: 57:E1:C4:EA:27:18:3D:A6:05:C3:F7:D9:90:0A:CF:B9:5B:D1:90:DA
Authority key identifier: 23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68
Certificate issuer: /CN=A91A58AA/serialNumber=2374344B71B29F0E383520CAFC6C88350C356168
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft
Manifest number: B6
Signing time: Fri 17 Apr 2026 06:45:13 +0000
Manifest this update: Fri 17 Apr 2026 06:45:13 +0000
Manifest next update: Fri 24 Apr 2026 06:45:13 +0000
Files and hashes: 1: I3Q0S3Gynw44NSDK_GyINQw1YWg.crl (hash: XvUQXEWbCFiYWV8Arto/ydaZ+0bdZzaA7EKB4UWaJTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl
rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A58AA, serialNumber=2374344B71B29F0E383520CAFC6C88350C356168
Validity
Not Before: Apr 17 06:45:13 2026 GMT
Not After : Apr 24 06:45:13 2026 GMT
Subject: CN=69e1d6f9-bb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:53:24:db:c8:9e:42:29:b2:9f:32:0a:26:
d8:72:57:0c:5b:bd:da:97:d4:be:fe:bd:66:60:a6:
c1:d8:c5:f1:f6:1d:83:b5:bb:22:42:03:37:b4:fd:
09:06:4b:f3:b9:b8:f4:5f:0c:46:e7:b2:21:8f:77:
e2:3a:2c:1f:5b:7a:18:e2:56:27:ef:bc:d3:29:f1:
12:d7:e8:d3:14:cd:ac:5e:4b:01:ff:e6:90:92:4e:
26:1e:a4:e2:2e:a6:ce:7b:5d:e0:72:36:92:01:83:
37:b0:f6:79:cc:05:c3:1c:2a:37:04:44:ff:4d:7f:
2b:a1:a8:63:13:27:04:85:b8:17:b9:fa:5d:6f:ef:
7c:82:e1:09:be:c4:84:ff:8c:f2:8a:71:ae:b8:6c:
24:5f:ec:c8:7f:68:6f:f2:d7:87:a2:16:98:fc:f6:
c7:c3:f5:78:86:47:4f:ea:de:8b:06:20:f1:8b:d4:
a9:49:e5:c6:d5:fa:44:93:aa:32:74:6b:18:d5:3a:
ad:e2:a5:d9:8b:e7:13:b3:cd:5c:54:d8:ef:52:03:
32:35:80:d8:01:bd:de:9c:e2:11:c1:82:d1:66:b4:
d0:d7:a9:c1:71:7e:7e:09:d3:f2:70:b3:8d:58:c0:
26:b5:42:a7:4c:13:ca:62:34:e4:da:a3:97:24:66:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E1:C4:EA:27:18:3D:A6:05:C3:F7:D9:90:0A:CF:B9:5B:D1:90:DA
X509v3 Authority Key Identifier:
keyid:23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:78:34:0e:3f:d9:8f:20:eb:90:6b:94:72:4c:1f:e2:ff:d9:
30:6c:17:ac:2c:b6:cb:df:35:d2:e8:dc:9b:d9:15:cf:ca:9a:
f1:5f:90:d2:bf:06:9f:b8:49:bc:8b:0f:50:b9:68:e3:db:7d:
c1:54:c0:85:02:ec:ec:3f:eb:51:fa:97:ba:34:bc:3a:32:a3:
89:9f:89:ed:1f:ab:42:7f:6a:61:43:8d:2d:7f:7e:73:e4:99:
25:48:a4:af:e3:53:cf:12:8d:45:9b:0a:dc:05:5f:ab:8f:ae:
c9:27:18:e4:c0:c0:99:cf:c6:5c:d8:85:11:0e:d2:c9:db:a6:
7a:51:82:9d:ce:c4:2f:e7:fa:30:3c:18:bd:d7:e9:ec:eb:99:
58:7e:97:5c:f2:c4:c1:a7:7a:34:bd:89:6e:60:cd:a7:33:37:
53:f5:4e:ca:cf:7f:bc:6a:12:d6:77:06:69:49:66:b6:3c:0f:
15:62:dc:af:3d:4f:f4:43:3c:8e:d3:cc:41:7e:25:df:f5:84:
35:23:f4:61:ce:a9:5e:8a:fb:6f:d5:4a:87:23:50:fc:0b:46:
de:08:26:94:f0:59:4c:6b:00:02:18:9f:cb:07:d9:4d:97:24:
49:11:f5:49:20:41:df:9c:e2:61:ad:06:56:15:91:dd:44:20:
a8:b8:ad:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:03 2026 by rpki-client