
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json)
Hash identifier: 3tWdi3w17/l0jWwime8n3d1G/cownD1uebrNSq6uvdI=
Subject key identifier: B5:D2:24:DE:ED:9D:C3:C6:76:5B:D4:C0:65:00:94:91:34:81:9A:2F
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
Manifest number: B8
Signing time: Wed 15 Apr 2026 06:35:52 +0000
Manifest this update: Wed 15 Apr 2026 06:35:52 +0000
Manifest next update: Wed 22 Apr 2026 06:35:52 +0000
Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: w+SngZYRix8C7rIDMJGxxgltf8p4w8PC+GATWFO7TA0=)
2: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: vsIGVvlGCJQuRvbSj+mUc0cTXNJknUlsD/Soxx53ucA=)
3: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: 2Zw4KOVcRPZL7NToz0OAHJZCRTk4ni0giRlBSLkkuak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Validity
Not Before: Apr 15 06:35:52 2026 GMT
Not After : Apr 22 06:35:52 2026 GMT
Subject: CN=69df31c8-f892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:8e:68:62:ad:07:66:c0:aa:7b:3b:ce:0f:
ba:be:21:ab:19:51:a0:be:1b:90:9b:87:d6:76:7b:
b0:17:b8:17:1d:a9:02:0e:86:2b:90:09:9b:c3:34:
27:4d:c8:cc:76:8f:0d:c5:4f:46:bc:79:35:ac:4f:
cd:7e:28:58:61:65:cd:df:44:6e:ec:ee:21:ff:b8:
53:47:e9:09:2c:ee:35:eb:3e:64:16:a3:8e:be:e0:
2b:25:36:92:1e:fe:9f:dd:f5:98:d0:b5:d2:eb:f0:
17:99:3c:ba:b6:79:a5:5f:ff:42:bc:f1:dd:5a:27:
83:8b:6a:32:67:e8:b0:05:55:1f:5a:db:47:4f:23:
26:d4:ed:40:c7:3b:98:64:4c:93:fa:49:2f:b8:45:
d2:3b:e9:a3:10:97:03:f9:24:81:96:df:d7:39:0b:
0c:05:66:ca:58:38:ce:20:d3:c3:66:1a:5b:cf:2b:
4d:3b:04:08:dc:20:dd:e2:73:5d:fe:ee:a6:49:a9:
73:c9:89:ff:d9:f4:e5:b4:e4:42:b2:0e:b6:d7:34:
d8:49:a3:60:02:9b:25:d6:85:99:6e:2b:92:7f:76:
2b:0b:1f:96:92:4a:f0:ec:d8:57:9c:1a:48:9a:27:
d5:0a:b2:9a:60:2a:c9:cb:f6:c6:8c:79:56:3c:3d:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D2:24:DE:ED:9D:C3:C6:76:5B:D4:C0:65:00:94:91:34:81:9A:2F
X509v3 Authority Key Identifier:
keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:8e:6f:49:3c:45:33:ee:aa:6c:bd:cc:d6:97:7d:76:b7:e8:
98:de:61:f0:7b:14:02:e3:12:34:97:d4:b3:33:99:da:24:81:
18:86:0f:ad:58:3a:32:46:13:72:40:3a:58:dc:16:39:65:a4:
80:36:7f:73:f0:cc:53:cf:91:d0:ac:6c:c5:6d:4f:f6:b4:a4:
31:24:37:cd:d2:33:44:96:6b:28:e5:a7:d2:48:65:f7:d0:b1:
3d:a4:17:0d:80:af:27:45:9d:2d:1a:f1:88:d2:88:ab:f8:91:
71:f3:18:4f:e9:84:39:8d:70:dc:b2:99:fb:a2:1e:b2:c5:24:
b1:54:03:d8:60:53:82:05:c3:18:32:3f:5e:6f:53:22:83:e5:
39:9d:d3:2d:9c:89:26:68:8d:51:72:08:fb:f8:8f:57:b5:4e:
e7:e9:da:bb:ea:ab:f0:b1:9d:8f:ec:fb:20:b0:b0:45:bb:db:
cb:2d:a9:1d:44:0e:0e:9f:09:42:31:58:5f:a1:b4:1f:21:de:
e4:67:fb:21:74:ca:14:82:04:7b:42:be:a7:2b:e7:a2:55:5f:
60:03:5d:fe:12:51:b2:72:3e:41:ec:48:f9:4c:ca:6c:d0:05:
45:15:8a:59:cc:c6:42:20:3d:8b:24:69:f5:78:a0:22:8a:04:
49:8c:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:20 2026 by rpki-client