
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json)
Hash identifier: akgtiERTaAYJhxLyA2qJD+GmawxoM1ih4MmuzmH0J0M=
Subject key identifier: E8:9E:FF:A0:FF:13:6F:45:02:B1:B8:45:54:EE:FF:B8:AA:7F:C7:18
Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
Manifest number: 353C
Signing time: Thu 16 Apr 2026 14:24:14 +0000
Manifest this update: Thu 16 Apr 2026 14:24:13 +0000
Manifest next update: Thu 23 Apr 2026 14:24:13 +0000
Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: md4VEbtLLnbRccBL60DyaZPxYq52loNHJk1RR/yGjqk=)
2: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: wACutP1f1rqOkMuUfI0y6o4RkmpusyPFR7IEkRsm+4E=)
3: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: hu4/Lak7f/lOdT0sej4Iilh6Wr2QTf9+LdnHpbx9BwY=)
4: C28E34620A2011EC8B517885C4F9AE02.roa (hash: 4c64YIFR5i1jys+se/EAtLozRy8qGvjic4t8YcggS5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Validity
Not Before: Apr 16 14:24:13 2026 GMT
Not After : Apr 23 14:24:13 2026 GMT
Subject: CN=69e0f10d-91a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:47:07:5e:d0:16:74:06:76:1e:24:92:36:
4a:9a:45:68:71:2c:5f:f7:ac:b3:be:28:a4:2c:43:
23:de:0a:0a:02:87:3a:c3:85:7c:fd:62:55:39:17:
ab:d4:6e:48:62:3f:6c:09:61:e2:89:41:1c:b5:68:
66:b3:81:b2:26:9f:b3:64:fa:74:ac:02:d6:b1:ca:
f2:36:57:c2:02:2a:75:57:7b:12:3d:19:4d:8b:b6:
03:f9:6d:20:0d:97:09:b0:85:80:16:90:a0:c3:4e:
0a:ed:96:90:1a:d9:88:c8:09:4e:3c:e9:32:0b:ff:
2c:9c:70:94:ce:db:bd:86:40:fd:5d:5e:72:7e:34:
ec:9d:a1:7d:47:ca:50:8c:5d:b2:8d:1f:05:67:0e:
eb:22:9c:3c:d8:03:93:0a:40:87:80:99:35:4a:d2:
51:9f:09:15:ff:ad:39:50:bb:a7:89:a8:67:57:68:
4f:1d:fb:50:c3:ca:82:3e:ab:fe:c6:ed:4b:9a:68:
07:31:87:36:65:3c:55:f3:a5:02:dc:12:a5:fe:c3:
88:18:63:c0:01:b4:42:15:d1:aa:b0:49:a8:90:71:
69:54:90:89:8a:94:92:70:87:c0:8c:48:4e:96:9a:
9f:6f:d1:51:5b:91:75:c0:34:f6:1c:45:7b:c4:bf:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9E:FF:A0:FF:13:6F:45:02:B1:B8:45:54:EE:FF:B8:AA:7F:C7:18
X509v3 Authority Key Identifier:
keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fd:d7:1f:2b:a8:3b:b4:36:fb:a9:5a:52:60:b2:b9:47:71:
f9:3f:a1:29:34:15:65:e7:2f:23:18:7a:80:a6:42:94:07:5c:
bc:80:77:28:1d:bc:f6:23:ad:91:b3:fa:c3:a8:e0:9e:22:ad:
a9:27:30:6b:8f:61:30:72:21:7a:7c:65:b4:19:4c:57:3f:a3:
e4:2e:60:9d:d4:58:d9:93:e3:06:92:0e:f2:77:1f:fa:c8:79:
c3:1f:b8:6c:34:66:74:ee:d9:6b:02:31:74:a0:9a:13:36:ea:
97:61:2a:3b:c3:17:67:1e:bc:80:90:23:41:a4:87:80:80:a9:
35:21:a8:40:0d:eb:f5:e7:74:b1:62:38:2e:6a:2b:7f:4a:b7:
45:9f:41:15:de:e0:6e:93:06:8c:fc:9e:b6:1f:88:57:ae:94:
4d:b3:61:f2:d3:09:51:55:5a:f4:27:59:80:36:02:1b:bd:4d:
e3:8c:da:16:8f:24:5d:bd:64:7a:83:1d:c1:e6:69:d9:16:c5:
38:b9:c1:af:ed:01:b2:56:fb:f2:de:d1:6a:4c:e7:e0:3f:cd:
07:97:d0:ab:0b:9a:15:c4:c7:2b:06:0c:e9:7a:40:2b:b2:37:
1c:c8:1f:72:e3:de:49:bc:e5:cb:64:44:81:6a:95:61:c8:65:
80:60:03:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:02 2026 by rpki-client