
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json)
Hash identifier: HfMj6shMeOjJv03eGdGGjMmvwoX1+a7BvC3CZXoB4W4=
Subject key identifier: D0:28:6F:FA:EE:81:FE:CD:7F:DF:3D:E7:CB:D4:39:04:AF:F1:B2:81
Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Certificate serial: 352A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
Manifest number: 352A
Signing time: Thu 16 Apr 2026 15:06:05 +0000
Manifest this update: Thu 16 Apr 2026 15:06:04 +0000
Manifest next update: Thu 23 Apr 2026 15:06:04 +0000
Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: i4zf/JqtwPNnC4aua+CV9fOEP+5H2OpqrDMIn3f+v6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl
rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13610 (0x352a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE
Validity
Not Before: Apr 16 15:06:04 2026 GMT
Not After : Apr 23 15:06:04 2026 GMT
Subject: CN=69e0fadd-4d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:91:14:12:2d:e0:24:8e:15:b7:ae:60:bf:
89:73:fa:ff:ae:9c:48:05:2b:c7:e9:1b:c9:ba:c4:
38:4c:4d:2c:f5:58:ee:12:fc:fc:39:46:fc:15:c2:
b3:1b:e6:f0:1a:d6:ca:70:36:e9:7f:d5:b5:35:3a:
eb:ab:5c:57:70:84:20:e8:ec:74:4d:e6:fa:34:0b:
60:c2:7a:53:1f:0a:2a:e8:2a:31:be:c9:af:02:1d:
ff:a4:69:56:1a:30:99:6a:e5:43:68:28:a8:d2:81:
a4:20:64:5f:84:7f:0c:33:1e:31:3a:4b:f0:5a:65:
c1:09:29:2a:35:4c:f2:d3:20:6b:36:03:3b:d2:02:
9d:01:a9:93:cb:b3:fe:e3:9e:8c:b8:45:c8:29:e7:
18:f3:30:ab:de:52:5b:86:4b:a8:6a:89:65:85:3e:
8c:78:ea:00:5a:d9:56:fa:2c:ce:6f:a0:5c:3f:da:
ba:41:93:83:a5:e1:e3:ed:23:f7:b3:05:e4:24:82:
25:df:35:23:67:a5:0e:58:41:4a:75:cd:7d:57:55:
c7:a4:0b:aa:c3:3e:a5:3b:76:91:8f:95:91:ee:ca:
fd:e8:65:8e:7b:e9:e2:fa:b5:04:b3:2f:0f:ca:44:
f0:08:75:af:11:91:5e:5e:44:fc:51:20:c7:c9:d4:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:28:6F:FA:EE:81:FE:CD:7F:DF:3D:E7:CB:D4:39:04:AF:F1:B2:81
X509v3 Authority Key Identifier:
keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:38:e5:2b:80:78:0a:b7:e1:8d:5b:8d:85:66:aa:e3:18:3c:
c7:42:12:95:62:1c:b8:67:3c:2c:e6:76:8c:0f:59:10:94:4c:
af:10:2f:e9:b1:a1:9b:46:a4:70:25:cc:11:f6:aa:fc:2c:31:
0f:57:83:35:e8:41:41:ef:47:de:9a:ab:4b:27:c8:a3:6d:22:
c8:90:31:15:23:12:68:2c:dd:73:b8:eb:e2:bd:fa:d6:18:f7:
f8:d9:c5:28:aa:89:90:52:4b:9f:af:8e:6c:f6:1c:e7:d5:7e:
08:89:99:a4:04:d1:46:fc:cd:cb:d9:aa:c9:07:8f:e8:15:71:
d2:f3:21:70:18:c0:44:80:d7:99:ca:29:cc:0e:ac:d6:42:84:
83:d0:72:fb:4d:dd:15:9d:a0:f7:6a:af:6e:c2:fe:b4:0b:b7:
6b:d0:62:1c:50:02:04:48:74:8c:7f:48:48:59:06:e9:b4:e2:
99:80:74:5f:d2:6f:b5:8d:23:70:64:9a:80:ba:15:e3:d2:39:
3c:b8:ff:7d:38:d3:fd:44:3a:f7:03:0c:33:0c:71:2e:00:55:
63:fc:1e:ed:1d:38:2a:50:d1:c3:79:54:7a:17:82:b3:06:c8:
ed:52:ad:24:38:cb:ba:d1:cf:88:08:e9:b8:8d:f4:5c:be:b9:
e2:da:1e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:56 2026 by rpki-client