
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
File: saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json)
Hash identifier: /KNXRotybMgGO9imugnUG6Zekk+cvLlOQ3vzdMdin7Q=
Subject key identifier: 54:22:A8:94:ED:86:0C:29:95:AE:DB:BD:34:68:D4:EF:24:47:6C:0A
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial: 0873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
Manifest number: 086A
Signing time: Thu 16 Apr 2026 20:36:26 +0000
Manifest this update: Thu 16 Apr 2026 20:36:25 +0000
Manifest next update: Thu 23 Apr 2026 20:36:25 +0000
Files and hashes: 1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: geGKPvOovo/UXWIviuNsL5hcVESrOrhd/qZu8DcW+OQ=)
2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: 77hSYKp5nGJ1Gv+W5zbAX2pAyRbbfZvgk88uHWf8l8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Validity
Not Before: Apr 16 20:36:25 2026 GMT
Not After : Apr 23 20:36:25 2026 GMT
Subject: CN=69e1484a-2b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:e5:e5:c7:ba:c1:c4:37:96:cd:7c:6c:7a:
cb:6e:c2:6b:ae:f5:ad:6a:7a:89:59:da:37:2c:3c:
62:cb:f5:76:4e:6b:5c:c2:1a:00:bb:f1:41:dd:5f:
04:f9:53:12:02:0b:4c:be:05:3f:5f:6a:16:d6:4a:
68:b7:90:b1:77:bb:79:e3:a0:e3:49:a7:e0:0f:bb:
66:3f:83:8c:7e:e2:cd:07:bc:5b:af:c6:5f:62:c1:
07:79:1b:53:31:80:cd:73:ac:6c:be:c7:4e:9a:40:
63:66:dd:ff:bd:59:10:5b:c6:68:ce:9f:b2:07:0e:
96:39:c3:c0:f3:00:9d:1b:9a:b2:c6:2b:f0:b6:12:
e9:1b:c7:54:f8:b3:42:45:4f:a7:19:6b:8d:8a:0a:
3c:2a:f6:8c:40:22:0f:c9:23:64:9e:f1:ba:fd:15:
f9:09:d4:02:5a:26:e9:f4:c9:51:7b:ed:03:eb:1c:
df:90:7c:70:9b:bb:3d:48:fb:1a:86:59:5c:52:b4:
02:91:2c:3e:1b:72:f2:0c:b1:c7:43:3b:fa:75:6c:
43:15:4b:d6:24:b4:9b:83:9b:0f:75:d5:76:52:d9:
9c:ad:ea:cc:c3:c2:5e:01:c4:e9:4e:6d:9a:a5:b2:
44:dc:bb:a2:79:f3:ef:b2:67:f7:c7:ec:fd:a5:5e:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:A8:94:ED:86:0C:29:95:AE:DB:BD:34:68:D4:EF:24:47:6C:0A
X509v3 Authority Key Identifier:
keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ee:35:fe:72:af:a1:04:e3:83:c3:79:dd:5a:fd:9e:11:19:
3b:a7:6a:1f:5d:0f:80:0a:9b:69:9f:71:40:3f:90:47:b2:89:
b8:40:f5:87:07:ee:12:e0:b3:78:2f:4f:29:49:71:48:34:2d:
6f:95:87:a1:a7:c9:2d:b1:25:23:c0:c6:91:1a:82:13:ac:3a:
3c:7c:43:f1:32:92:de:4c:a7:22:bf:0b:73:74:89:c7:4c:5b:
42:01:75:29:c6:7d:ac:ad:8f:94:38:77:93:a7:70:fc:48:e0:
25:52:a5:9f:6e:03:ce:17:d0:d5:ec:86:02:a4:41:90:90:54:
7d:83:43:04:30:0b:35:60:d3:a3:a2:ea:c3:39:73:81:ae:90:
4f:f0:66:17:8b:38:1a:9c:32:5f:bd:ea:91:89:e3:2d:12:94:
89:54:78:33:08:c6:c9:f2:46:bc:3b:23:e3:23:66:f7:09:4a:
9f:41:7b:e2:67:91:8f:05:13:87:1a:93:ef:26:7c:13:e9:41:
01:fe:00:ce:1b:c6:9f:8e:64:b3:8a:24:2d:45:b9:c4:2a:43:
d1:72:c1:74:c3:7f:f8:37:7b:b4:99:4b:44:94:7d:d1:0e:fe:
f6:8c:7b:7b:dd:18:c0:9b:1d:b9:1e:28:48:3d:cd:74:5d:5b:
1c:57:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:44 2026 by rpki-client