
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier: xdk6dDLPg7QCXbG0grl5BeIuaN+9JNPTpxQ1MLlyr/k=
Subject key identifier: D8:16:5D:37:D7:39:5B:05:50:9D:25:4B:F8:CF:72:FB:D4:33:CF:77
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial: 0185
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number: 017C
Signing time: Fri 17 Apr 2026 04:19:01 +0000
Manifest this update: Fri 17 Apr 2026 04:19:00 +0000
Manifest next update: Fri 24 Apr 2026 04:19:00 +0000
Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: y+gUwAHty0sNi/IleLrc+WPCfXkUfI0bPoe8BSq9neo=)
2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: AJJ92VGVLucsvsIdaZU0nKfuQXZ8cJi9IfizP5I2ais=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Validity
Not Before: Apr 17 04:19:00 2026 GMT
Not After : Apr 24 04:19:00 2026 GMT
Subject: CN=69e1b4b5-c31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:58:f1:73:2f:f0:ef:16:56:ce:64:c5:15:
bb:07:1c:cd:5e:6f:73:23:6c:b0:e4:08:03:09:5d:
19:5b:61:29:87:e0:26:6b:3c:57:f5:e2:4b:e8:d4:
24:71:78:91:6d:25:d6:63:37:a2:ae:79:79:2f:b3:
2b:d7:11:20:2d:c9:c2:33:e9:d6:ef:f7:bd:24:47:
e1:f4:26:dd:58:0f:b5:1a:3b:48:bd:5b:80:8f:db:
f4:b6:fd:94:15:52:2c:13:64:67:bd:68:a8:0d:79:
ab:df:c7:64:69:98:c5:a0:86:29:82:49:c9:4f:92:
3e:bb:a4:47:89:54:9f:d9:02:2f:68:2c:9b:46:e7:
20:39:87:eb:5b:4c:06:20:cc:6f:7e:34:57:fa:aa:
30:6b:7e:c0:57:7d:41:40:72:15:f4:46:73:be:29:
89:4f:64:ed:2e:d9:7a:4f:d0:0f:d7:cc:5e:da:7d:
a4:ab:d0:57:d9:85:e0:4c:2c:df:d2:8c:db:45:a8:
29:38:a5:88:b7:3f:d8:aa:6b:bd:cf:b8:d4:0c:71:
3b:7e:a4:c8:51:4c:45:1d:e7:9b:bd:0b:3e:39:3d:
e6:80:21:7d:1c:9c:fc:aa:af:cf:25:ac:3a:9b:c4:
97:ed:cb:c3:cd:45:a5:ff:6b:ea:70:5e:df:4e:59:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:16:5D:37:D7:39:5B:05:50:9D:25:4B:F8:CF:72:FB:D4:33:CF:77
X509v3 Authority Key Identifier:
keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8c:7b:ef:ee:1e:be:0d:72:43:4f:06:d2:69:34:df:e2:d4:
52:1c:67:b9:69:80:69:86:91:c3:16:28:cf:5b:84:52:6e:dd:
2c:56:bf:0a:28:9a:87:dd:e2:04:3e:c3:68:00:dd:b8:7a:4b:
9a:49:1c:cd:84:55:8e:94:f2:c3:b0:7e:51:5a:4c:d4:f6:06:
a6:bd:93:61:4a:6d:a3:ae:e0:c3:aa:4b:25:fd:01:c2:c0:37:
b0:e5:c3:de:fc:8f:22:d9:df:02:62:ac:fc:c5:2c:41:6d:cc:
94:9b:7e:34:ee:48:4b:42:26:2b:aa:a6:dc:70:2d:fb:0b:a8:
55:94:42:04:f2:2c:da:81:c0:09:29:95:7b:2d:41:5c:3e:83:
29:3e:17:2e:7d:91:96:e4:c7:03:55:19:7a:f7:7f:c0:fe:d6:
45:ee:c9:f6:88:f1:43:73:49:f5:90:9c:c4:25:24:36:a0:15:
06:34:87:bb:91:b5:36:30:78:98:56:e2:ff:06:c3:a0:91:62:
37:4d:07:7a:48:80:5e:ce:78:f6:b2:80:22:d5:8c:2e:d7:eb:
dc:f9:20:be:53:b0:23:58:a6:bd:b7:5f:ce:f8:fc:af:b8:e1:
4d:da:b3:1e:31:9c:f5:ee:10:1d:76:85:f8:70:0d:94:6f:e8:
16:7e:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:58 2026 by rpki-client