
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
File: 0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json)
Hash identifier: 6ash3GxwemFyILpqNFgNJ/L0THdZZQ2a5aykX1972Hw=
Subject key identifier: EB:61:C4:D6:6E:C3:4C:38:44:7E:22:30:8F:91:DA:3B:BF:5B:1D:71
Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Certificate serial: 08A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
Manifest number: 088C
Signing time: Thu 16 Apr 2026 20:31:50 +0000
Manifest this update: Thu 16 Apr 2026 20:31:49 +0000
Manifest next update: Thu 23 Apr 2026 20:31:49 +0000
Files and hashes: 1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: 5cThdbK42nVdDMQkujcGttTstj9oME3e/JARMcHBKXg=)
2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: lfjq0mjRyBjOjeULyMBRcEJ9mBJ8RaIftGnavOAVlTo=)
3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: sO2TDcTaubul6PYFHdknsF44FU2zYp0hWwsMezsv3Lc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl
rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Validity
Not Before: Apr 16 20:31:49 2026 GMT
Not After : Apr 23 20:31:49 2026 GMT
Subject: CN=69e14736-d47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:22:a1:60:f4:83:e5:39:b8:3c:53:3f:67:
da:1a:23:cc:ad:4c:60:fe:d6:1b:94:c5:45:84:93:
5f:ec:e4:50:ab:a1:92:ef:e5:49:b7:15:ff:ed:38:
9c:86:53:9f:68:40:6e:5f:d4:3e:fb:e0:4e:5e:9b:
dc:b9:75:d1:0e:b2:a6:32:61:6a:7f:49:7d:e1:a8:
fa:bb:40:62:f2:b8:92:10:20:dd:c6:30:8a:11:08:
61:0f:39:6d:8c:1b:7d:aa:26:53:a6:3f:cb:bd:db:
0d:ec:d8:e2:ea:c8:b6:32:f2:1b:0d:88:62:94:16:
8c:ec:6a:cf:71:81:71:70:cc:81:6c:22:80:f1:46:
8e:90:7f:89:a3:9d:57:d5:4e:5e:30:1b:1a:d5:79:
7b:cb:1f:1b:16:32:76:64:fa:24:d6:14:91:c3:dc:
c0:fa:6b:78:63:fd:20:42:70:89:c0:d4:50:fc:f5:
d5:39:b1:0e:06:f2:7a:33:d8:65:a0:34:de:3e:84:
9f:6d:61:d7:e2:7e:ad:17:d3:6f:db:dd:be:79:58:
64:ef:95:fc:86:b8:a9:08:63:2d:41:26:23:0d:d5:
11:23:45:b9:c0:cf:a9:ac:ff:d5:f5:78:17:3e:b4:
9f:5b:39:e6:ca:9f:25:50:cb:4a:16:a8:f4:d0:bb:
73:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:C4:D6:6E:C3:4C:38:44:7E:22:30:8F:91:DA:3B:BF:5B:1D:71
X509v3 Authority Key Identifier:
keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:65:8c:73:37:8f:8b:b0:79:77:c4:7c:58:b2:22:c0:20:63:
20:f7:d4:21:63:aa:bc:e7:4e:87:cc:22:53:58:97:89:a6:1e:
bf:cd:a9:a7:af:a0:e8:dc:c0:a8:6a:cf:ce:d9:ae:62:fc:1c:
36:25:8d:d1:88:1b:16:af:a9:96:b1:0a:fc:f6:46:a8:64:57:
55:76:d1:54:d9:f9:2d:47:0b:66:73:f5:37:dc:ef:da:a6:79:
40:d1:22:66:b0:5d:20:a3:6e:de:a0:c1:33:35:cd:28:03:1c:
76:a8:8c:aa:d5:14:ac:40:89:d3:40:d6:ca:05:61:7c:61:e5:
66:7d:2b:c1:f7:1b:94:63:0e:ec:64:b7:a2:5d:a2:5f:3c:6c:
80:ae:89:03:51:35:bf:b7:a7:9c:a2:bf:ae:11:83:ff:61:f2:
f8:97:77:35:f7:12:c0:f0:08:91:da:65:01:2b:60:95:1e:c0:
32:06:ab:a1:d6:81:18:64:f1:db:5f:5c:1a:71:bc:01:f0:60:
b2:69:87:c5:f1:43:10:f5:22:e4:dc:71:f5:db:ea:8f:49:c9:
8f:2d:45:aa:e0:e4:05:78:05:9a:7c:2a:e0:3a:ee:db:a0:cb:
48:58:bb:01:87:95:a0:85:7b:4e:20:67:f7:79:9f:63:43:94:
f0:0d:ac:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:52 2026 by rpki-client