
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
File: 80gH4oZFUlDDf1PcB78ego0Zpi0.mft (raw, json)
Hash identifier: BhpLwU3UQsnaASg2kq9wNsaBdYSqZZJC/bWYz37ECyE=
Subject key identifier: 77:BC:F6:2A:45:37:9B:61:5E:CF:F2:8F:6A:54:EB:70:D3:70:EA:33
Authority key identifier: F3:48:07:E2:86:45:52:50:C3:7F:53:DC:07:BF:1E:82:8D:19:A6:2D
Certificate issuer: /CN=A91AE317/serialNumber=F34807E286455250C37F53DC07BF1E828D19A62D
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
Manifest number: 07
Signing time: Fri 17 Apr 2026 08:53:09 +0000
Manifest this update: Fri 17 Apr 2026 08:53:09 +0000
Manifest next update: Fri 24 Apr 2026 08:53:09 +0000
Files and hashes: 1: 80gH4oZFUlDDf1PcB78ego0Zpi0.crl (hash: ukZvWq5QchGNBmUHgjmePIYHA6rXwauaCqOXH9+x8hA=)
2: 6AD7B83833F111F1BEF90B0CBC833773.roa (hash: 8WPkjnCq5gWzPkDaukbewo2KFmM/DSl1x5vnl/o5OAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.crl
rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE317, serialNumber=F34807E286455250C37F53DC07BF1E828D19A62D
Validity
Not Before: Apr 17 08:53:09 2026 GMT
Not After : Apr 24 08:53:09 2026 GMT
Subject: CN=69e1f4f5-f99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:0a:11:7f:f8:8b:c5:6c:00:ba:98:d4:16:
79:92:dc:ae:6f:f0:63:3c:9b:c5:7a:fe:f7:4d:76:
c9:29:47:6a:a5:8f:fa:61:50:dd:16:63:e9:cb:a4:
14:0e:db:59:d2:8a:70:dd:f8:cb:5b:87:2c:d7:1a:
b6:ec:05:68:79:7c:5c:18:5f:6c:13:cd:87:3f:d5:
ed:d6:31:fb:2e:fd:c3:70:73:80:5a:6d:28:62:79:
e2:57:da:95:b0:ae:d3:dc:84:bb:81:99:97:7c:75:
52:e3:fd:ed:fc:4a:f4:ec:5a:b7:0a:21:9c:6c:1a:
7a:ea:a8:4a:17:00:9c:f3:ee:26:b0:e5:f3:96:36:
34:48:f8:09:d6:95:67:7a:67:1d:f5:05:0d:81:d9:
77:c8:54:92:01:47:cc:f8:b0:bb:f0:2b:4d:4d:18:
1f:d7:cb:8d:e7:34:f1:61:e5:1d:2a:1e:37:1b:ce:
5b:7a:6c:0e:55:1e:cc:53:7b:c6:57:c3:bc:54:69:
e9:a7:c8:75:23:9f:17:9c:18:9d:d9:22:16:39:ad:
04:ae:01:db:53:5f:d7:86:3d:1e:85:65:a1:57:51:
6f:c7:b3:58:84:c4:e3:b5:f3:fd:05:73:35:d3:92:
21:3a:8b:84:95:9a:ad:f9:f6:c6:0c:63:05:1f:2c:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BC:F6:2A:45:37:9B:61:5E:CF:F2:8F:6A:54:EB:70:D3:70:EA:33
X509v3 Authority Key Identifier:
keyid:F3:48:07:E2:86:45:52:50:C3:7F:53:DC:07:BF:1E:82:8D:19:A6:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:86:f9:6d:6c:76:bc:d3:41:6b:78:6f:ae:39:53:d0:9f:39:
21:09:9d:e2:4f:b9:44:f7:da:e5:e1:29:e3:ca:c8:05:f7:dc:
5c:07:a7:0b:d2:33:31:8e:08:71:1b:1c:4f:fe:eb:f2:b9:b5:
9a:f3:be:99:66:7f:54:95:c2:9e:24:39:f5:ff:43:ba:05:4a:
d6:9a:80:5c:e4:8b:5e:2d:0d:04:76:7a:04:f9:4d:d1:f7:93:
ca:b3:0e:17:1a:5e:1a:d2:e4:c8:ef:2c:7d:69:f1:26:71:85:
a1:c3:d0:ee:d0:0d:fc:90:3a:a9:d8:0f:e4:00:df:25:17:a4:
0f:db:9d:b3:22:db:52:33:9f:18:fe:15:df:10:20:52:9a:e6:
fb:1f:3b:57:a6:bc:d8:a4:6c:28:37:b3:5a:30:84:5b:1f:06:
28:4b:38:c2:51:78:0f:95:28:8e:70:81:1e:92:db:d5:3f:41:
b0:53:64:08:af:44:bc:9e:2b:c2:7f:ff:b3:47:75:24:a9:e5:
72:33:b8:33:76:5c:a6:1e:04:0e:02:ce:e3:91:7a:37:26:6d:
29:48:bb:5f:ad:13:86:fd:03:89:41:6b:47:3d:15:0d:b2:e1:
ef:97:1c:10:c8:d2:bf:0e:05:f3:ec:28:f1:50:2a:e7:30:b2:
92:c4:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:38:05 2026 by rpki-client