
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
File: d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json)
Hash identifier: 3ulJlgbXjdQ7UbldbXCytEBB+ARxeUUXC9tRRHQXlNg=
Subject key identifier: 60:34:4F:46:B1:20:72:BC:B4:F1:0E:D5:67:5B:05:EA:F1:F2:42:27
Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Certificate serial: 06FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
Manifest number: 06F3
Signing time: Thu 16 Apr 2026 22:00:45 +0000
Manifest this update: Thu 16 Apr 2026 22:00:44 +0000
Manifest next update: Thu 23 Apr 2026 22:00:44 +0000
Files and hashes: 1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: 4oIxTkDZnqDInRZnH4owiOKv8F+XOuwVRbn2j7zdnH0=)
2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: Psgba/J6D2Rc4QvTasd4fTFxXwiZJRSLuDPikpsNKlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Validity
Not Before: Apr 16 22:00:44 2026 GMT
Not After : Apr 23 22:00:44 2026 GMT
Subject: CN=69e15c0c-bce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:ca:cb:e9:16:d6:b1:0a:b9:d4:45:96:9e:
f9:3f:f9:25:53:00:b4:22:df:78:9b:d6:81:66:eb:
3f:a8:48:aa:28:f0:bb:1e:65:57:18:a9:69:3a:2d:
6b:22:ad:59:5c:c3:93:59:62:0f:87:68:24:c0:ea:
08:c8:b9:81:ae:a8:52:6c:a9:5c:75:91:fc:00:82:
e9:7a:d9:72:8f:96:15:df:7a:1f:e9:b4:c1:93:26:
37:77:16:0f:90:80:6f:1b:4d:71:de:b5:fe:5c:56:
32:3a:09:98:cc:50:32:8a:9b:1e:a9:17:4e:78:ae:
af:6f:25:a9:2c:99:9a:ac:8d:33:1e:43:22:27:26:
ee:13:ca:f8:be:b0:69:84:c5:e1:3e:55:f4:e5:c3:
43:92:4d:a6:2f:40:51:45:65:dd:a7:5a:e4:31:d2:
1e:7d:83:1a:03:74:d6:36:97:97:2a:20:3e:8d:63:
a2:d2:fd:bb:14:32:77:cc:4c:ae:bd:b5:08:37:57:
f1:c6:fc:0b:c7:20:0c:52:84:d0:0e:97:0a:2d:71:
e2:1f:87:44:c8:09:79:a5:f8:74:17:fe:90:d8:09:
a1:c8:a9:ab:50:e9:a5:aa:b0:81:b1:d7:d1:04:db:
6a:44:cc:4d:6d:f1:0d:01:04:8e:48:9e:32:94:a5:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:4F:46:B1:20:72:BC:B4:F1:0E:D5:67:5B:05:EA:F1:F2:42:27
X509v3 Authority Key Identifier:
keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c1:ba:51:bb:1c:db:ed:2e:e6:74:f6:04:1f:bc:42:1a:bb:
cf:15:80:19:13:d0:e2:a3:aa:ff:3e:85:c9:51:98:e7:cc:f8:
f3:af:75:45:16:6b:44:4c:e0:2d:be:6d:4b:63:a6:a4:c6:b4:
d5:85:1b:7f:94:04:2c:db:9e:7b:2e:4e:68:af:15:50:55:3e:
f9:9d:20:b4:c3:96:e5:f5:2c:b8:a4:cc:b2:2c:6e:18:b8:15:
bc:c7:35:72:5e:60:c9:ba:6c:34:cd:c0:bd:12:93:f5:45:0e:
56:34:92:e0:03:74:b7:d0:95:46:d1:a2:6c:17:61:43:69:2e:
9e:9f:46:ef:a6:cc:ff:a1:fa:da:12:53:a6:f8:13:2e:77:95:
2e:d3:37:42:89:c4:5c:2b:86:ea:3c:5c:65:33:e6:94:6d:cc:
3b:eb:5f:ad:1c:42:fa:05:83:33:8c:b7:c9:76:fb:71:a4:7b:
b3:4b:1e:6b:cc:af:42:31:86:66:40:b4:da:d7:2c:ae:aa:7f:
12:51:d8:33:47:04:cc:c7:69:1f:ab:5b:95:85:c9:ab:16:1b:
e9:34:7d:46:85:96:f2:7a:62:ab:cc:4a:1f:1a:6f:92:f3:32:
17:2c:09:53:a5:91:d5:b3:8e:3b:09:80:91:34:48:d4:e0:bb:
40:a0:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:27 2026 by rpki-client