
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier: uEPiOqHKPYSCG0yfkyhKqCDgFpvqsstH5y2i8Kl7e30=
Subject key identifier: B4:57:61:32:20:E9:D9:21:96:88:7D:AC:6B:5B:2B:4F:CE:CE:58:EC
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial: 067E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number: 066B
Signing time: Thu 16 Apr 2026 22:33:38 +0000
Manifest this update: Thu 16 Apr 2026 22:33:37 +0000
Manifest next update: Thu 23 Apr 2026 22:33:37 +0000
Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: e+b7cEOMXlP6zM4vZd+uf1rIXf4H1tmZypibXlzcOPc=)
2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: nnDH6rvORkwCmJUa2SHMfnPNgo7zw9YFjWX6Zaktv3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Validity
Not Before: Apr 16 22:33:37 2026 GMT
Not After : Apr 23 22:33:37 2026 GMT
Subject: CN=69e163c2-f2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:b5:df:c2:bc:5d:72:2f:a2:f0:5f:bd:fb:
d5:1e:09:72:f7:1b:ec:82:72:17:79:fa:a1:3d:1f:
e3:f7:d5:5a:7a:20:b2:e2:50:e2:69:9a:4c:c8:6f:
26:32:19:d5:eb:27:23:53:a7:e2:f0:56:d0:2d:36:
4b:c9:09:f0:f9:0f:07:83:6f:fd:74:7e:6c:71:e8:
6a:db:e5:cd:a6:ac:0d:b1:9b:0b:76:78:83:68:7f:
61:2d:65:6c:24:1f:04:94:c0:25:4c:9d:45:e7:3b:
e9:0c:7b:b7:49:a3:27:96:eb:61:d5:94:b0:1e:c3:
6f:81:1d:21:5e:38:c2:a3:77:f1:5f:1a:a8:b9:ae:
c8:a8:c7:20:2d:dc:c4:15:f9:ca:2b:21:2d:9d:5e:
39:f4:cb:7a:4f:9b:a6:fb:48:8f:c5:43:b3:9a:e5:
6b:3a:ca:46:c7:02:77:03:0e:8a:a6:96:bd:cd:e3:
fe:7d:dc:ee:77:8c:c0:ab:9e:17:1e:97:cf:ec:bf:
ac:d7:09:6a:d7:73:57:16:76:e5:d0:18:46:37:9b:
54:b4:7f:37:4c:25:f5:cc:a0:89:4f:9d:97:dc:db:
37:37:c9:38:5e:4d:2f:4c:c7:76:10:e9:9d:19:54:
8c:71:c3:c4:ad:d2:05:ab:9f:46:02:8b:15:dc:ba:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:57:61:32:20:E9:D9:21:96:88:7D:AC:6B:5B:2B:4F:CE:CE:58:EC
X509v3 Authority Key Identifier:
keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6e:49:9a:23:32:77:8b:35:d6:7d:5c:af:0b:70:1a:f2:9c:
2a:fa:78:53:07:96:57:2d:18:8a:dd:f5:03:9c:32:e0:ec:a2:
24:93:09:3a:d8:93:ff:17:48:f9:2a:b6:f0:ba:b0:a8:26:2b:
3e:76:d1:91:10:b4:7e:26:8a:37:37:d6:a8:99:82:c7:7f:c4:
0e:cb:df:d3:f7:54:3a:da:ed:d1:45:49:7a:80:f3:92:5b:0e:
00:05:0f:70:a7:27:d7:6e:25:da:7d:b9:b6:38:7c:d3:56:1b:
b8:21:df:f8:00:17:81:f3:91:3b:69:22:91:cf:f9:da:6a:fc:
a8:32:04:b3:4d:46:f2:b1:c2:57:34:fd:ff:e0:e7:76:4e:16:
b4:03:10:1a:fd:9c:64:8d:03:86:15:ec:db:b0:a3:e0:ef:1a:
12:ea:98:9d:2a:7f:2a:34:52:9f:dd:49:d2:5c:fa:16:73:53:
1d:3c:e9:27:58:a6:a0:39:89:75:2f:da:40:d7:97:90:d2:74:
1c:44:b3:c6:06:e1:01:c0:df:3e:e6:47:c1:a2:44:30:0f:ae:
fa:bf:01:0c:85:a8:cf:79:47:ec:41:62:7b:97:1f:38:0f:e4:
73:6a:de:ae:68:c7:eb:c9:5a:64:7f:ce:2c:bf:9c:a5:4f:dd:
d5:e0:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:05:18 2026 by rpki-client