
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File: d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier: NxZ2nV7j+GgeRoW0Yj3c27WzTb4+tlW2rSSahu9wlrU=
Subject key identifier: F9:2F:84:67:CC:11:BE:68:57:9E:DC:CF:AA:49:CB:1C:6D:75:37:4B
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number: 51
Signing time: Fri 17 Apr 2026 07:55:57 +0000
Manifest this update: Fri 17 Apr 2026 07:55:57 +0000
Manifest next update: Fri 24 Apr 2026 07:55:57 +0000
Files and hashes: 1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: KMTqC3C1DudZC5yUkGnC+ePFmfStulRMxyXRuSGKINM=)
2: 681269F8087811F19439B7C20A3D8C67.roa (hash: GfKHo2eQlYNPUrbMHKQtwwJ+sbJRJ6lCyawulNvQePo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Validity
Not Before: Apr 17 07:55:57 2026 GMT
Not After : Apr 24 07:55:57 2026 GMT
Subject: CN=69e1e78d-f4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:7d:df:08:60:9f:f5:d9:e2:77:de:cb:92:
43:cd:a3:80:fe:eb:2e:a6:14:e6:d7:84:82:d7:4d:
5c:ee:c0:6c:56:f0:ed:18:0b:7d:db:53:ae:b5:fc:
b3:1d:3f:71:5c:22:7a:fa:a9:e4:ac:32:82:90:5d:
70:f6:75:3d:2f:53:a5:52:32:cf:1a:e6:16:ab:3f:
40:49:7e:b5:9f:f9:f0:58:bb:3c:f0:2e:31:4f:fe:
29:6c:a8:72:e0:13:7d:3d:c2:2f:dc:47:be:56:e6:
fd:e1:cd:fa:ce:f1:6f:dd:33:06:b0:1a:af:b9:a3:
17:90:bd:56:85:b1:41:48:82:28:1c:56:8c:0f:12:
96:e0:cd:d4:8c:b4:06:c2:d5:f8:f9:1c:9b:37:da:
4e:f8:28:fb:94:a9:58:44:98:3c:9c:1c:9e:57:4a:
55:46:7b:b7:3e:28:51:6b:a5:e5:6c:87:91:b9:ef:
62:69:b2:3b:a0:9d:3d:19:c1:7d:fe:70:99:62:f5:
62:25:32:fc:30:e3:d0:7a:af:36:60:db:c2:85:a0:
bf:e6:da:eb:8f:da:4b:ec:6a:2b:14:77:7e:60:0e:
f5:89:e0:0a:05:36:ca:04:6e:9d:61:3b:8b:07:1b:
a6:fb:48:4c:25:94:f5:ba:8a:d3:c3:81:3b:ad:44:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2F:84:67:CC:11:BE:68:57:9E:DC:CF:AA:49:CB:1C:6D:75:37:4B
X509v3 Authority Key Identifier:
keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:e1:7e:2a:7b:ee:6a:a9:dc:33:54:75:db:d0:d4:87:63:d8:
62:ae:5a:4b:01:2e:6e:24:1e:e6:02:1a:d6:21:70:e0:4b:61:
70:6b:eb:f8:75:0a:84:8c:c1:cd:73:10:8f:d9:17:97:d8:33:
80:c2:6e:4a:8b:61:ab:96:0f:ac:0e:ec:c7:0d:9a:28:ce:91:
29:87:ca:d4:92:e6:39:fa:ed:80:7e:ef:e1:bf:89:ef:13:90:
70:99:3c:9c:d4:67:a2:3f:f7:1d:29:6b:25:4d:f8:6c:64:83:
14:51:3d:ff:8d:a3:f6:e8:09:9d:14:cb:4f:d5:f8:9a:a6:b3:
4c:ee:bf:ec:f7:0c:e9:14:6d:ad:44:38:60:a1:52:f6:89:8d:
72:2c:87:f4:00:3a:eb:0e:9b:c2:8d:d9:41:7c:ee:04:03:52:
35:f9:04:71:58:bd:db:13:2f:f6:76:9a:31:c5:66:44:01:48:
d3:9e:a4:86:29:9d:92:c5:87:66:a1:c9:2c:41:56:78:d0:15:
d2:ca:65:53:b1:34:ab:c8:b9:40:b5:41:09:13:11:0d:fe:3c:
0d:19:db:ca:27:4f:e6:4a:6c:aa:9b:c8:80:29:8e:a5:26:c5:
b3:bf:79:45:0e:68:6e:ff:cb:e9:09:e6:25:d2:b9:fc:26:d7:
32:75:9c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:41 2026 by rpki-client