
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier: 1ICJhJPnsI6hk8U/lXg4seP/AvhFZMuAx2rB4aHW2ZU=
Subject key identifier: 64:01:59:63:33:1F:F2:C2:67:AC:96:3D:F7:24:2B:47:E5:F5:6E:6B
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial: 3536
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number: 3530
Signing time: Thu 16 Apr 2026 15:14:33 +0000
Manifest this update: Thu 16 Apr 2026 15:14:32 +0000
Manifest next update: Thu 23 Apr 2026 15:14:32 +0000
Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: Nn8PLt2Jz/+K+OU4UZDWEv08MlFiPM6TfwzU8+B34lc=)
2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: xDho51ddKsKnW1mieTz7ANylai7wvJBRqnmFiSl8KPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13622 (0x3536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Validity
Not Before: Apr 16 15:14:32 2026 GMT
Not After : Apr 23 15:14:32 2026 GMT
Subject: CN=69e0fcd8-653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:1c:71:15:b3:2d:c1:0e:c7:8b:78:e0:dd:
e5:8a:2b:0a:a4:ad:f1:80:e1:13:11:2e:2d:d5:21:
2f:24:fb:48:fb:14:23:a0:04:b7:d9:64:33:5b:8e:
af:c0:61:7e:ce:da:91:26:a9:68:46:78:27:b0:d2:
e4:37:a2:79:bb:c6:4e:75:21:e7:bb:ea:d7:cf:fd:
d3:67:43:6e:54:f9:13:7a:ec:4e:c5:85:6f:a2:ff:
37:00:0b:48:39:68:e9:02:9e:bd:b7:98:e0:68:6d:
a7:fc:4e:4c:cf:9d:d3:b2:47:36:77:f6:7f:c0:d3:
63:d9:13:eb:3c:72:d2:15:73:8d:2c:b8:d6:2a:48:
1d:57:1a:33:ef:49:cd:92:21:d4:d8:39:0b:61:28:
36:05:6d:fc:63:b3:fb:50:c1:76:59:e0:be:b5:15:
79:22:22:48:16:8c:5f:54:1b:fd:ba:1f:50:7b:d0:
97:30:07:13:ca:b0:b1:6c:27:4b:48:47:fb:39:7b:
af:2c:a6:bd:65:01:34:e4:35:06:17:9f:bd:4d:38:
f2:7d:de:3f:af:f7:01:79:55:7f:54:15:45:e1:1a:
a8:71:09:0a:e7:06:1c:bb:45:ba:69:f2:2c:73:3e:
d3:18:82:8c:75:f0:0e:f9:a8:9c:d7:7d:c1:5f:d1:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:59:63:33:1F:F2:C2:67:AC:96:3D:F7:24:2B:47:E5:F5:6E:6B
X509v3 Authority Key Identifier:
keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:74:45:0e:02:6a:f7:72:37:11:e6:79:9c:ab:9a:9e:56:b2:
58:8d:2a:d7:09:e7:e7:34:32:92:89:f7:58:dd:3b:5e:dc:77:
48:18:66:e5:d4:37:34:c0:36:ae:04:67:04:79:df:cb:cd:34:
22:01:46:13:b7:b7:dc:1c:1b:3d:57:03:42:88:03:d4:60:0f:
00:a4:86:ca:d6:58:d8:a1:16:17:1e:02:66:ca:46:66:13:a7:
cc:55:b7:39:d8:db:41:22:c7:bf:e0:8f:21:56:43:7b:a3:1f:
cf:1e:c6:b9:6b:6e:4a:0c:bd:4d:ce:9c:74:37:cf:e5:22:17:
26:69:94:97:25:b7:31:03:44:f9:2c:69:ef:7a:97:ff:47:dc:
36:d0:ab:ec:91:38:06:28:e9:63:51:24:a6:55:01:7d:52:f1:
22:e5:68:cd:7d:d7:9a:0f:e4:b8:8c:3a:ea:a3:a2:c0:5c:1d:
8e:be:b6:16:23:fb:a0:65:be:ba:b3:30:c6:b1:34:2c:db:08:
6e:73:fb:92:b2:f9:04:9c:7e:75:40:a0:3a:4b:39:a9:c4:1a:
41:a6:d0:cf:30:aa:92:1c:ec:d5:74:1d:4a:90:5f:ae:ad:ea:
74:3b:36:31:39:69:5b:2c:5a:af:d1:47:96:b5:33:ed:a4:29:
03:79:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:58 2026 by rpki-client