
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
File: f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json)
Hash identifier: b2H/XzaAlfG6oi4C15JGNWzDepXpq9dgO04C1/7hzBs=
Subject key identifier: A2:E0:69:6C:D6:AD:9C:1B:2B:97:D4:5A:91:29:C8:C0:6F:18:4F:9E
Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
Certificate issuer: /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Certificate serial: 352E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
Manifest number: 352E
Signing time: Thu 16 Apr 2026 15:04:02 +0000
Manifest this update: Thu 16 Apr 2026 15:04:01 +0000
Manifest next update: Thu 23 Apr 2026 15:04:01 +0000
Files and hashes: 1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: r5ID7Cg8bx+9i0MZjCPc5N1gv2GOUwrVcYl2RFxUB6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13614 (0x352e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C67, serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Validity
Not Before: Apr 16 15:04:01 2026 GMT
Not After : Apr 23 15:04:01 2026 GMT
Subject: CN=69e0fa62-8e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:ca:5e:f8:58:33:65:9a:fc:58:25:ef:b6:
eb:37:3b:aa:f1:00:bc:24:6b:39:12:ac:d9:ec:a4:
3f:cf:64:c1:24:fb:2f:a9:2c:18:a1:1c:e6:58:14:
39:84:41:1b:99:a0:7a:7e:64:43:a9:4a:e5:02:4b:
50:41:ae:cc:b7:52:7d:11:47:b0:79:4e:eb:2e:3c:
f2:78:a0:86:95:c4:90:ca:8d:b9:ae:bc:c9:0a:cd:
62:ba:38:65:2f:e5:8d:c7:19:a2:31:7b:cd:23:ab:
6f:0b:fb:36:d4:4a:fc:d0:48:c6:9e:ea:89:a6:9e:
19:a2:a9:1c:da:e1:09:43:df:b7:73:a2:33:20:5f:
be:7d:7b:d9:47:b8:1b:19:5c:fe:cd:81:83:dd:56:
21:af:43:91:61:c3:0e:f7:69:a5:b7:d8:1f:80:8a:
86:9a:fe:17:56:ff:64:37:e7:88:f1:4f:85:49:65:
28:c6:ad:a5:9a:71:e9:ac:70:28:52:08:42:e4:8a:
74:6d:1e:df:3e:ed:47:af:1d:7e:30:56:48:0c:87:
a9:4e:05:c8:02:50:f1:2b:23:96:10:5e:70:e3:52:
44:fd:bb:69:bb:d6:fa:b0:83:65:d4:35:fd:dd:8b:
ba:d4:94:be:5f:1a:48:8e:3c:d4:69:9c:11:70:69:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:69:6C:D6:AD:9C:1B:2B:97:D4:5A:91:29:C8:C0:6F:18:4F:9E
X509v3 Authority Key Identifier:
keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:7c:38:64:4d:d2:d4:df:7b:68:ee:a7:d6:3c:a8:7d:38:37:
8c:76:a4:cc:26:23:35:10:16:e6:82:14:23:aa:fb:fb:06:ad:
ef:04:da:4f:ba:90:47:af:48:a0:5a:50:cd:94:f4:7d:6f:af:
e5:5f:61:35:4d:ac:9c:30:29:ea:c0:c9:3c:55:c9:57:a2:d5:
11:2e:68:90:da:22:89:d7:48:fe:eb:c5:5a:fc:64:9c:0d:f5:
cb:c6:94:4f:f7:f2:4f:41:93:84:2a:9b:bf:ab:d8:20:0f:7a:
dc:a7:62:96:66:0d:5b:51:2f:38:cb:83:d4:74:87:07:f2:c3:
d1:00:90:c8:09:90:ba:47:dc:77:a7:86:c0:52:b9:5a:60:1f:
68:ab:3a:8b:af:ec:77:3c:e7:25:8c:9d:89:47:0d:5e:0d:09:
4b:62:08:87:a8:0d:90:a9:6c:71:e7:82:bc:6f:61:ca:61:e0:
f7:f9:3d:30:14:6b:3c:69:e9:95:cd:7c:27:6f:7e:2b:69:e0:
d3:4d:9d:fe:61:c7:31:02:c9:ab:e5:71:32:7a:3d:dd:b1:87:
0d:db:63:17:23:15:69:6b:50:4a:26:38:99:da:dd:9f:fc:7a:
2c:16:38:0d:a4:a3:b2:7a:db:b2:7d:e8:a3:30:fe:a8:51:65:
d2:4d:39:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjRDNjcxMTAvBgNVBAUTKDdGRkM1QTI5RTc1RjlFQkUwNzlEMDUyNDdGMERGRjBD
Rjk4N0YxQzIwHhcNMjYwNDE2MTUwNDAxWhcNMjYwNDIzMTUwNDAxWjAYMRYwFAYD
VQQDEw02OWUwZmE2Mi04ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ebKXvhYM2Wa/Fgl77brNzuq8QC8JGs5EqzZ7KQ/z2TBJPsvqSwYoRzmWBQ5
hEEbmaB6fmRDqUrlAktQQa7Mt1J9EUeweU7rLjzyeKCGlcSQyo25rrzJCs1iujhl
L+WNxxmiMXvNI6tvC/s21Er80EjGnuqJpp4Zoqkc2uEJQ9+3c6IzIF++fXvZR7gb
GVz+zYGD3VYhr0ORYcMO92mlt9gfgIqGmv4XVv9kN+eI8U+FSWUoxq2lmnHprHAo
UghC5Ip0bR7fPu1Hrx1+MFZIDIepTgXIAlDxKyOWEF5w41JE/btpu9b6sINl1DX9
3Yu61JS+XxpIjjzUaZwRcGkKuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLgaWzW
rZwbK5fUWpEpyMBvGE+eMB8GA1UdIwQYMBaAFH/8WinnX56+B50FJH8N/wz5h/HC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEM2Ny9CRjNGQzJGQTFE
QTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5yNEhuUVVrZnczX0RQbUg4
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZfeGFLZWRmbnI0SG5RVWtmdzNfRFBtSDhjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NEM2Ny9CRjNGQzJGQTFEQTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5y
NEhuUVVrZnczX0RQbUg4Y0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKXw4ZE3S1N97aO6n1jyofTg3jHakzCYjNRAW5oIUI6r7+wat7wTaT7qQR69I
oFpQzZT0fW+v5V9hNU2snDAp6sDJPFXJV6LVES5okNoiiddI/uvFWvxknA31y8aU
T/fyT0GThCqbv6vYIA963KdilmYNW1EvOMuD1HSHB/LD0QCQyAmQukfcd6eGwFK5
WmAfaKs6i6/sdzznJYydiUcNXg0JS2IIh6gNkKlsceeCvG9hymHg9/k9MBRrPGnp
lc18J29+K2ng002d/mHHMQLJq+VxMno93bGHDdtjFyMVaWtQSiY4mdrdn/x6LBY4
DaSjsnrbsn3oozD+qFFl0k05Ng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:21 2026 by rpki-client