
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json)
Hash identifier: IHk8PXAx8O+s3uiChVvhbaSeyN9TWADKt3jb7kT/2rI=
Subject key identifier: 38:50:E1:DC:DF:A7:F6:43:69:57:31:08:6B:C3:59:CF:42:FC:5F:4F
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial: 1358
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
Manifest number: 1342
Signing time: Thu 16 Apr 2026 16:56:00 +0000
Manifest this update: Thu 16 Apr 2026 16:55:59 +0000
Manifest next update: Thu 23 Apr 2026 16:55:59 +0000
Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: +DEBImrF99mGRxf8hTmZlhE6Ag11KZn7adur6xvfKc0=)
2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: +sUGjUzklaHkDx1+tYPnVEh2t1t6I+IkTvFT5vdfme8=)
3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: rcdSLdQwLYJ2Vz+RACiGDvkwIFouXEi+FG0VRiUjp4o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4952 (0x1358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Validity
Not Before: Apr 16 16:55:59 2026 GMT
Not After : Apr 23 16:55:59 2026 GMT
Subject: CN=69e114a0-693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:ee:97:67:f7:c0:5d:df:68:9f:a3:f2:27:
0e:a7:86:c6:a8:7f:b8:8b:76:d1:16:db:67:6c:b2:
db:66:2f:c4:dc:01:5e:c5:cd:1b:9b:33:18:b1:3b:
ee:0b:9b:6a:28:cb:2b:ac:e7:be:d1:3e:53:22:b2:
cc:2f:ce:87:32:cc:ad:fe:29:7e:ed:e9:ef:78:7f:
10:ed:33:0e:a8:c0:01:93:ea:28:55:52:1f:65:22:
91:aa:a9:13:d5:44:ee:15:44:33:22:63:62:9f:bf:
f7:72:61:4c:7d:89:dd:95:67:1e:e8:93:07:b6:a1:
6d:fb:13:05:13:bc:90:67:2e:42:e8:e8:c9:b7:60:
93:57:4c:20:5e:09:ff:d0:b8:f9:08:b8:dd:e0:9e:
42:c6:d5:35:ea:ee:4f:19:1b:cf:79:d9:6d:db:50:
fd:fe:f3:0d:c9:dc:3b:37:40:5f:85:2e:f1:08:7f:
63:eb:8c:69:54:06:5b:22:65:97:34:6a:8a:8c:c1:
8f:f7:6e:92:2b:b6:72:a6:a3:cc:73:b7:64:92:51:
04:e9:ea:bd:98:ae:ee:bb:56:e7:08:30:4f:f5:34:
99:c4:fe:81:b0:2c:a1:2c:b8:ea:7d:c4:7c:74:5f:
ec:cc:26:12:06:6d:03:9e:cc:6a:df:ef:ed:c5:9f:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:50:E1:DC:DF:A7:F6:43:69:57:31:08:6B:C3:59:CF:42:FC:5F:4F
X509v3 Authority Key Identifier:
keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9e:49:58:8f:b0:f9:ec:9f:09:22:fb:9b:54:18:6a:42:d4:
0a:26:4a:c7:cb:ea:db:83:3d:f6:41:b1:c3:fe:01:d1:aa:77:
54:38:ed:b0:f6:a7:75:f7:0b:b8:88:2a:8d:9b:0b:1f:24:c3:
00:de:70:d3:b8:e8:8a:53:8a:65:c9:65:95:1b:47:31:37:ce:
30:32:f2:c6:0d:af:c3:1b:df:bd:e5:7b:66:9f:7c:7d:5e:3a:
5a:bb:4e:3e:9c:af:d0:e3:50:43:ee:ba:bb:6f:89:ae:87:e7:
14:2f:4b:96:5c:12:31:1b:bb:72:39:09:92:1e:9e:8c:fb:76:
f8:ef:d9:8e:aa:28:25:fd:4c:c4:98:b4:60:47:c5:dc:06:9e:
89:d2:ad:9d:28:c4:8e:d5:93:21:ec:2f:fa:cf:b2:af:f6:8c:
e9:6b:18:3d:4b:01:9f:95:83:85:a3:33:c4:e7:b3:1d:89:59:
e6:f1:28:90:d2:5b:ef:a8:68:f9:53:c6:fe:5e:f0:ef:8f:83:
b1:5b:c3:65:71:3e:b0:ff:cb:d8:07:65:82:b7:46:95:13:97:
89:76:c1:05:07:d3:8a:84:4b:85:e6:fa:e3:b6:56:c9:93:75:
eb:4f:36:39:6f:e2:f6:bf:88:45:53:3c:42:c0:30:50:af:51:
02:ee:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:16 2026 by rpki-client