
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
File: aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft (raw, json)
Hash identifier: R/g8Ge7kSt6HYNF+rgVZYra85TRVTWvwCz3rxpQGXOA=
Subject key identifier: 7E:5F:A4:C2:7B:8B:69:C8:AB:F3:DB:A2:87:CE:7A:A6:6A:7D:FD:28
Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
Certificate issuer: /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
Manifest number: 2C
Signing time: Fri 17 Apr 2026 08:31:12 +0000
Manifest this update: Fri 17 Apr 2026 08:31:12 +0000
Manifest next update: Fri 24 Apr 2026 08:31:12 +0000
Files and hashes: 1: aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl (hash: 8cu1WaSjUMFpUOk0jRSaGckmTqft58j9rML19jUWNCM=)
2: 131D50EC03B511F1B33AD351023D8C67.roa (hash: xqonfLO8pGFGJqrL6Ubam0r8pA6SA2doL9TBCfFtqWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Validity
Not Before: Apr 17 08:31:12 2026 GMT
Not After : Apr 24 08:31:12 2026 GMT
Subject: CN=69e1efd0-4ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:be:fd:0e:15:90:1f:be:aa:6c:db:cb:67:
8d:05:d3:78:ac:75:4d:c1:a8:8d:88:29:ce:81:91:
a3:8b:c4:6d:e1:f4:e8:5f:47:0d:68:c8:2e:c6:69:
8a:07:7e:cf:19:53:99:42:86:53:ac:37:42:68:f2:
09:a8:9b:2b:6c:28:3d:33:f6:e4:b8:56:6e:5c:99:
09:a7:41:12:04:75:34:94:b8:44:66:78:51:42:3b:
70:64:ca:c8:d0:b7:08:85:00:05:54:eb:b6:5b:88:
a0:1b:c2:b8:08:a3:a3:0f:a4:de:d2:12:f0:1e:05:
ce:11:6f:8c:fc:e0:df:23:d9:21:50:74:25:72:c0:
bb:ee:cc:4e:bd:58:2f:bd:dc:8a:e9:c5:45:7e:04:
6e:99:b8:a6:98:6f:5f:bd:d4:6d:db:76:48:ac:eb:
e2:e0:8d:ef:c8:7c:eb:03:75:6f:0a:46:fe:df:1f:
8c:58:3a:7c:1b:c7:28:59:2a:09:ad:5e:86:d1:56:
d1:50:b7:53:83:2a:23:3c:35:ad:7a:06:47:93:dc:
9d:c0:b3:06:c1:8f:fc:1e:dd:3a:66:3d:ef:ae:9f:
0e:fc:58:4c:d4:de:c6:61:34:6f:ec:39:b3:07:53:
ce:dc:f7:d2:c7:a1:44:b2:09:01:f4:23:ca:d9:23:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5F:A4:C2:7B:8B:69:C8:AB:F3:DB:A2:87:CE:7A:A6:6A:7D:FD:28
X509v3 Authority Key Identifier:
keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5f:6f:65:11:75:94:d0:80:79:90:8f:80:11:82:19:a5:c7:
ca:f2:fc:9d:da:e1:8a:de:ea:38:d4:b4:7c:ae:63:cb:41:92:
6f:61:cd:cb:3e:78:7d:bc:ee:87:0e:95:28:ec:e1:ec:5b:46:
20:ad:5a:5d:30:fd:51:1c:c7:0b:a5:6b:b1:66:bc:3a:3a:27:
82:27:a9:b5:c7:03:d7:8b:cc:95:14:ea:5d:2b:bc:ea:58:4f:
80:60:2a:d2:61:f2:21:36:f6:1a:f1:64:78:cb:9b:3b:b4:7a:
2c:a9:41:7e:aa:83:c5:45:7e:47:8a:16:11:97:d7:e7:52:d3:
b1:4c:71:96:d4:91:17:db:f4:be:60:2c:53:1c:f9:2d:b8:91:
d9:65:fb:a2:d0:b7:d8:60:0f:f4:0a:11:29:35:88:e1:9b:bb:
80:4a:21:ea:0f:88:1f:2c:37:44:f5:f4:44:50:fe:bf:b9:ff:
4a:cc:a9:5e:7b:79:f7:c4:94:2f:51:48:1b:9b:54:1c:ad:b7:
a0:51:d3:0a:2c:fb:64:ab:77:28:69:79:f7:5b:27:0f:6b:56:
12:8b:7a:2b:71:6a:a3:d1:86:b6:38:e7:73:42:9e:aa:cc:1c:
15:0e:dd:18:d0:32:bc:6c:a7:33:0b:29:11:c7:7b:54:1c:92:
bb:0b:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:25 2026 by rpki-client