
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json)
Hash identifier: 9Ual4dBo4AXBSRWZgeRSXTkW6tqID8EGrcQbKi/w4gY=
Subject key identifier: 90:0C:B6:BD:B8:96:D9:4C:4D:32:52:F8:FF:BF:95:C8:6A:9E:6D:AD
Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
Certificate issuer: /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Certificate serial: 079C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
Manifest number: 2346
Signing time: Thu 16 Apr 2026 15:47:38 +0000
Manifest this update: Thu 16 Apr 2026 15:47:38 +0000
Manifest next update: Thu 23 Apr 2026 15:47:38 +0000
Files and hashes: 1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: sDXqsEKZbpnhAP2WVFxELXxAlz3R5i9Ceclj266Nm/Y=)
2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: lPrloJGC9fRoPJ5nXnuFUs4bSREmY0P/1nt0P5cs2LM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl
rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Validity
Not Before: Apr 16 15:47:38 2026 GMT
Not After : Apr 23 15:47:38 2026 GMT
Subject: CN=69e1049a-0c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:2b:1a:2f:56:3f:1d:b5:1b:cb:4f:44:ea:
e6:27:f7:ad:42:ce:b3:7a:87:1c:2f:b0:e1:e7:89:
7c:c5:cc:75:a7:2e:52:21:f9:4c:9a:bc:f3:e9:7a:
df:31:aa:66:0c:c6:79:29:1d:58:7c:c9:32:8f:cd:
92:75:7e:69:19:43:b2:bd:75:d7:d5:0e:08:0b:71:
78:7c:09:50:cd:e6:33:12:91:26:45:be:7c:79:65:
c8:1f:a3:70:69:7c:53:9a:d8:62:4c:d6:25:74:6f:
1c:7a:e5:9e:52:db:4c:7a:d8:ea:4b:97:36:b0:65:
1c:ea:ae:bc:75:84:64:51:33:60:58:40:2a:a4:08:
67:48:94:9f:f8:c7:0e:6f:6a:4c:a9:83:3a:d7:9e:
52:bd:3a:24:8c:4b:6e:59:42:3a:a1:fb:9c:18:03:
d2:c6:d0:4e:09:1c:38:52:10:0a:bf:16:84:10:30:
1b:c6:7a:11:39:9f:57:ad:cf:6f:f5:4e:50:3a:6b:
69:07:fe:f3:be:78:da:a9:63:93:e7:64:6e:93:b2:
c5:1a:14:d0:be:09:5c:37:4a:22:2d:26:c4:71:9b:
26:4a:25:26:b9:2c:2d:7b:62:99:61:52:55:f1:07:
5e:e7:16:f4:ea:43:86:50:05:20:d8:4f:6a:1b:10:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0C:B6:BD:B8:96:D9:4C:4D:32:52:F8:FF:BF:95:C8:6A:9E:6D:AD
X509v3 Authority Key Identifier:
keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:7e:dc:52:6a:de:a3:d0:00:67:c1:f6:22:33:49:6a:53:6f:
9f:04:74:49:15:12:a6:e3:1e:38:a9:65:06:2a:33:15:5c:58:
c3:70:5b:fc:02:cc:ab:de:80:12:df:e4:ad:e4:ca:ea:0f:44:
72:5c:1a:8c:04:73:82:e6:a6:98:28:d9:d4:50:64:5a:43:d7:
e3:57:73:2a:bf:9a:b9:cb:9b:3b:ba:e9:2b:3f:e7:c2:c1:01:
3f:f9:c6:c5:fc:4e:26:fd:e6:59:6a:8c:7f:38:da:7d:9f:fc:
85:82:7e:55:2c:5d:aa:43:a1:21:58:8f:20:a3:40:cb:a7:97:
5e:f9:a5:b6:66:4f:e7:a9:ec:2e:8d:76:a3:f8:62:8f:4b:b8:
6b:79:56:95:fe:ba:0f:c9:a1:6c:25:4e:05:f7:4b:17:8f:18:
ec:f5:da:62:9f:8e:e0:dc:d1:5e:84:3f:79:e7:b9:74:f8:a9:
a0:9a:bb:a0:cc:a7:70:f0:8c:61:c7:5b:ca:32:26:3c:cd:84:
2f:96:ba:3b:1a:1c:e3:3b:0c:70:4e:27:df:59:e3:ca:09:a5:
59:94:89:1b:2b:c2:d5:88:04:5b:65:1f:29:2e:a3:d6:6a:3d:
c4:c5:96:08:83:96:97:8e:cc:ed:fd:02:33:77:ed:37:5a:0c:
87:b4:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:29 2026 by rpki-client