
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
File: ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json)
Hash identifier: iFC8sqTvCpvdYypn35m13QINJyV5pzxVmCIecbCOS20=
Subject key identifier: 2A:BB:75:92:D3:AF:F1:4F:34:7B:FE:75:5A:0A:0C:2F:F8:F2:72:40
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial: 02AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
Manifest number: 0299
Signing time: Fri 17 Apr 2026 01:28:39 +0000
Manifest this update: Fri 17 Apr 2026 01:28:38 +0000
Manifest next update: Fri 24 Apr 2026 01:28:38 +0000
Files and hashes: 1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: LOmjTuqbP2U0s/mL6YRD9Hyabjyzc/QPEjIbxqDiWJQ=)
2: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: MbY6IL5kpc7/CsrHl9Dq+//Dc21bFOal48QqzlMkm3s=)
3: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: JJGT3Nb5VCKirzUE1ySYS3IWcoQmYybrBNJaHh+4Dao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Validity
Not Before: Apr 17 01:28:38 2026 GMT
Not After : Apr 24 01:28:38 2026 GMT
Subject: CN=69e18cc7-b6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:f9:c4:11:e9:8f:9e:0a:08:32:c9:45:09:
d2:54:29:3c:b0:3a:c7:46:2f:65:dd:ed:fa:c8:e5:
17:e0:63:82:15:cb:d6:d8:29:65:65:04:5a:1a:b8:
aa:59:f2:26:f2:c9:df:22:5e:70:d8:15:f9:66:82:
6e:99:84:92:50:ba:01:dd:5b:95:84:a5:89:62:63:
17:84:0a:45:ea:ba:31:b3:cf:8a:be:9d:91:f5:2a:
53:84:ce:cb:ea:63:e8:5f:c7:d3:ed:c5:09:bb:f5:
25:66:35:6e:0d:06:cc:16:fb:87:7b:57:13:4d:db:
41:c0:fb:3a:56:a4:3a:e4:d8:1e:b9:60:f2:e3:7a:
96:b1:d8:d2:30:47:6f:4b:70:d1:57:c4:7b:a0:68:
28:2a:ea:07:51:81:62:08:05:83:ad:f4:38:d1:29:
5f:83:23:0a:b1:f9:5e:e5:46:09:73:24:67:34:89:
e3:f6:46:9b:71:4f:90:4e:7c:17:70:7c:4a:59:56:
59:0d:76:8f:af:c4:d8:a9:dd:05:28:e2:80:73:62:
28:f7:09:a5:74:71:c7:15:ee:d3:b5:c0:70:83:8d:
a1:b8:3f:18:50:0c:85:4b:58:70:88:e9:d2:13:3f:
7b:71:41:3d:2f:94:d2:67:1a:93:59:59:26:8c:38:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:75:92:D3:AF:F1:4F:34:7B:FE:75:5A:0A:0C:2F:F8:F2:72:40
X509v3 Authority Key Identifier:
keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:45:88:22:70:9c:29:2c:43:79:32:8f:ec:77:cf:c6:a4:61:
ac:62:9f:84:f1:d9:c3:7f:53:8f:bc:df:a2:8c:65:65:ec:76:
4a:c8:ce:a6:46:c5:6d:3e:70:d3:8f:bd:69:54:d1:59:82:78:
10:a9:c0:d8:38:c7:8c:24:83:b9:0b:5b:04:5f:49:c9:f3:44:
58:c6:e8:6c:1f:89:cf:99:f7:67:85:e5:ab:91:03:c9:6f:c4:
a7:c4:7b:5d:b4:af:25:45:28:e5:70:a0:4e:39:36:f9:c7:7d:
96:5f:ad:7c:c7:2c:b9:37:60:00:92:6a:68:3d:9b:c3:d0:85:
0c:42:94:9b:58:96:fd:f3:f6:c8:0c:77:6e:3c:78:3d:8d:33:
4b:8b:2c:cc:38:68:d1:67:f7:d5:7c:85:f5:98:16:6b:c7:9e:
22:e5:73:d4:6f:95:63:f0:79:bb:a7:b6:cf:a0:25:56:a6:b7:
bb:46:25:b8:8b:fa:48:33:92:9f:59:b7:e9:2f:87:79:50:99:
50:aa:31:26:8c:80:f4:8d:7a:e2:63:8f:d2:28:fb:7c:fc:a2:
c2:ce:db:74:a4:0f:da:ed:2b:cd:89:98:de:f0:9d:d9:0e:8d:
27:bd:59:47:2a:c8:d0:46:2b:00:d2:45:39:82:07:99:a2:fb:
8d:e1:28:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx
MzJBMjZENDAwHhcNMjYwNDE3MDEyODM4WhcNMjYwNDI0MDEyODM4WjAYMRYwFAYD
VQQDEw02OWUxOGNjNy1iNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvD5xBHpj54KCDLJRQnSVCk8sDrHRi9l3e36yOUX4GOCFcvW2CllZQRaGriq
WfIm8snfIl5w2BX5ZoJumYSSULoB3VuVhKWJYmMXhApF6roxs8+Kvp2R9SpThM7L
6mPoX8fT7cUJu/UlZjVuDQbMFvuHe1cTTdtBwPs6VqQ65NgeuWDy43qWsdjSMEdv
S3DRV8R7oGgoKuoHUYFiCAWDrfQ40SlfgyMKsfle5UYJcyRnNInj9kabcU+QTnwX
cHxKWVZZDXaPr8TYqd0FKOKAc2Io9wmldHHHFe7TtcBwg42huD8YUAyFS1hwiOnS
Ez97cUE9L5TSZxqTWVkmjDgsUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCq7dZLT
r/FPNHv+dVoKDC/48nJAMB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF
MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5
LVVBdzE4Ty03MUFUS2liVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnEWIInCcKSxDeTKP7HfPxqRhrGKfhPHZw39Tj7zfooxlZex2SsjOpkbFbT5w
04+9aVTRWYJ4EKnA2DjHjCSDuQtbBF9JyfNEWMbobB+Jz5n3Z4Xlq5EDyW/Ep8R7
XbSvJUUo5XCgTjk2+cd9ll+tfMcsuTdgAJJqaD2bw9CFDEKUm1iW/fP2yAx3bjx4
PY0zS4sszDho0Wf31XyF9ZgWa8eeIuVz1G+VY/B5u6e2z6AlVqa3u0YluIv6SDOS
n1m36S+HeVCZUKoxJoyA9I164mOP0ij7fPyiws7bdKQP2u0rzYmY3vCd2Q6NJ71Z
RyrI0EYrANJFOYIHmaL7jeEogQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:05 2026 by rpki-client