
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier: cDFUu7sm50RxEQ245VY22TeelVy+XgJz/vef+dfDHwM=
Subject key identifier: 79:25:A4:CD:AE:7E:13:7C:6C:9F:AB:74:3C:6B:DD:FA:E8:47:6C:E9
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number: 01E2
Signing time: Fri 17 Apr 2026 03:11:38 +0000
Manifest this update: Fri 17 Apr 2026 03:11:37 +0000
Manifest next update: Fri 24 Apr 2026 03:11:37 +0000
Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: wEqI9D+PJzd2L3eZbhEUBPrRMb6r0zIsWxOVGzPPiwQ=)
2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: 6S2UbDPQhc0s/ttHg30hgcMezorQYndA+hy2IrwcJyg=)
3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: Dn+JL4IFF8F6udJCXJBfFR0N/JW0riYqK/noh4aF+Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Apr 17 03:11:37 2026 GMT
Not After : Apr 24 03:11:37 2026 GMT
Subject: CN=69e1a4e9-de38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:2f:c5:13:fd:d9:1a:2a:1a:5e:f6:1b:09:
5a:5a:5d:7a:dd:e6:7b:cb:ed:72:94:eb:1a:f9:fa:
8b:bf:55:0a:14:6d:65:78:dd:5e:bb:2c:55:64:c4:
f5:8d:e2:1b:74:f5:89:4c:80:9e:e5:08:7e:f1:8a:
96:ea:73:09:40:0e:01:4b:cc:f5:b5:3f:89:09:47:
01:2b:f6:98:4d:bb:d6:6a:b3:6d:2e:2f:6b:ad:7b:
a8:8c:0c:8c:4b:cc:71:9b:97:9a:54:f8:5b:19:11:
68:e7:6c:af:4d:c0:97:4b:9c:bb:90:d4:19:51:b6:
26:5a:ba:ae:09:06:90:bf:40:17:98:42:5f:c1:0e:
ce:8a:56:80:c2:00:a1:2a:eb:01:8f:8c:b4:fc:c1:
a0:bd:1e:fd:27:6c:73:9c:2b:0e:26:35:c7:47:b4:
ee:ee:83:e0:81:7f:4d:47:f4:af:8e:23:c5:50:ce:
0f:90:7f:88:77:f0:1d:62:0b:e5:e2:77:7b:51:b0:
6c:b4:4e:65:c8:d4:2b:16:fe:86:e6:b7:e3:d4:dd:
1b:bb:79:3a:ac:38:97:35:9e:a0:5b:e2:b2:2c:62:
dc:26:bf:2e:5f:85:01:ac:9f:a4:04:d0:db:43:f6:
77:08:39:68:27:2a:3f:d4:d0:26:fe:52:5c:db:0f:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:25:A4:CD:AE:7E:13:7C:6C:9F:AB:74:3C:6B:DD:FA:E8:47:6C:E9
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1d:9a:d5:7b:7f:29:29:ce:28:4e:dc:36:ec:a4:46:e2:ff:
54:a3:87:cd:96:4e:e4:63:8f:6c:7c:ec:c6:d6:43:4c:88:13:
6a:b0:1f:4b:e0:8f:bc:ac:b4:6b:9a:ca:20:a2:40:ec:0c:af:
95:3b:1b:a7:57:fe:68:b3:a2:23:7c:cc:b3:cf:a1:c0:aa:c1:
0a:7a:69:a0:ce:59:86:1e:41:86:20:52:20:49:a1:7d:b2:2b:
df:83:6b:07:77:71:7c:c3:b6:14:cf:2c:e1:77:ef:83:79:5a:
6b:46:39:00:6b:09:2a:69:56:80:c0:f3:de:ef:2a:85:70:c9:
26:89:ef:af:99:fb:4e:de:ac:af:f1:d6:1f:29:52:bf:4c:ec:
2f:42:7b:ef:e9:3e:ce:f6:8a:e6:1d:9a:21:49:bb:3b:12:79:
d6:51:c6:d6:c5:d8:08:55:6b:49:f5:25:3e:da:16:e5:3f:2a:
9e:42:c3:ab:cd:64:6c:ce:df:f6:a3:b6:41:2b:07:7b:a9:7c:
18:9a:bd:95:04:1a:d6:43:c0:4e:a9:59:74:34:3d:67:8e:ba:
d5:87:63:54:74:f7:0c:30:0f:07:aa:d9:30:8a:61:d1:08:5a:
3f:36:23:e7:cf:9e:bb:15:ef:01:e8:fe:03:4d:24:10:2a:d6:
78:f3:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:19 2026 by rpki-client