
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json)
Hash identifier: RtN9pzEDiD5/TZo+sJqXm4grDmjuR5r/GFEXLqP1BA8=
Subject key identifier: 2E:FB:44:BF:57:A2:24:27:C3:63:EE:65:2D:CD:0E:99:96:F2:F8:60
Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Certificate serial: 0CBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
Manifest number: 0CB3
Signing time: Thu 16 Apr 2026 18:24:05 +0000
Manifest this update: Thu 16 Apr 2026 18:24:04 +0000
Manifest next update: Thu 23 Apr 2026 18:24:04 +0000
Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: NMsSPj91XB+03zWhFoM4q0CghcK5ORdhtjMBHF3gqjQ=)
2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 6d9x5P4qjslvkCA0UbFumpnnbX594CB88ciKOH4G9Ks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl
rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Validity
Not Before: Apr 16 18:24:04 2026 GMT
Not After : Apr 23 18:24:04 2026 GMT
Subject: CN=69e12945-32ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:0c:55:87:76:7f:b2:e2:5e:bd:7a:1f:97:
73:d8:25:9e:e1:fe:b8:fb:98:e7:28:09:b8:7b:ec:
eb:f0:31:a5:26:1e:74:84:df:07:a8:5a:e8:4a:5f:
c6:b9:01:25:d7:e8:cd:21:fb:f0:30:ce:17:2f:35:
48:17:c3:ca:97:ef:23:41:f4:d6:9f:f9:a3:a0:0e:
9f:e6:f3:23:32:6e:ff:c8:22:d3:6b:bd:fb:29:90:
9f:2c:b5:43:1c:39:c2:c3:6e:4b:87:dd:6e:3c:f8:
26:ce:fb:62:f7:f5:b1:e5:c0:34:d0:b1:99:01:f6:
76:73:f4:4b:9c:d1:c8:ef:54:c0:51:2f:b3:83:a2:
b9:57:a4:a6:47:7c:35:eb:4c:1d:2a:f7:91:17:dd:
f0:7f:ad:a8:73:f3:30:74:cf:8b:a3:b2:e2:83:25:
b5:18:69:44:e6:c3:88:5b:62:77:9e:81:15:51:68:
2e:93:76:3e:ab:82:95:56:9d:bd:36:b6:24:9b:fc:
10:fb:99:ed:f4:23:69:9a:f1:94:73:b1:07:6a:63:
25:38:ee:b7:83:4d:03:bd:79:c3:cc:3b:a2:ac:4c:
f0:95:3f:9e:49:d7:98:6b:93:03:99:25:ea:60:5f:
fb:31:36:17:ed:b6:75:f7:a4:5b:47:98:15:c8:0b:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FB:44:BF:57:A2:24:27:C3:63:EE:65:2D:CD:0E:99:96:F2:F8:60
X509v3 Authority Key Identifier:
keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:d1:db:e3:35:3c:2b:06:c9:a4:32:9c:1c:31:32:f0:2f:a9:
59:56:f5:1e:a2:32:91:db:22:d0:ca:3d:14:37:bc:50:58:00:
72:73:b0:cb:d3:0e:ef:b9:65:c8:38:2c:dc:6b:8b:e7:de:7f:
d2:01:f1:71:32:7b:2b:8d:d0:bb:8f:09:22:b7:7c:45:98:65:
31:c3:92:97:7f:89:e6:47:6d:37:7a:19:9b:95:58:64:89:fb:
4a:34:81:70:74:36:3e:a7:68:fa:7a:97:99:87:b9:6f:44:89:
2a:96:69:c9:da:e5:f0:81:af:d7:67:1f:70:b0:8f:cc:e3:8b:
6b:b1:b5:10:83:69:17:04:54:2c:64:a1:b8:71:20:6f:15:34:
e7:7d:6e:87:ef:8c:e5:19:71:19:a6:3e:c0:e0:bd:dd:3f:5e:
7f:60:0e:25:3a:3d:91:0b:68:f1:91:b7:7e:72:2c:6a:f7:93:
15:42:ea:0b:c2:f0:81:05:be:0d:67:14:b1:22:92:b6:ea:64:
f3:85:49:9f:98:25:11:d3:85:a1:26:78:ac:5e:10:b5:9a:de:
25:dc:22:00:73:0e:69:ec:39:e8:62:67:ff:2e:c8:09:49:6b:
19:a2:60:0c:eb:82:3a:1e:17:24:68:dd:83:fd:5c:9b:b4:2c:
e8:71:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:01 2026 by rpki-client