
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json)
Hash identifier: SVpJqPJ+294yq6MH94WlY5GzNl5I8bdR1v0YrDZThVA=
Subject key identifier: 53:0F:A5:45:DD:1B:51:F9:16:1D:D5:4B:77:BD:83:06:33:11:13:F5
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial: 14B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
Manifest number: 1446
Signing time: Thu 16 Apr 2026 16:50:21 +0000
Manifest this update: Thu 16 Apr 2026 16:50:20 +0000
Manifest next update: Thu 23 Apr 2026 16:50:20 +0000
Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: Iysm3ZtY6maerIVYcpZVBoejnpwEy57sV2JalbkuMa8=)
2: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: wFgqxtjBGSnNz0V3JbbMZbJffl0S6xGyyA4P8cQ+F5Q=)
3: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wx0Bxj5s6AtaxYxKTNAOFbXAlN9uVO+TgC5goivQpV0=)
4: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: RY4kpnbvPpjFeHSCdD9BLyLv0qAmm+duLbNyMu+5+gA=)
5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: 35M/vR3gb3Yiy8oN9cgMH76bee2iK7+OfBfGhUwH558=)
6: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=)
7: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: 3JrsTAYAGHynUAu7FXh7i6mKx20TisYQ8rxOPDDqL30=)
8: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: xKENUn13Ef2bP0B62DPkEXchyNaPtBjxu7QmsrqxB9E=)
9: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: XTo7hzo+YS5Mx8+cYSyBvlAGKzskb8sqYpNZv6UbZw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5303 (0x14b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Validity
Not Before: Apr 16 16:50:20 2026 GMT
Not After : Apr 23 16:50:20 2026 GMT
Subject: CN=69e1134c-0340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:17:85:4a:38:ea:3d:51:f3:17:fd:ad:d7:
c6:1c:75:82:4c:23:83:70:44:5f:2b:2a:19:96:c0:
bd:ae:d3:17:7c:d3:cf:e4:89:b1:db:66:c7:1e:d6:
58:c1:c8:3d:34:75:a0:a8:7b:d4:bc:12:52:8f:00:
cb:97:36:7f:95:4b:80:54:64:d3:da:45:44:f1:bc:
fd:82:e0:5e:8d:cc:8b:21:b6:a2:fa:77:a3:17:1f:
d4:e4:d4:0f:5e:6f:a6:3f:75:f9:81:70:ce:60:4e:
a1:2a:ac:a6:5c:b0:95:19:04:30:19:7d:d4:ad:14:
d9:a7:9b:21:7a:c2:44:0b:bf:20:89:e1:ab:b3:40:
13:fe:06:f8:ce:f2:30:0f:11:2c:21:85:b0:2a:db:
5d:09:77:f3:dc:04:64:94:76:3e:96:23:69:ab:a0:
66:fe:27:29:35:9b:bb:e8:2b:f0:55:6d:93:95:41:
2f:bc:8a:63:a6:0e:64:4f:a4:b4:51:4e:b2:98:b5:
61:6f:d0:06:6d:85:6a:83:78:cf:d3:b8:7b:a2:6a:
a3:08:fc:bb:56:be:3e:9d:ca:d6:4a:5a:80:f6:84:
46:22:ed:b4:45:3f:47:05:d9:1e:7e:80:d6:d1:9f:
b4:93:82:c6:76:8f:d0:83:bd:ae:9b:2a:f5:9d:ad:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0F:A5:45:DD:1B:51:F9:16:1D:D5:4B:77:BD:83:06:33:11:13:F5
X509v3 Authority Key Identifier:
keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:1e:c6:35:11:61:de:7d:55:06:b7:8f:88:83:90:e6:35:f3:
52:e5:b9:7b:78:75:c8:e0:d9:12:a8:5a:19:03:82:db:2d:f3:
25:5d:fb:25:c7:ee:b9:10:ce:23:e3:6c:45:88:23:ed:42:e1:
6b:71:2f:e3:fe:0d:ae:2f:b2:37:ad:9b:46:be:db:3a:b3:e5:
56:ab:31:51:b1:e9:98:ce:1c:c4:c1:e9:56:d2:6d:7d:63:c6:
e9:db:f4:2d:99:22:e2:32:c6:c7:c0:29:6e:e7:e1:c3:ae:3a:
f0:bf:8e:30:22:ae:a0:9a:a8:3a:29:9b:67:81:f8:25:94:92:
ba:08:2a:48:00:6f:5f:f8:7a:83:af:4e:3e:4a:52:65:02:0d:
af:cd:48:dd:2c:0c:39:44:d7:a6:e9:f0:e9:47:a6:54:72:4a:
46:fc:e0:a7:2c:4d:a7:a5:c1:54:17:e9:99:86:74:e0:ad:09:
20:52:37:cf:f9:53:d0:ab:b4:13:1e:9a:ed:3a:5b:fe:13:a3:
e4:c9:7b:97:e0:25:f4:d0:39:b4:7e:0c:56:f1:91:23:09:05:
df:32:5f:41:19:ce:c4:13:1c:0a:da:77:c3:b8:0a:bd:78:19:
c1:25:5e:07:d4:ec:b6:be:1b:b3:dc:0d:0d:08:46:26:ee:c3:
4f:82:c3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:29 2026 by rpki-client