
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
File: sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft (raw, json)
Hash identifier: RFDSpZivg40ytbpORQYp95Sbdju50g/BYimo4G5R4oc=
Subject key identifier: 2E:6B:4C:4A:A0:0D:73:EE:93:72:AD:05:88:A7:D4:FC:B5:BB:58:12
Authority key identifier: B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5
Certificate issuer: /CN=A91BEA8B/serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
Manifest number: A3
Signing time: Fri 17 Apr 2026 07:03:33 +0000
Manifest this update: Fri 17 Apr 2026 07:03:33 +0000
Manifest next update: Fri 24 Apr 2026 07:03:33 +0000
Files and hashes: 1: sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl (hash: X/uuaXVTU9QgutehgWLdg16n/lCvRBHCQroSaVblkCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl
rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEA8B, serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
Validity
Not Before: Apr 17 07:03:33 2026 GMT
Not After : Apr 24 07:03:33 2026 GMT
Subject: CN=69e1db45-1e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:75:13:7c:ee:e5:12:16:21:83:d1:02:13:
6e:78:d8:dc:41:2c:7c:fe:3d:73:c1:e4:40:99:a0:
d9:2c:3e:be:38:a6:cb:9c:1e:b8:d1:4b:13:9a:69:
3f:b9:ba:8c:22:e7:ff:68:96:44:0c:53:a3:ef:12:
ea:4d:0e:de:1a:23:bc:bd:67:21:6c:8e:5e:24:c6:
d7:ba:67:dc:1a:39:bf:a4:ac:b7:27:ba:6b:c4:ee:
57:a2:ae:d7:79:b8:ab:05:ea:dd:3f:b3:51:34:2b:
9d:b9:50:d0:74:0c:ff:59:03:26:d7:6b:a3:7f:b3:
89:58:b6:74:d5:98:32:3c:56:cc:49:35:03:c7:6a:
ca:6f:f4:32:f1:81:fe:4d:50:5c:5e:91:08:e7:d5:
0b:7d:43:6d:6c:e9:84:79:79:95:d2:3c:8e:dd:52:
00:41:a9:d9:04:a5:5b:6d:46:d2:78:19:b3:69:72:
75:f3:d4:d5:f4:37:35:cd:bb:bb:06:c0:f7:12:04:
8b:b6:93:5d:90:bf:65:90:f7:2e:b9:0b:7c:c8:dc:
21:91:d4:c7:83:c8:64:f1:1a:6a:b7:ea:7f:72:d0:
4a:b9:87:fb:28:15:99:6f:c2:27:c5:84:83:f1:83:
73:4d:56:ba:2e:7d:08:97:00:bb:a8:ec:3d:1f:69:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6B:4C:4A:A0:0D:73:EE:93:72:AD:05:88:A7:D4:FC:B5:BB:58:12
X509v3 Authority Key Identifier:
keyid:B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:82:4f:2e:99:fb:3d:d3:55:3a:4d:47:31:b6:a3:a0:3b:07:
ac:b9:2d:bb:f3:f8:60:e9:72:8d:53:07:85:13:af:b1:eb:5b:
20:21:95:b1:3a:7d:fd:8e:4d:f2:69:e1:e9:f3:c7:1f:95:99:
f6:dd:96:20:5e:e8:8c:79:c3:61:b5:7f:94:bd:59:0d:65:0c:
d8:89:d4:37:19:76:e0:d5:b8:26:c5:c4:c3:b5:7e:5e:68:4d:
5c:e4:73:ee:b4:4c:1c:47:27:aa:81:b5:75:8b:31:c6:fb:cd:
89:f2:c0:57:24:44:a8:32:2a:22:8d:19:5d:cc:82:f9:6c:1f:
a8:86:4f:cc:99:d8:25:a1:c8:fd:1c:7d:31:cd:15:5d:8b:e8:
17:30:e3:02:0a:7e:19:bd:a0:6d:f6:51:da:b6:17:33:be:cb:
05:2c:38:c5:b7:21:a8:e0:b2:19:f6:f9:e1:d4:c5:05:15:da:
70:61:e1:68:dc:5a:70:10:47:83:2b:41:d7:c5:17:8a:eb:61:
6c:b8:65:72:93:d3:f4:90:82:6d:ae:38:e9:75:e6:c1:34:cc:
17:38:2f:6a:bb:54:7b:76:a9:3d:d3:ef:d4:f8:b6:3f:9d:31:
3d:11:f3:25:3e:e8:92:74:b6:e5:71:07:67:ee:db:8b:af:c8:
01:a7:87:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:19 2026 by rpki-client