
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
File: C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json)
Hash identifier: 01Y/9S4n5OlH/qDm5CBjP2MBfHBnt8noTP1S7tRUcaw=
Subject key identifier: 12:49:32:09:CC:98:F0:86:9A:8B:7A:6B:CE:D9:78:EF:99:D9:6F:8E
Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
Certificate issuer: /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Certificate serial: 0585
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
Manifest number: 057C
Signing time: Thu 16 Apr 2026 23:11:49 +0000
Manifest this update: Thu 16 Apr 2026 23:11:49 +0000
Manifest next update: Thu 23 Apr 2026 23:11:49 +0000
Files and hashes: 1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: nVw6f1Bdoou0GwBRK+ty2kjT69PlCWdQGVwd8S5n4/A=)
2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: 1OTKEgqlZnaKGpmz6oNBNrSZubeFhZS/c5pM2HU9abQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Validity
Not Before: Apr 16 23:11:49 2026 GMT
Not After : Apr 23 23:11:49 2026 GMT
Subject: CN=69e16cb5-0a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:d1:27:63:a2:80:54:ad:47:9e:72:83:8b:
fd:5b:e2:63:16:e3:af:8e:2a:48:b4:5e:cc:97:17:
e3:c0:56:16:50:9e:4f:55:57:33:98:05:2d:b8:9d:
58:ad:f5:b4:77:ea:23:e8:51:ca:ef:e8:26:e3:f1:
da:b8:a1:8f:8a:dc:0f:f0:95:a8:5e:31:01:69:e1:
2e:01:a8:da:c2:e2:34:dd:84:ad:7f:7b:ce:16:dd:
80:ac:2c:47:8b:bc:ca:ca:ad:1a:5e:d2:24:aa:de:
05:31:65:2f:1d:e0:16:d7:ff:5e:2e:95:49:82:4b:
68:f8:08:49:77:1f:07:b5:80:2d:6a:e9:98:84:fe:
40:80:74:cd:7a:1b:74:c2:36:a9:fc:32:7b:b4:e1:
ca:30:23:4e:38:7f:a7:bd:81:d9:ce:b1:46:ef:69:
00:75:1d:64:e0:2e:a6:8a:e7:92:aa:8b:2c:8c:12:
9d:ae:d9:57:28:f6:32:67:4a:e7:f9:ae:20:64:86:
4c:26:3e:95:3d:5d:a6:a3:67:df:30:8f:3c:e4:27:
0d:ba:0e:f1:9c:45:35:f6:03:16:fa:94:ab:41:aa:
96:f9:7c:21:39:20:ec:c6:6b:85:96:34:92:af:54:
55:2d:42:ae:e3:b8:26:4c:ec:97:b9:16:d5:46:7e:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:32:09:CC:98:F0:86:9A:8B:7A:6B:CE:D9:78:EF:99:D9:6F:8E
X509v3 Authority Key Identifier:
keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c7:19:92:5b:eb:80:11:75:72:84:55:4c:00:3e:56:e2:e6:
17:98:e8:fa:ad:f6:d2:e3:43:1f:29:88:4a:7f:1a:8b:d9:30:
39:09:e4:97:66:00:df:80:5a:c7:95:4c:ef:c4:dd:5c:cb:88:
f7:80:a1:8f:4d:5f:84:71:9f:91:0f:a4:1b:66:7d:38:65:b8:
f0:6a:1e:b8:2f:8d:99:ec:97:59:82:3f:1a:fd:6e:b7:e0:e9:
30:d1:cb:b5:3a:b9:76:7b:cd:c4:65:63:96:b4:67:d5:da:06:
74:4e:50:5e:0d:d4:fa:ba:f6:a0:db:2e:f4:0f:09:88:af:6c:
f4:88:13:4f:f8:0d:6b:c6:96:59:29:39:47:6b:c0:c0:05:83:
8c:25:46:02:7c:6c:52:e7:c5:2c:50:11:3f:a6:44:fa:2c:fa:
b2:22:59:0b:c2:9c:d0:23:a1:34:a2:34:6d:81:54:31:f5:59:
49:68:b8:42:e4:88:72:7c:10:e4:2e:2e:77:40:0a:b0:ee:11:
b4:68:ba:97:7d:0a:fb:67:63:bd:ba:aa:cf:34:18:bb:4b:90:
8c:a5:f6:f5:17:6d:22:e3:3b:9c:79:84:b0:fd:ac:05:b9:3d:
f7:af:bc:3a:3b:a5:02:64:a4:b9:9e:27:cd:72:49:88:54:87:
46:3a:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:38 2026 by rpki-client