
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json)
Hash identifier: ulqztajjPkEmzI4lxycv1if0/xZEMT9X7FQzF5yZ378=
Subject key identifier: 44:1D:D9:E5:DF:DB:D7:7D:FD:DC:EF:F5:70:7C:61:57:4C:4F:0C:DE
Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
Manifest number: 0197
Signing time: Fri 17 Apr 2026 04:03:18 +0000
Manifest this update: Fri 17 Apr 2026 04:03:17 +0000
Manifest next update: Fri 24 Apr 2026 04:03:17 +0000
Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: YZUVp68E4Xse0N2tRfRjPPsqggBax+yBV0qXoDOb7nU=)
2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 3wRVfI1zpk+cbpoO3lK5QYCwvSabow1kgGaBDb4LpII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C
Validity
Not Before: Apr 17 04:03:17 2026 GMT
Not After : Apr 24 04:03:17 2026 GMT
Subject: CN=69e1b106-506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:91:39:9b:26:42:1c:1d:98:a6:f3:c4:bf:
fc:a3:24:56:2f:87:3a:4c:0f:a0:f4:d9:7f:1e:94:
aa:71:45:8e:10:f5:fa:16:d7:3e:50:9b:33:e4:fc:
2d:5b:49:eb:e2:9c:4e:31:3a:5d:fa:6d:e9:d9:c6:
f8:ff:ad:68:79:04:cc:be:1b:9f:af:cf:cb:fa:f0:
2b:9f:89:7e:61:12:5e:33:db:34:dc:28:95:8b:82:
ea:f9:5b:cb:ba:2f:e8:1a:f2:e1:e0:7d:81:80:65:
67:f1:55:65:af:0d:1d:d1:02:6a:7d:af:a3:4a:78:
17:b4:8e:36:6c:29:9b:98:33:92:ef:4e:93:e4:96:
c3:3f:61:e1:4b:b9:cb:c4:ee:e7:11:06:4b:88:60:
6f:1b:10:ee:27:b2:bf:29:fe:51:ca:79:f9:ed:14:
b1:1c:32:e1:34:c2:fd:45:53:42:82:b2:10:86:b5:
f6:93:f8:4c:b3:b1:8a:6b:40:08:86:50:61:6c:db:
cc:a4:1d:49:bd:e2:c3:96:de:dc:71:78:24:d5:15:
c0:80:2f:b6:df:ff:f5:02:3b:ea:78:55:e0:b9:1a:
aa:97:58:2f:3e:48:d2:0f:6d:27:da:97:7d:75:8c:
cd:8a:53:2f:df:59:f9:36:6f:83:72:f0:6f:82:7d:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1D:D9:E5:DF:DB:D7:7D:FD:DC:EF:F5:70:7C:61:57:4C:4F:0C:DE
X509v3 Authority Key Identifier:
keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:9f:e4:47:2a:1c:42:cf:7d:14:ea:ca:46:8f:58:f1:4d:3e:
98:00:0c:0b:66:4b:43:f8:37:fc:50:f2:85:d3:e3:d7:77:2f:
ef:20:30:a7:72:b9:88:22:9f:43:e6:9a:67:11:89:b5:c6:9d:
0e:d3:81:99:62:90:ff:28:56:9b:1d:d0:7e:b3:37:13:21:4b:
fa:b1:fc:21:88:9a:a9:4a:0c:82:e4:50:24:ca:c1:19:7a:6b:
e5:c7:9c:f3:a5:4c:43:6e:f2:29:0d:68:a8:dd:d1:22:df:71:
90:ed:35:36:e5:f2:05:12:35:8d:c1:f6:4f:8b:73:31:fb:29:
a8:b6:54:1a:4c:cb:9d:4a:ee:d3:1c:f4:f0:06:9c:43:26:df:
83:1f:94:1e:98:b0:ef:86:f0:6b:5a:82:07:45:5f:6d:6d:22:
4d:d0:a1:f3:ad:7a:b6:45:72:37:9c:38:05:be:49:ff:cf:04:
e1:4e:41:51:43:97:14:25:89:9c:3a:5c:73:4f:aa:3a:f3:50:
f3:1b:99:67:ef:ca:fc:3a:46:b8:18:0a:f7:8e:05:e6:09:03:
e2:07:1a:b4:71:84:83:eb:1d:1c:30:63:b1:14:ea:65:22:f2:
9c:23:17:f2:1b:39:4d:76:d4:64:54:99:4e:e7:af:06:5e:59:
dd:dc:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:55:46 2026 by rpki-client