
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json)
Hash identifier: QDm2MPypWyjukXCdWBqLKVImYtH0j1y6tOK5d0iFraQ=
Subject key identifier: 38:A3:EC:43:31:E7:C9:15:A5:65:8B:7D:D6:FC:96:CF:77:33:30:14
Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Certificate serial: AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
Manifest number: AD
Signing time: Fri 17 Apr 2026 06:50:27 +0000
Manifest this update: Fri 17 Apr 2026 06:50:26 +0000
Manifest next update: Fri 24 Apr 2026 06:50:26 +0000
Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: 6vic5F3YcKt8TkSoVfii7IActIqp71WnI/MiKJmZStc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Validity
Not Before: Apr 17 06:50:26 2026 GMT
Not After : Apr 24 06:50:26 2026 GMT
Subject: CN=69e1d833-af11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:bd:d2:57:d2:c1:70:18:8b:96:de:b8:ac:
99:52:70:aa:9d:2b:d1:6e:0b:b9:27:8c:68:66:06:
c6:3b:4c:8b:c1:30:b2:ac:b5:b2:7a:e4:2a:82:a6:
a9:57:b1:94:38:86:89:23:e3:7c:5e:10:21:8d:34:
0a:6b:22:a6:1e:3f:ce:96:1f:d9:00:c4:f5:5a:82:
c7:35:8d:6a:52:d7:49:23:ff:5a:04:e8:53:9a:f8:
40:ab:1f:7a:37:5c:dc:99:bf:a8:d8:55:a0:44:7b:
68:92:f2:9b:0d:cc:66:33:85:2c:ab:08:97:35:b4:
a8:df:35:7b:2e:ed:27:de:4e:9f:80:fe:00:1e:05:
83:86:b9:76:b9:c1:eb:de:71:de:f4:4f:ae:a2:6d:
d5:4b:5a:03:a3:f7:be:16:d7:41:f8:9a:7c:b9:03:
f9:88:44:b9:4b:10:21:4f:92:a1:72:4b:3e:54:04:
f3:ec:cf:29:96:5b:06:eb:ba:b5:8e:f2:0c:65:1a:
43:20:ef:c5:92:70:1b:4e:11:c6:45:6d:ce:01:b2:
d8:91:24:9f:81:ab:5e:de:e2:4d:1b:7b:de:c9:a4:
f2:60:c5:2e:a3:fc:4a:69:b8:75:fb:62:fc:38:ae:
77:fd:82:3f:02:2c:1f:20:3e:77:8e:9d:f7:46:8b:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A3:EC:43:31:E7:C9:15:A5:65:8B:7D:D6:FC:96:CF:77:33:30:14
X509v3 Authority Key Identifier:
keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:2f:c3:fd:fa:67:e1:4f:dc:cb:80:73:fb:f0:83:1d:f3:37:
f8:6b:5e:df:31:13:71:0c:e4:98:04:61:c5:a8:f7:77:cc:ef:
b7:cf:1e:d9:16:4e:12:2e:41:c2:b4:21:70:a7:63:66:f9:7c:
03:0a:0d:3e:b6:7a:32:36:85:5d:81:d8:36:6b:aa:b2:2a:d9:
9b:24:b5:6c:47:43:d7:73:e6:a2:41:13:44:2b:be:fa:c0:8a:
cf:1f:c8:71:48:f4:d3:1f:ee:36:3e:61:0b:b6:d0:e6:d0:be:
bc:a0:70:a5:ac:53:21:05:db:d6:0d:72:60:9d:76:ce:c6:7f:
7c:5f:7f:9b:da:1e:12:86:0e:02:57:06:56:ef:54:7d:74:f0:
f9:d4:16:a4:43:9e:56:2e:2f:62:cb:35:34:54:c1:c9:bd:a5:
68:28:e9:7f:a5:b1:08:18:11:f6:e5:c4:be:13:17:e6:d2:a2:
0e:38:5b:4d:e8:93:9b:bd:37:b5:6d:82:cb:47:c5:f3:55:99:
a7:a8:da:94:cb:c5:3c:e9:32:a8:f9:7c:c0:11:95:36:dc:50:
ab:e1:2d:f6:af:d6:13:c6:12:4f:96:01:15:55:28:e2:f8:73:
c7:bc:78:fa:9a:06:db:31:07:b4:c1:a4:cf:57:3f:a3:de:b9:
a9:a4:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:25 2026 by rpki-client