
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File: m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier: OP+gC0fzNZtNBMCHWJ+Fu4Wm6pWFBKUP8QB3fYB4n3M=
Subject key identifier: 35:C4:94:A3:BC:83:49:47:CD:D5:B7:44:CC:A0:2F:C8:88:03:74:F9
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number: 0BA2
Signing time: Thu 16 Apr 2026 19:58:02 +0000
Manifest this update: Thu 16 Apr 2026 19:58:02 +0000
Manifest next update: Thu 23 Apr 2026 19:58:02 +0000
Files and hashes: 1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: EYTVK5p7Ij+FpqSwyjJCzEsy2VZqD3RwUlTBZGopTTw=)
2: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: O5VX5p+22vMD3sqEB7suLw7mcxw1FAJJlGIyd6isaQY=)
3: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: 9QN47A/xiyVIjZhqkG9Ma9dyQH6r8QDrfXfIFF2/lM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Validity
Not Before: Apr 16 19:58:02 2026 GMT
Not After : Apr 23 19:58:02 2026 GMT
Subject: CN=69e13f4a-c072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:2a:08:8c:62:c3:86:8c:0a:b9:e2:af:45:
11:54:f2:91:99:95:88:c1:6b:41:55:d3:12:df:0a:
98:d5:76:47:ed:0b:4a:5a:07:c7:60:17:1c:d8:ba:
57:e4:3f:0d:89:d4:ba:4e:39:85:2c:90:31:90:af:
62:2d:49:73:7a:28:88:f9:89:be:e0:66:c6:26:6a:
87:59:ad:06:e3:7f:dc:b6:0d:d9:b3:83:fb:24:47:
26:d0:dc:5d:cd:ae:7a:98:cb:e5:38:bb:77:cc:09:
40:3b:f8:49:49:99:c7:25:0a:14:37:fd:11:96:50:
e7:05:81:ef:84:dc:27:14:6a:c3:a3:42:d6:b8:04:
c2:04:96:33:b9:e8:14:1c:14:ac:fc:07:2d:09:d7:
03:57:59:87:fc:f9:4b:ba:48:36:9e:74:80:54:81:
fa:92:ab:47:3a:e7:60:8a:d5:5a:15:b0:db:8d:68:
e5:15:dc:4a:d4:00:25:92:9c:ac:15:fd:a8:8f:4b:
aa:1f:59:49:49:4b:02:85:55:09:10:94:ad:b6:98:
35:64:80:20:bc:1c:07:7f:34:96:d1:a6:af:f1:27:
54:87:c3:bc:bf:62:6d:fc:53:d6:ae:10:d5:36:67:
a6:01:bd:0c:1e:f4:87:ba:f6:b8:1d:b2:40:92:7a:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:94:A3:BC:83:49:47:CD:D5:B7:44:CC:A0:2F:C8:88:03:74:F9
X509v3 Authority Key Identifier:
keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:4e:4d:31:c9:39:97:bf:20:e4:ad:88:3e:20:36:ac:7c:cc:
70:21:54:94:b4:2a:1d:de:db:68:14:f9:c1:b4:79:8f:02:83:
02:55:c3:e2:c7:05:8a:c6:ba:01:38:38:a6:ae:f3:3b:44:81:
3a:64:03:c7:fb:5a:46:d5:d7:97:00:c2:b4:61:3d:48:f9:35:
6f:92:5f:1e:c1:c2:fb:74:f0:7a:6f:9c:aa:24:5f:c0:ea:08:
d4:8d:80:9f:c1:c4:79:5e:ee:4a:49:72:b2:b6:cb:b7:15:b2:
fd:41:c5:f7:3a:2c:39:d2:c3:38:74:6f:fa:b0:ed:0a:5f:c5:
eb:35:08:6e:d9:03:be:26:c3:47:5a:4b:26:e9:d6:2b:47:f5:
34:a2:aa:7c:eb:5b:db:16:3b:09:f3:87:da:89:f4:e3:9a:9d:
02:c2:2a:81:f6:ac:e6:22:22:e4:64:ae:aa:d9:b0:4b:5d:06:
97:b7:a8:7d:8e:df:d5:4f:53:92:00:df:21:60:07:97:07:c5:
de:a8:71:6c:d8:26:f8:f2:d9:41:66:58:8c:db:56:74:7f:4f:
74:31:f1:49:79:1f:a2:c1:b1:67:5c:f6:28:62:ba:75:e6:ed:
a3:ee:5d:71:5b:fb:e3:c9:cf:88:4f:64:a2:91:94:04:04:6c:
59:ec:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:55 2026 by rpki-client