
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json)
Hash identifier: SwRBNQkagSv4XOBoTnOGW5irnv0xbv0NAZDN0KqTNYU=
Subject key identifier: 4E:64:95:77:8E:AF:26:03:FC:10:C1:4B:66:D9:33:1A:EA:62:C8:51
Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92
Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792
Certificate serial: 356E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
Manifest number: 3551
Signing time: Thu 16 Apr 2026 14:46:56 +0000
Manifest this update: Thu 16 Apr 2026 14:46:56 +0000
Manifest next update: Thu 23 Apr 2026 14:46:56 +0000
Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: eMyfoI9yKDJhrqYi5SjnmtCbzFTbl7zLyYosHrYBQbg=)
2: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: INnaV0pNcRBw1wlHuRp8r9xMtrJx1g7hzwjOKtk2crw=)
3: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: u0liUKUx/5cqgAqMwjK3Jr9++ba1PKf6CQYNnuhwu/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl
rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:46:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13678 (0x356e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792
Validity
Not Before: Apr 16 14:46:56 2026 GMT
Not After : Apr 23 14:46:56 2026 GMT
Subject: CN=69e0f660-b597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fa:70:04:ae:20:5b:a5:c5:91:da:37:f0:0d:
b5:22:4d:68:29:a5:01:c8:ea:8a:2b:f1:a5:a5:34:
1e:0b:a5:b0:20:f8:18:a5:9a:06:e2:9a:97:f6:31:
bf:2a:25:07:43:73:4b:a1:f9:87:b0:84:56:c7:1c:
7e:78:af:c1:11:e6:7e:d4:09:5e:7d:e4:73:b4:4e:
ed:38:6a:4e:77:eb:e0:83:c4:30:65:e9:e6:5b:9a:
f0:1b:78:85:37:51:bd:60:c9:40:05:06:a8:1f:f8:
e9:26:57:cd:e8:30:89:1b:39:62:83:02:0d:95:a9:
b1:b1:eb:49:bd:b4:8a:51:5c:35:34:15:32:1a:c3:
25:1c:29:d2:a4:d2:36:5d:95:56:86:52:b3:ad:37:
c2:d2:a9:c4:63:6f:5a:22:a5:f1:6b:60:9c:ba:ba:
9c:a6:da:bd:27:ab:a1:ed:ad:f5:65:8f:36:15:a2:
95:8a:c8:b7:c7:1a:f7:8a:b4:fb:ff:60:20:45:49:
d1:e8:52:ac:65:0a:c6:bb:73:b1:1a:99:5f:ea:3e:
b1:00:50:b2:64:83:e6:f6:02:f6:01:d0:d5:27:7a:
08:1f:27:24:f1:ce:78:42:c6:cf:0a:af:db:ad:26:
51:1c:5a:d4:ca:2c:8e:84:35:04:b9:22:de:60:b3:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:95:77:8E:AF:26:03:FC:10:C1:4B:66:D9:33:1A:EA:62:C8:51
X509v3 Authority Key Identifier:
keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6f:9d:03:c1:0f:83:7a:f7:ef:8f:a7:cc:b9:9c:c0:93:73:
da:93:85:7d:ed:aa:11:0d:d4:07:cd:f5:de:d3:01:a5:c0:6c:
57:a0:c4:9c:7e:b2:d4:23:74:88:35:a8:12:25:0a:db:4a:e9:
61:fb:10:ba:b0:6e:9f:09:76:6b:ed:4b:fc:53:9f:c6:73:19:
b4:42:8a:2d:0a:78:c4:b7:5c:3d:fd:7f:2f:bc:3f:f5:d4:3c:
38:2b:8c:4d:7c:38:c9:df:54:53:f9:a4:ea:94:9a:60:8d:d3:
9a:9b:fd:0a:20:aa:c2:46:7e:d4:12:69:04:c9:f8:d7:3f:c2:
f1:6d:90:cc:4f:f5:be:8c:a8:ca:4f:ae:15:3d:df:c1:57:9e:
3d:cb:94:9a:29:68:88:0a:ec:83:d7:dc:d8:ec:87:e6:50:8f:
3f:5f:1b:97:cc:0e:38:37:36:02:ea:aa:2e:97:ee:0f:ad:52:
e7:b6:d8:ff:de:07:32:6f:36:99:bf:1b:fb:a0:5b:52:be:3a:
29:e7:35:ec:8e:a8:f6:c6:38:38:1e:d1:7e:c0:2d:fe:3d:54:
1a:e3:31:c5:19:8e:5a:b6:3e:35:77:02:35:13:23:5e:c9:ce:
42:84:3b:62:fa:2d:06:62:34:63:7b:45:30:ab:91:a2:33:33:
e7:c2:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:32 2026 by rpki-client