
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier: AHBI/D6zJJuWO5CMI6nqJ+ZkQr19ezHyw2Yf9kj+G2w=
Subject key identifier: 07:B2:18:3F:9F:52:CA:91:54:8A:CC:28:86:2A:01:E4:7D:48:9D:ED
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial: 027A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number: 0269
Signing time: Fri 17 Apr 2026 02:00:51 +0000
Manifest this update: Fri 17 Apr 2026 02:00:50 +0000
Manifest next update: Fri 24 Apr 2026 02:00:50 +0000
Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: 0158c0eLDLbC//RWdsJWyKvujdr5i6PXnO9Q4kZ6/Mw=)
2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634 (0x27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Validity
Not Before: Apr 17 02:00:50 2026 GMT
Not After : Apr 24 02:00:50 2026 GMT
Subject: CN=69e19453-8067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:90:f3:6b:b0:48:2f:7c:30:da:b5:48:b9:
cb:5f:30:54:42:73:b4:a4:d2:07:fc:6d:15:3e:9d:
a8:de:66:58:d5:e6:03:1e:94:71:3d:3e:8d:4f:f7:
14:62:b2:ef:09:81:bc:b3:70:ba:b0:9b:93:63:26:
2f:eb:b3:e4:69:14:72:29:88:58:b3:74:71:34:8c:
62:d4:df:19:c6:94:08:3d:9e:91:e7:da:87:48:e5:
58:74:11:cd:7b:b6:4e:6b:09:47:a5:03:ef:61:66:
23:77:e5:6f:e9:13:3a:1d:9a:52:32:0c:2a:c9:9a:
4d:1b:fe:bd:fa:71:28:f6:48:45:cc:ec:07:66:bc:
5d:d5:f2:f3:f7:74:75:74:9c:26:29:d4:5c:08:48:
c3:89:5d:ca:b3:2d:6c:a0:43:a2:36:b3:de:e5:8d:
81:0b:1d:a1:33:b2:d1:99:42:0f:01:42:ed:07:45:
03:10:1d:69:0d:ed:fd:54:17:7b:5f:6d:ec:5e:34:
10:24:e9:8e:88:6d:6e:57:55:dd:1d:c7:fa:b2:57:
d9:c6:35:72:33:19:1f:67:11:8d:36:40:be:fa:90:
13:4a:19:0b:61:5c:1a:f6:e5:5f:72:75:20:85:04:
a8:a7:d9:50:bf:d0:02:b6:be:5b:de:6e:e9:c5:65:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B2:18:3F:9F:52:CA:91:54:8A:CC:28:86:2A:01:E4:7D:48:9D:ED
X509v3 Authority Key Identifier:
keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:ec:02:e2:59:ba:4d:d0:1a:d4:b2:e9:c9:c9:ee:6b:5c:54:
50:52:8a:02:2e:10:88:da:ca:85:12:d5:ae:2d:5a:96:43:ae:
04:70:42:0f:d8:27:17:96:53:87:f9:00:03:3f:30:71:41:bc:
48:00:6f:10:09:ad:eb:90:db:d4:5c:5f:43:f4:b6:7c:6c:48:
77:a7:17:70:dc:3a:f9:f4:56:b4:8f:8d:59:f6:7b:5f:24:34:
c4:5d:24:96:dc:76:ab:41:60:1a:7c:09:c2:f6:d3:0d:3f:77:
9c:33:ce:09:25:4c:e1:e6:73:d1:14:c0:b2:c7:f5:e7:1e:ec:
3a:85:91:0e:ae:06:94:29:65:79:98:0e:09:a4:8e:17:d7:45:
19:96:6d:29:a0:5d:50:48:d8:dd:17:e3:9c:e5:2e:4f:33:cf:
46:ed:0c:0d:17:bd:10:1d:2f:88:70:7e:2b:af:f0:1e:88:10:
4e:62:ad:1f:a9:69:c2:ee:62:3d:c5:39:a9:d3:24:68:9b:9d:
77:c6:51:fe:d5:3c:f0:92:df:bb:d4:bc:f4:18:51:8d:f7:83:
a6:e3:fa:c9:51:86:81:6b:57:c8:0c:20:ba:95:32:d1:a4:60:
33:15:ee:2f:17:b7:86:01:11:e8:8e:2e:ce:45:e8:0f:ba:dc:
fc:f5:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:53 2026 by rpki-client