
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json)
Hash identifier: 2Hq2jW2mmYTyICjdTEbkkZgGBc3w2riYGjMHNDhRGF8=
Subject key identifier: 8B:68:98:D5:CD:2E:6B:10:DC:22:64:41:08:93:12:88:8B:13:C2:92
Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
Manifest number: 0278
Signing time: Fri 17 Apr 2026 01:44:52 +0000
Manifest this update: Fri 17 Apr 2026 01:44:51 +0000
Manifest next update: Fri 24 Apr 2026 01:44:51 +0000
Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: oanga0h1gTyGStXPE0c0iHxg1O7PghflWoV0Y5UQAQs=)
2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: P5W/HtK4kYY99pZQGqCLFlxhulp8kHcGK4SUQtwdoQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Validity
Not Before: Apr 17 01:44:51 2026 GMT
Not After : Apr 24 01:44:51 2026 GMT
Subject: CN=69e19093-bcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:39:d4:17:c3:43:67:f3:e2:56:59:21:42:
9f:3d:ad:76:c1:ed:28:5b:e2:d4:a5:d1:fe:75:0d:
01:78:d2:82:43:b7:81:27:23:d4:26:d5:7d:15:a3:
f6:6f:dc:d2:ae:3c:2b:59:72:b2:49:93:ee:c7:9f:
c4:5a:00:99:28:23:42:c1:6e:eb:52:89:5c:3c:ba:
02:1c:a0:9a:b6:d7:13:dc:75:03:26:e5:c8:6a:4e:
7e:85:25:03:2a:31:66:c6:9a:bb:12:ad:6b:cc:d7:
cd:7e:4c:d9:9d:f0:c5:70:5e:cf:51:be:79:bf:8e:
92:8a:7e:aa:fd:ad:45:f8:25:66:33:f7:a1:68:0e:
e8:66:98:3d:a1:c0:a3:3b:ae:3f:3c:50:5a:e3:f1:
4a:a7:d7:ae:c8:61:1a:05:04:bb:2b:bd:7e:20:cb:
10:e2:d0:e3:ba:e3:f0:0d:60:49:27:ab:86:9a:15:
41:3f:26:3a:4f:31:3d:89:6f:93:cf:50:72:7f:89:
8b:ee:a4:fd:57:e9:6f:26:af:3b:66:d0:eb:6d:8a:
85:95:a1:de:34:70:8c:5e:eb:81:18:24:4d:b4:02:
0d:6f:24:52:6b:2e:1b:e7:d2:6c:79:0d:e8:f3:33:
47:95:85:86:54:18:5e:c2:56:8d:df:b8:53:7d:8b:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:98:D5:CD:2E:6B:10:DC:22:64:41:08:93:12:88:8B:13:C2:92
X509v3 Authority Key Identifier:
keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:78:00:7c:f5:fa:f4:48:95:f5:41:91:d3:b4:36:2c:e9:18:
0d:53:cc:91:c9:3c:9e:b5:64:13:13:83:b1:89:09:d0:c3:38:
a5:59:06:61:61:e9:c4:9d:ae:96:f4:5c:8b:92:28:02:ba:21:
9a:ea:fe:6c:11:23:8a:08:19:77:ea:9a:08:35:9b:d8:57:42:
1d:0f:af:00:d6:f4:87:82:7e:66:f9:bd:9b:6a:ab:38:18:87:
70:47:c3:54:89:ea:30:58:ec:96:da:80:5c:b6:b8:68:86:50:
66:b2:8b:eb:0f:91:36:12:71:6d:68:16:70:61:43:d6:78:1d:
79:64:c2:cb:ea:3c:74:9a:94:ba:97:4a:c3:ea:e7:df:03:48:
2c:ab:93:91:ca:1f:09:54:bf:bc:30:89:8a:cf:c4:a4:df:be:
0c:65:ea:f1:bb:c5:14:55:62:80:5a:61:9d:dd:6d:e1:9f:e9:
15:54:6e:eb:95:9f:ad:7a:9a:56:47:44:22:0d:43:e2:a1:6a:
ee:5c:52:b8:e8:04:78:b3:d8:ff:54:a4:55:83:f1:45:eb:2b:
a2:6f:1e:fb:94:04:2b:05:c5:7d:3b:86:d5:0b:0d:8e:c6:96:
db:34:35:e7:1b:7d:38:6b:0e:c1:dd:eb:cc:70:6e:e5:ce:a5:
e8:7a:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:52 2026 by rpki-client