
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json)
Hash identifier: TMv3dndzWEGZWu3L5D2wSmNG+MwE+BzFaTx01LNai0c=
Subject key identifier: 5A:92:9C:55:04:C6:50:C2:08:0D:4C:00:22:95:13:41:F2:AC:4E:70
Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
Manifest number: 0213
Signing time: Fri 17 Apr 2026 02:41:05 +0000
Manifest this update: Fri 17 Apr 2026 02:41:04 +0000
Manifest next update: Fri 24 Apr 2026 02:41:04 +0000
Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: JizyU8sPq0PDT5CcMvJNBh8qGyCpL7ogvfGdGZ2AEUU=)
2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: IuheNySTJfqKw1oRWfEQ6uKpyOE2XLm2ym5cGUW5YKI=)
3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: gmHCuGwwGdskOl0yDHbyTBMAcXHOfQCNCZcwm8Huj/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC86F, serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B
Validity
Not Before: Apr 17 02:41:04 2026 GMT
Not After : Apr 24 02:41:04 2026 GMT
Subject: CN=69e19dc1-c628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:1a:38:90:2a:cd:da:87:4c:1a:6e:e0:e7:
41:03:3e:27:78:fd:a3:32:5e:c3:d4:d4:91:8d:9c:
a7:9b:bb:62:04:34:98:bc:5e:69:cf:28:7e:79:45:
b4:20:ab:a1:6c:05:0f:8c:8c:c6:4e:a2:fa:d5:f4:
85:6e:30:46:98:bd:09:f8:47:a7:db:b9:08:43:da:
8c:57:b1:0e:3a:7c:66:28:24:c5:6d:dc:34:16:fa:
95:ae:de:c8:11:7a:f2:57:e3:c9:41:d7:44:39:33:
51:de:ef:d6:0b:cd:b3:a6:c9:b4:cf:c6:13:2c:c0:
44:42:a6:88:21:a4:6e:bc:d9:26:cd:cf:6b:b2:1c:
3a:c7:95:4b:f6:b1:af:5c:6b:83:04:66:9a:1f:72:
48:7b:e8:5d:9c:b6:9d:cb:9e:7e:17:09:aa:ab:07:
50:7d:bf:91:13:4b:03:8c:02:d2:05:a9:15:e5:65:
1d:9a:8d:f3:63:e9:49:44:8d:ba:ef:9a:b2:33:3a:
00:b4:0e:76:bf:c5:44:ba:32:4d:cd:a3:76:ad:2a:
34:e2:b4:eb:3a:2b:8b:0b:f4:03:7b:b4:e2:2e:f3:
59:0c:d5:c8:67:e5:ca:86:49:31:c4:58:96:5a:0d:
f9:e7:ba:62:99:62:90:18:20:24:51:3d:e8:ae:12:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:9C:55:04:C6:50:C2:08:0D:4C:00:22:95:13:41:F2:AC:4E:70
X509v3 Authority Key Identifier:
keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:58:c4:12:4d:eb:67:3c:f9:db:9c:0b:9d:5c:de:26:d3:0f:
57:bb:1e:ed:69:b9:21:1e:99:be:91:53:91:e9:7d:fa:bd:17:
6c:55:d2:a1:2e:77:26:6f:51:02:a3:90:42:a9:54:1f:33:c7:
a4:8f:ce:1e:f7:ea:6d:e2:87:44:68:88:e6:14:7b:3b:e7:03:
c3:40:0a:a4:09:02:4c:4a:f5:bd:89:2e:2b:62:13:79:36:aa:
e8:53:70:63:d0:3b:3b:96:f7:9f:b7:10:5e:e1:9c:eb:ff:bc:
eb:81:69:29:09:3b:ae:72:32:51:d2:61:c9:bb:f4:30:62:ca:
83:6d:be:98:e3:f4:44:1d:cf:7d:56:1d:76:32:46:27:54:ee:
43:eb:ce:b8:8b:77:60:57:ad:45:df:ab:9b:89:34:8a:67:f8:
35:3b:c2:69:9b:4b:7f:2c:08:73:ae:80:e6:a8:20:22:63:bc:
30:dd:2c:2e:8b:17:2d:b6:8d:c6:bb:fc:39:a3:ce:75:b3:36:
89:6d:39:2e:b1:b3:c5:a9:d6:cb:3f:21:87:95:63:3b:84:8a:
17:9b:98:69:1f:70:4b:e8:06:53:0d:78:a5:33:a8:81:0a:3e:
a1:df:b6:1d:dd:54:35:1f:8e:92:dd:13:2f:73:29:1a:96:8a:
41:e4:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:24 2026 by rpki-client