
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json)
Hash identifier: Y04HVjz2S7vLHNYKg8NngcvoZfUr1o3/AwuwfNKZPFc=
Subject key identifier: 3C:8D:5B:CE:CB:09:33:66:E3:B5:E0:FF:C9:16:3D:5E:23:89:ED:78
Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Certificate serial: 0CF6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
Manifest number: 0CEC
Signing time: Thu 16 Apr 2026 18:09:23 +0000
Manifest this update: Thu 16 Apr 2026 18:09:23 +0000
Manifest next update: Thu 23 Apr 2026 18:09:23 +0000
Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: 1Is03+9cNdfgLL4epbaEg2YMlrjDtnRQ2/1upR7+sKo=)
2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: 5SXsoRZviOsZAGmaYCG+zK9DFm8Eh25q9V/rNn5L4vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Validity
Not Before: Apr 16 18:09:23 2026 GMT
Not After : Apr 23 18:09:23 2026 GMT
Subject: CN=69e125d3-5243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:87:29:14:14:60:57:dc:e3:1c:39:26:0c:
c8:e2:e4:c7:97:6f:f0:3f:83:be:f1:79:d6:1d:cc:
08:e7:31:54:85:1b:2a:93:d2:08:02:c4:76:70:e5:
83:72:d8:a9:6c:ed:29:4b:84:ee:91:a9:6e:e3:9f:
38:e4:37:d4:12:18:49:4a:f6:0a:2f:be:17:dc:91:
f0:4c:27:ce:4c:f7:d2:40:ab:3d:be:6f:26:c8:ee:
dc:66:e9:65:c8:fe:24:fc:14:c4:bc:5b:7b:99:c3:
e1:b4:08:4a:a6:ff:2a:bf:1a:ce:15:76:84:80:58:
0b:79:33:1b:ac:cb:3c:0d:36:1a:cd:3a:06:f3:0b:
2a:e4:92:97:fe:8f:d1:fe:23:df:34:33:dc:a7:35:
ae:3d:e0:07:99:43:a3:e5:3f:c9:4d:77:bb:62:cc:
e8:f9:a0:19:34:f6:f7:c6:69:26:42:11:d8:f0:62:
ac:03:24:89:af:43:cd:12:57:aa:5d:d8:80:86:12:
93:52:9b:ef:91:ea:6e:c9:4d:55:8b:b4:dd:77:fa:
99:1f:dc:4a:5b:80:e2:7b:c4:5f:b2:e6:cb:9a:5d:
9e:01:8f:b5:c6:58:9a:9d:9e:b7:57:8b:ea:50:fd:
18:8e:60:3c:49:ae:b8:c0:1d:69:4e:34:e9:b6:4b:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:5B:CE:CB:09:33:66:E3:B5:E0:FF:C9:16:3D:5E:23:89:ED:78
X509v3 Authority Key Identifier:
keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:42:2f:15:29:08:22:88:14:01:24:50:55:03:c4:97:31:24:
8e:7e:2d:1f:22:e8:2e:87:0d:a5:8b:f1:11:5b:3c:2b:18:5f:
e2:32:b9:55:87:d7:5f:81:36:5b:da:dd:b6:9c:ab:e5:e0:ec:
3c:fc:0a:75:d1:12:f6:3c:01:d6:a1:52:78:02:1a:d0:35:04:
47:6a:ed:d1:c6:da:fb:8a:93:72:ff:08:c9:fe:92:32:a1:58:
ba:1c:06:cb:63:26:c0:4c:f2:d2:c6:fa:64:aa:82:88:12:5f:
22:14:63:e4:12:24:9b:33:ef:f3:55:36:58:52:6b:f0:cd:9a:
72:72:19:a9:fc:1f:c6:cb:43:f2:ad:7c:73:6f:e0:c6:00:5a:
78:8c:1b:39:94:d1:fe:2e:95:62:c9:ca:2e:44:04:9c:ce:83:
ce:ce:21:8b:88:f2:fa:97:9e:7c:d0:a8:ac:ca:f3:09:02:88:
cc:32:cc:d1:d1:3f:0c:0e:75:2b:dc:23:ec:9a:46:63:95:66:
b0:68:d6:b2:90:b4:1f:e6:c1:de:4f:ff:8a:60:37:a0:09:9f:
df:f9:31:2b:49:94:97:25:46:5b:71:4b:3d:94:6c:df:46:20:
d3:93:c2:b8:bc:5e:af:8a:d7:01:b5:df:41:b5:52:7e:1f:cc:
59:9b:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:22 2026 by rpki-client