
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json)
Hash identifier: AJfyQLHktL4qCba+NbimhAuyfojeyMXInJqF98KW2JY=
Subject key identifier: 7C:0C:CC:FB:67:F2:75:06:2A:B3:D2:34:3D:56:26:4C:E7:EB:B6:D3
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial: 075A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
Manifest number: 072C
Signing time: Sat 18 Apr 2026 21:49:27 +0000
Manifest this update: Sat 18 Apr 2026 21:49:27 +0000
Manifest next update: Sat 25 Apr 2026 21:49:27 +0000
Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: zgx+QNdwKU1GcoV+Xf5DlsOvx7kM9CS+rTShds/qW+c=)
2: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: pwRV1whdBhsxXWa6MxJlTQJ85CahQGHwcKN+GErVOaQ=)
3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: Cda0MK+6iqN4L35gscpypsNwXSkKEYBYtWqfzM3ZWbM=)
4: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: PfD47hcSleB3ZAq9rNGI1tL12n1jpNViudKEf9PiOLI=)
5: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: kg6hFTin3KF5BosVDFa9GyEGFCU0WTsvP+kW1lCx0oM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 21:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Validity
Not Before: Apr 18 21:49:27 2026 GMT
Not After : Apr 25 21:49:27 2026 GMT
Subject: CN=69e3fc67-8d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:83:91:06:b2:78:dd:db:2c:bd:8f:cd:8e:
cf:64:8a:7f:92:c0:cf:12:40:4b:3f:52:fa:5d:02:
0d:a2:28:2d:64:8f:0d:2d:f1:24:10:91:81:c0:6d:
cc:60:22:61:8a:23:7a:4e:aa:0a:12:da:48:29:a8:
6b:93:7f:5c:11:85:ee:ca:9c:ac:83:b0:04:05:64:
e3:e9:7e:b1:65:6f:63:5c:d1:22:37:04:6c:49:ca:
2a:2d:4e:e7:67:a8:c6:31:90:ac:f2:ac:4e:4a:82:
da:01:82:60:50:eb:56:d3:3b:b8:15:3e:a8:43:26:
f0:1e:bd:d1:9e:22:c2:c8:37:c8:99:88:93:df:b0:
08:79:18:7f:3b:fa:f9:9c:5f:d3:5b:89:c1:df:58:
c4:e1:9e:49:b7:60:ac:fe:4b:a2:4c:5c:a1:a4:94:
f0:cb:81:67:64:11:16:e0:0e:7d:5a:75:10:22:70:
fd:cd:df:e8:e9:56:9a:3e:a2:28:f1:b5:34:95:62:
85:52:91:d4:7f:20:bc:c3:65:e5:13:5e:12:cb:f4:
28:bd:99:5a:de:1d:e5:24:1b:bc:01:fe:aa:51:a5:
8c:b8:cc:43:c4:1d:43:eb:16:60:38:2d:98:29:4d:
6c:06:db:cc:7a:ba:87:e6:9e:91:29:0b:77:f2:c0:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0C:CC:FB:67:F2:75:06:2A:B3:D2:34:3D:56:26:4C:E7:EB:B6:D3
X509v3 Authority Key Identifier:
keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:92:56:81:15:4a:64:f6:09:75:a4:c8:9a:e4:c0:df:71:8d:
99:fc:8a:d4:c3:40:8b:09:76:d6:ae:1e:70:74:9e:b0:35:4f:
f5:b9:1b:40:68:ec:bc:32:cd:63:90:29:bb:02:7c:be:84:96:
65:ee:4c:19:09:87:f6:2c:49:c9:dc:2d:80:35:09:60:86:ad:
fa:12:56:a5:c1:ed:05:46:68:0c:bd:14:75:fb:a2:63:8e:f8:
9c:b6:9b:03:0d:35:e5:5e:98:a0:e9:fc:5c:b8:0d:40:80:8c:
52:3b:f0:c2:ef:f3:6b:f5:27:11:bd:5f:c5:20:7c:31:a5:a5:
ff:82:14:75:a1:5e:86:00:3b:90:4c:e0:82:e1:7c:dd:1b:b1:
22:0b:f9:4f:a8:1c:1b:ea:d2:ef:18:34:5e:63:d5:63:b0:bb:
ed:a1:df:17:d1:5d:a5:7a:ef:32:d2:10:2c:bb:4f:81:5a:d7:
df:34:05:84:eb:63:7c:c2:06:9b:35:89:05:83:84:18:37:ea:
db:09:12:86:74:88:ac:37:79:44:32:85:b7:ff:9a:34:65:66:
4e:bf:c4:9d:df:4e:a3:bb:fd:21:c9:d6:0a:e3:17:f4:0f:ee:
3f:a5:f7:03:f3:53:d7:c8:c9:c1:8a:46:3e:75:af:9c:5c:6d:
00:b8:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:55 2026 by rpki-client