
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json)
Hash identifier: YBSra8DFePIBUVGzIA8mRptQav0Vv+XK8g7O4Qs8pAo=
Subject key identifier: EE:D3:6A:52:AE:09:6C:C3:13:44:E5:34:27:EE:8A:21:75:9F:01:F0
Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Certificate serial: 19F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
Manifest number: 19EA
Signing time: Thu 16 Apr 2026 16:18:53 +0000
Manifest this update: Thu 16 Apr 2026 16:18:52 +0000
Manifest next update: Thu 23 Apr 2026 16:18:52 +0000
Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: mGFRIgyd9PJSgVVtWkZ4JSdUmVXS6wBAR4WSgNwseHo=)
2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: DCBXdQ3TUOdDXYDH2IWIye/rRhJnHFBuWi5K22qghWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl
rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6649 (0x19f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Validity
Not Before: Apr 16 16:18:52 2026 GMT
Not After : Apr 23 16:18:52 2026 GMT
Subject: CN=69e10bed-0792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:d6:4b:98:e0:50:4b:56:ee:08:57:26:1d:
db:38:91:6b:f0:7c:8f:1e:45:91:e8:e1:d7:e5:aa:
7c:e4:31:97:d5:bb:49:5a:00:b3:28:77:91:95:68:
18:20:d1:f3:2a:cc:a1:bc:77:90:f2:6f:0e:08:74:
05:08:de:d6:68:f2:fc:e4:9f:f7:97:b8:7d:03:3e:
20:7d:cf:10:d3:a7:13:6c:a2:f0:a9:9c:ee:d7:a0:
bf:85:5a:41:40:b7:77:56:f7:88:a4:c5:aa:c4:5d:
4f:82:7b:35:a4:06:29:f3:33:6f:82:30:54:05:78:
b9:e0:e0:d2:9b:40:7b:be:2f:20:11:b9:1f:9b:a5:
7e:cd:fe:ca:21:71:1d:06:e8:18:b7:d5:06:39:91:
d3:8e:45:3b:90:f7:77:65:96:75:f7:94:04:45:03:
3f:d8:91:19:60:f3:14:51:1f:cd:01:a1:fa:67:22:
c1:0e:f0:fd:1b:98:a1:ed:db:b7:ca:b1:e9:0c:b0:
67:3c:2c:be:66:59:ad:5b:e0:d3:5a:00:ef:67:6f:
31:e4:4b:44:7d:86:09:65:fb:3a:e6:58:7e:c0:29:
bb:f5:77:63:16:e5:3e:66:5b:ac:73:35:33:dd:e8:
a3:c5:ed:1f:5e:00:d4:db:d5:16:58:ff:c8:95:1a:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:6A:52:AE:09:6C:C3:13:44:E5:34:27:EE:8A:21:75:9F:01:F0
X509v3 Authority Key Identifier:
keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0a:28:d9:f3:50:b8:b8:d2:73:d3:a6:4c:33:44:54:5f:6a:
ea:a0:9e:57:20:57:07:19:6f:f8:75:45:97:ec:48:4f:97:a7:
4b:1f:1d:8c:2a:bc:a7:dd:be:3f:cb:25:68:d3:61:7c:d8:d3:
ea:bd:f9:83:ea:50:17:39:d4:7b:e4:da:b4:7e:84:03:8c:86:
b7:63:4c:ac:c1:9b:43:ab:f2:fb:48:05:f8:7b:a5:d6:01:ad:
5a:c8:5b:c6:39:f3:51:20:66:d9:84:3b:e4:ef:1b:0f:ea:95:
d5:9c:5d:7a:d8:08:a0:bf:2c:3d:f4:3e:00:8e:95:6c:64:b9:
a4:65:25:cd:e9:3a:35:17:a5:34:c5:6f:93:88:49:f6:99:90:
92:76:a0:65:b6:3f:db:e3:5d:24:b2:32:e8:a7:e2:8f:c7:c7:
4d:b1:c3:cb:fd:25:4a:0f:55:74:7f:89:b3:b2:51:35:2e:49:
80:27:a6:2c:66:e5:66:ab:b7:fd:e6:9b:b5:61:3e:ac:fe:29:
e3:f6:07:00:71:6c:ba:4a:1d:7a:a8:1b:8d:a1:5d:77:f7:de:
c2:d3:82:cd:94:da:e5:fd:d9:f2:18:f3:07:52:72:85:b9:da:
9e:fd:28:59:c4:62:2d:eb:51:bb:43:61:94:70:5b:91:3c:06:
22:45:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:02:50 2026 by rpki-client