
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json)
Hash identifier: nOTH6e3e6gq7b2O20j+X887NRE22SoCaEFXgWdLPILo=
Subject key identifier: 0F:5E:63:11:71:41:32:4B:37:8B:F0:3D:22:2F:3F:E4:BB:ED:27:C7
Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Certificate serial: 0F43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
Manifest number: 0F23
Signing time: Thu 16 Apr 2026 17:31:03 +0000
Manifest this update: Thu 16 Apr 2026 17:31:02 +0000
Manifest next update: Thu 23 Apr 2026 17:31:02 +0000
Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: LEpLPSMr3HITT1UeOrXV5m84ogQUud9b4ECq9WgmWv8=)
2: 5C154406988911E991B10838C4F9AE02.roa (hash: tQrQ6Cd+gUF5DxrjyCWytmMItl98qXXXMjLohZ6qa3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3907 (0xf43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Validity
Not Before: Apr 16 17:31:02 2026 GMT
Not After : Apr 23 17:31:02 2026 GMT
Subject: CN=69e11cd7-71ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:36:a0:1d:20:18:7b:78:56:2b:ec:1d:86:
72:1d:da:24:1b:b2:9f:fd:4f:e6:ad:18:37:a7:83:
8a:93:8c:f2:23:f4:2b:a2:ad:63:e4:45:43:5f:66:
e5:f1:49:5d:63:c5:8f:0a:ab:3b:6b:e0:45:e2:31:
0a:07:7f:b2:1c:26:76:53:00:4d:9a:e5:03:74:5d:
ee:5a:fe:18:73:d2:75:32:92:8f:a0:7c:c1:9e:aa:
a3:f2:1f:95:d8:29:cf:de:a9:13:d7:d0:f3:64:fd:
35:d2:85:1f:84:a3:63:b1:fe:05:ba:4a:f5:ac:cd:
6a:58:26:3b:4c:eb:5b:09:2b:97:97:ea:11:ff:21:
c5:1b:39:36:02:47:fe:8b:df:28:6c:75:58:bf:ad:
f5:26:9b:49:b0:21:5f:7c:8b:78:f9:81:52:8f:d7:
e8:5c:41:d0:38:04:0c:b0:43:04:32:31:e4:31:6a:
00:c6:bb:02:c3:04:6c:ed:16:54:0d:91:3c:b2:be:
18:3b:ae:c4:2b:18:54:a4:70:ad:25:d2:25:9d:87:
80:8d:a6:9b:78:90:fa:68:a4:34:92:36:8a:dd:d5:
a8:04:16:42:2f:16:a5:8e:0e:81:f6:08:19:05:42:
31:c4:0f:1d:78:8a:c9:5b:68:69:2a:a0:2d:3a:9d:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5E:63:11:71:41:32:4B:37:8B:F0:3D:22:2F:3F:E4:BB:ED:27:C7
X509v3 Authority Key Identifier:
keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:45:6d:db:8d:93:a9:d9:5e:bf:ec:87:4a:1c:4a:7c:af:2d:
5e:72:fb:77:47:9b:9c:39:d8:fa:b1:52:f8:56:04:a5:27:c8:
f8:c9:20:30:b2:13:1b:0d:a6:72:d3:4f:cc:c8:85:9c:9a:e2:
31:1b:5b:00:9d:f0:32:c3:29:8f:06:37:fd:c7:53:5e:aa:33:
79:8b:07:ae:34:3c:55:81:f7:d0:e9:4c:d4:65:19:83:90:16:
7b:29:41:31:3b:d0:41:1d:1b:52:d6:fb:81:9a:3c:c9:e8:17:
b4:41:f8:ff:fd:b6:71:ee:f9:6f:ee:b5:b3:76:ba:96:c0:96:
6e:97:2a:be:64:65:51:d6:57:b6:10:e1:13:00:bb:c8:86:01:
8a:08:ee:ed:9b:63:b8:5e:c6:42:32:e3:8a:a1:df:a9:96:ab:
92:d7:37:a8:72:0f:77:26:21:64:aa:ea:ec:73:9e:a3:09:d9:
3c:c6:a4:86:aa:26:1a:91:85:15:fc:94:96:51:d6:95:9e:20:
a9:b5:78:3b:be:84:a8:ac:45:c2:2b:e3:b0:94:c8:3b:c7:80:
7f:8b:7e:e4:08:55:e4:fb:f9:9a:1c:e0:cb:e4:30:c4:92:7d:
bc:24:a5:23:42:b8:5a:40:9c:7e:75:46:17:b2:f3:42:1a:a1:
db:8e:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:50 2026 by rpki-client