
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier: amKXES8/yqEg4MvJedwpIqIHcz+nL73nyLuV6uhd28c=
Subject key identifier: D9:39:AC:FA:63:74:75:98:A8:4B:2C:93:FA:03:EC:D8:C5:BB:E3:70
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial: 0DFA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number: 0D93
Signing time: Thu 16 Apr 2026 18:01:13 +0000
Manifest this update: Thu 16 Apr 2026 18:01:13 +0000
Manifest next update: Thu 23 Apr 2026 18:01:13 +0000
Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: kJ0LVoLp41Kr5JYJ9ushGtVV0ANY0CN6vditxgu46/o=)
2: C97A1A3EB41C11F0AFF91911C4F9AE02.roa (hash: nJl/9CFmVp29B4Ix10HGbDmYMJPOnZIRDaogeFvZyK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3578 (0xdfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Validity
Not Before: Apr 16 18:01:13 2026 GMT
Not After : Apr 23 18:01:13 2026 GMT
Subject: CN=69e123e9-bd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:e2:86:e1:ed:74:0e:ea:d7:4d:85:3a:04:
f8:78:b5:05:ed:9f:0b:31:bb:69:b1:8d:c8:67:c8:
9e:4d:72:92:16:e9:00:17:77:67:69:cf:69:c8:2a:
9a:6d:5f:cc:26:c4:6d:3a:b0:42:2c:77:e2:96:95:
47:ec:a8:a2:f3:f0:07:4d:91:ed:55:24:dc:8d:de:
a9:14:c5:1f:35:c6:5b:b2:7b:c8:f5:79:19:9a:56:
ba:ca:e5:1d:28:e6:77:dc:ac:1b:6a:8c:aa:07:b9:
cd:69:c3:78:53:fc:f2:ff:8e:64:c2:a9:7a:87:e7:
ec:59:48:c7:aa:0a:8d:ce:57:2e:e6:70:35:06:03:
9f:37:74:9e:f0:b4:fd:30:22:8c:11:d1:ce:a2:32:
a7:47:c7:7d:cb:f9:92:8a:f2:39:bc:4e:29:95:7a:
fc:7a:66:64:07:48:5d:e5:89:ed:51:53:4e:4f:56:
13:c5:70:c0:9e:2a:26:fe:24:4b:a6:91:26:b9:59:
c2:73:d4:cb:b1:70:d7:c8:47:07:ca:e2:6b:f0:05:
c3:80:54:b1:87:b1:6b:59:29:4d:58:9f:12:94:d0:
4e:29:2d:21:d7:da:88:aa:56:32:33:47:a0:ab:4e:
27:93:97:94:c6:d3:1d:e2:ef:d9:68:23:ff:45:c1:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:AC:FA:63:74:75:98:A8:4B:2C:93:FA:03:EC:D8:C5:BB:E3:70
X509v3 Authority Key Identifier:
keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:3c:bf:48:8e:ad:85:2a:71:1c:5f:d7:fd:7b:8d:0d:d1:10:
38:14:fc:a8:79:83:a9:13:01:52:b8:1f:4b:f2:be:80:c6:0f:
1f:09:9e:cd:78:db:92:83:3c:65:5a:c8:15:a9:18:b9:97:1f:
12:db:7e:24:e0:86:64:a7:73:07:5b:fc:a9:fe:e4:05:9b:c1:
1a:04:ba:a2:bf:7c:0e:ed:7b:7d:15:93:66:98:09:0b:ea:e5:
f7:cf:2b:6e:e4:69:87:9c:f9:d5:7b:20:50:86:a4:e9:6e:45:
f1:cc:51:2a:c0:23:9f:f0:fb:47:9c:0a:da:e2:60:94:d4:a5:
65:50:55:87:1a:66:1e:93:f9:9c:55:c5:7a:98:1d:02:6c:51:
5d:6a:7b:56:d8:e7:b6:a2:64:b6:af:ec:8d:c4:e6:a3:53:d7:
99:28:03:e3:b7:7b:d4:37:2f:d9:aa:2c:44:bc:c8:ae:be:7a:
85:45:49:f6:2d:62:2f:a4:e2:8b:54:31:5c:5d:1d:d2:05:ad:
d9:54:56:5f:74:94:be:2c:2c:c1:3d:3d:1d:1d:76:7f:b3:43:
76:3f:32:5e:c7:52:28:04:15:09:2c:4a:cf:29:56:a1:00:b8:
4d:ed:f4:b1:56:92:9b:63:53:8c:27:04:0e:8d:04:ea:1f:5d:
53:13:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:57 2026 by rpki-client