
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier: wZL+anNSPPgED89GO6ET0HQr1w1//S33krSyxs3HGIU=
Subject key identifier: 15:0C:1F:36:05:BA:55:9E:2B:F6:DA:A0:1D:D1:02:68:3C:68:FE:40
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 0312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number: 0304
Signing time: Fri 17 Apr 2026 01:09:44 +0000
Manifest this update: Fri 17 Apr 2026 01:09:44 +0000
Manifest next update: Fri 24 Apr 2026 01:09:44 +0000
Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: jHLp1DBWy12lROdZ94lbelGhMgADoV4TEWyv6EXUreM=)
2: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: bDrcCfIunOv3Ox8MoCryqHWYdLJQz+jVsJlwtnaxXwA=)
3: 834FFE88679911EEB8243436C4F9AE02.roa (hash: ME7+zEz0Jsw4n7cBlOx4YfFdzfleALyDaomuxZAGAFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: Apr 17 01:09:44 2026 GMT
Not After : Apr 24 01:09:44 2026 GMT
Subject: CN=69e18858-eb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:98:85:8b:90:0c:ff:54:3b:e0:41:39:06:f4:
77:01:44:ad:1f:c6:d4:d7:f9:69:91:6c:75:36:f1:
52:a4:7d:2f:9b:b8:34:f4:01:0c:6e:1e:ec:58:c7:
c4:96:56:b5:c8:a7:d9:85:bc:15:5d:f8:e9:8d:4c:
aa:63:3a:02:ee:63:7d:50:8b:d6:80:d7:6f:bd:2f:
09:fa:fb:5f:0d:13:2c:91:18:09:de:e3:e0:31:5f:
b5:11:6f:95:47:bd:ab:88:08:f9:f2:05:9c:f7:84:
63:b3:0a:2a:f2:d5:eb:6b:9d:29:3e:20:50:3b:73:
c1:ab:80:9c:f5:bc:40:24:3d:47:84:13:7a:d9:b1:
c5:af:c5:d8:43:15:c3:7c:c9:01:bf:49:9c:19:ac:
b0:d6:f6:bb:0a:c0:ca:98:ce:51:76:3a:40:df:fb:
a1:dc:07:1d:0d:9d:69:93:30:31:41:20:90:89:91:
c0:21:f5:69:06:de:97:fb:cd:95:54:7c:ff:0c:60:
bb:8a:5f:94:4d:03:5f:7a:3b:7a:f9:d6:31:13:43:
5d:1f:05:b5:1c:c9:39:51:f1:4a:2b:38:de:f8:5c:
4b:8c:81:7f:0e:be:54:c8:0f:dd:d8:ff:7f:6c:44:
88:f9:15:21:f8:e8:9b:26:83:18:b7:76:9c:45:db:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0C:1F:36:05:BA:55:9E:2B:F6:DA:A0:1D:D1:02:68:3C:68:FE:40
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:85:32:81:ac:10:4b:d9:2e:b5:b5:f7:cc:c0:39:f8:99:80:
75:07:19:ef:84:36:34:c2:c9:fd:e1:e3:d4:48:b2:6b:21:c1:
66:79:28:73:d2:a6:15:9c:5b:84:4f:6c:76:07:9d:fb:e1:a9:
59:68:f1:80:25:d8:3a:c5:c6:73:e7:7d:ba:4e:45:e0:2b:b5:
16:b2:54:e8:cf:14:06:de:43:8f:c3:ba:43:04:64:fe:82:75:
2e:f2:d7:e5:5c:ef:05:08:39:89:18:cd:b4:12:7e:35:a4:1a:
e0:73:80:23:62:c3:0a:6f:b9:3e:e9:d8:29:49:6d:ea:8f:e1:
3d:d1:6c:5c:18:9e:ab:ce:9d:1f:9b:87:f1:62:d2:3c:1f:22:
3a:2c:6e:eb:8a:ce:d4:ce:69:8c:ad:95:71:b2:f8:49:0b:0b:
70:ec:31:af:bd:6f:fb:56:cf:a5:fb:cc:a9:1d:46:47:fe:7c:
b8:c6:42:c1:3e:84:18:6f:d9:4e:c6:6e:da:49:6c:02:22:b0:
59:a0:9c:c6:33:27:5d:e7:d6:d2:85:6f:2c:71:68:27:df:9b:
2a:d6:e6:59:9c:1a:e3:32:20:6e:1a:6d:4a:b7:c7:f7:27:fa:
59:d9:db:f8:12:ec:a9:66:02:44:d9:20:21:eb:7a:1c:09:78:
a6:a5:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:28:31 2026 by rpki-client