
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier: KR2RlS159QyhU1WYspE3pf3jVeo/s352aMDv63wqvuk=
Subject key identifier: 45:E9:34:21:85:3A:98:A1:17:67:91:B7:F1:91:16:E6:D8:C0:DB:35
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial: 0794
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number: 0785
Signing time: Thu 16 Apr 2026 21:27:40 +0000
Manifest this update: Thu 16 Apr 2026 21:27:40 +0000
Manifest next update: Thu 23 Apr 2026 21:27:40 +0000
Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: laz444qgQInYR4Zj4V7dtJec6YQjsKhidBebQq75UYk=)
2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: ZPYz03pw0KhMVBOPetBCRC/K+PV0o0wm8Fle12gB1bY=)
3: 56617572537F11EB9C970658C4F9AE02.roa (hash: 0ZFS32PgzMKmbFO0ZX4LyKpm9Pennvy2xmUXIm988gI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Validity
Not Before: Apr 16 21:27:40 2026 GMT
Not After : Apr 23 21:27:40 2026 GMT
Subject: CN=69e1544c-1a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:d9:2a:e4:65:54:a2:ae:78:0f:9d:45:9f:
c2:b8:41:2c:9f:a3:3e:86:c5:83:dc:ad:2d:05:b0:
be:9e:65:b2:e4:12:0b:fa:f1:af:b2:18:78:c9:35:
f6:53:91:94:45:72:e9:56:2b:3e:15:40:1d:9f:51:
cc:55:04:cb:e6:83:08:1c:b9:09:c3:dc:bb:42:97:
fd:c9:47:a5:8d:0c:40:4d:f7:aa:92:d3:6b:e6:69:
0c:e6:68:c7:8e:e0:8d:38:ad:b1:18:8c:13:ad:44:
a2:04:bd:56:45:01:e2:c2:93:3b:9c:19:68:e7:75:
7f:7c:c9:a2:c2:a1:36:59:41:ca:f1:5a:ff:b5:f2:
c8:74:7f:14:2d:23:fe:d5:b2:6b:29:af:da:92:72:
df:d2:12:90:53:d7:e2:51:65:e2:e2:c5:07:a5:61:
b4:4d:6f:39:ee:4a:1b:98:6d:be:28:73:55:af:40:
31:14:ea:2b:6d:ad:50:a7:5c:b7:9e:46:f2:76:e0:
a3:c5:75:52:66:d2:f7:9f:c3:db:52:4a:af:e0:cc:
1a:c2:58:47:03:32:3f:77:26:01:78:2c:96:10:e9:
b9:44:f4:47:b6:e0:49:d0:c3:8a:01:02:76:5b:9a:
79:1a:26:b6:8b:4c:6b:90:73:10:e0:cb:e1:7f:09:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E9:34:21:85:3A:98:A1:17:67:91:B7:F1:91:16:E6:D8:C0:DB:35
X509v3 Authority Key Identifier:
keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c6:ff:23:2c:ca:0f:92:a9:f3:16:fa:88:55:3e:8c:6a:82:
98:84:53:4f:8d:b7:3f:dd:b8:9c:cd:55:09:96:bf:77:2f:bc:
a6:77:07:97:35:31:fd:8d:7c:1f:2d:40:bf:e8:6f:45:12:10:
a3:63:f0:db:f4:78:e0:fc:97:fe:4e:ca:ad:e6:19:20:77:42:
62:94:0f:e1:89:bf:4f:15:74:e4:8c:a4:4a:41:dd:69:55:17:
1d:cc:af:ba:d9:13:ab:fe:2d:b2:46:da:c7:9f:6d:88:ad:3c:
13:3e:98:00:f6:4a:91:2d:51:3a:0c:f9:7a:6f:f4:41:b5:87:
7d:02:e2:c5:ae:91:a6:a9:fc:88:51:54:10:4e:23:da:56:7d:
83:b1:b7:da:7d:a2:5d:13:9b:56:b9:e9:52:a4:57:06:42:88:
f5:80:ad:f5:2d:e5:2c:f7:fb:5b:21:75:1f:ae:a3:60:65:bd:
11:f2:b2:aa:1c:18:18:fc:73:7f:7f:51:9f:20:28:7f:6f:32:
9d:11:de:d6:c0:47:32:cb:41:da:ea:28:31:22:79:49:9f:8d:
df:ae:bf:ec:2c:e4:80:9a:48:c2:bd:71:ca:e0:f1:33:da:6f:
ae:29:62:ee:e3:4a:f9:32:99:16:30:5c:b3:49:8d:61:4f:1d:
6f:7c:ba:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:08:06 2026 by rpki-client