
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json)
Hash identifier: 7hg1H1OTM/+q96NVwTQmSin/MXe7HoLhZSj5olV2d0A=
Subject key identifier: 1E:18:F8:AC:3F:EF:16:B0:75:3D:FE:BD:B8:64:54:FF:79:25:41:CC
Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
Certificate serial: 0572
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
Manifest number: 0568
Signing time: Thu 16 Apr 2026 23:16:23 +0000
Manifest this update: Thu 16 Apr 2026 23:16:22 +0000
Manifest next update: Thu 23 Apr 2026 23:16:22 +0000
Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: Y2xRmnuI3XkrKFoC+6D8pWPHRTREpPTHE22Nb7iAFfw=)
2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: bUHBBf5sOas57JoBnuGlqh7PgAmJoHgi2CnQkJdmpgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl
rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1394 (0x572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11
Validity
Not Before: Apr 16 23:16:22 2026 GMT
Not After : Apr 23 23:16:22 2026 GMT
Subject: CN=69e16dc7-5712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:6b:3e:e3:b7:db:08:0a:e5:8f:d5:bc:c1:
df:38:94:a1:45:2d:e5:22:51:c1:ae:1a:09:1d:0e:
fd:cf:55:df:0e:f3:91:48:6f:90:74:30:ac:07:9d:
66:ca:24:b5:9c:7f:bd:79:fe:01:8f:36:6c:ae:d7:
7b:37:0f:a4:e6:8c:20:5b:eb:e1:49:5d:25:05:13:
d4:a9:bb:50:b6:32:31:03:85:18:45:77:0d:83:f0:
f8:22:91:a8:32:ba:59:4a:04:70:38:9e:51:b5:17:
42:3f:7c:3c:98:3b:e6:08:18:f0:00:3c:8a:a8:17:
0f:ec:6c:eb:c1:14:32:3f:fd:57:b3:cb:a7:a3:39:
fb:87:ec:f6:09:cc:a3:84:d3:d8:77:f9:54:13:6b:
1a:38:29:02:d7:61:09:db:ec:7e:18:99:7a:8a:45:
a3:f1:98:5d:2c:37:39:5b:1d:95:4d:16:46:f0:0d:
c1:c6:f7:3c:c1:3d:74:bd:d9:14:ec:c1:f7:2b:8e:
9e:7f:8c:e3:32:2d:be:cc:38:c0:56:08:ae:c8:32:
2b:75:34:3e:33:7e:bd:0a:ee:65:1e:bc:da:8f:ea:
70:a9:c6:c1:92:94:6e:a7:d6:d3:bf:7d:c4:a1:d4:
12:0a:13:cf:0b:01:5c:87:9a:4d:94:67:a7:d5:43:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:18:F8:AC:3F:EF:16:B0:75:3D:FE:BD:B8:64:54:FF:79:25:41:CC
X509v3 Authority Key Identifier:
keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f6:18:98:e8:e6:ed:62:9d:c7:a5:47:6e:22:40:3b:43:93:
1f:33:dd:bf:56:a1:6b:c4:fb:65:f5:ab:7b:6f:f0:d9:63:77:
d5:a4:c5:53:98:66:4a:24:65:20:68:9a:d2:64:a3:87:25:6e:
66:8e:5c:2c:6d:eb:3a:71:91:ef:11:0c:ca:86:0c:95:32:bf:
be:b6:32:f5:e5:3b:6b:1d:23:cb:8f:16:70:79:f8:b5:6e:b4:
49:06:7e:fa:6c:0e:c8:3f:b0:f2:7a:f0:af:28:dd:1f:1e:28:
a6:ef:5d:fb:6c:80:e3:b3:47:58:08:33:68:1b:7f:6c:ce:84:
a8:f6:9e:1e:5e:2d:f9:e7:09:29:84:ae:6e:a3:1c:c7:e5:21:
10:2d:1d:4b:f5:79:2d:68:e8:28:59:81:60:b8:8c:41:b3:9a:
08:55:2b:97:75:9b:49:bf:12:e9:bb:d5:d7:1f:bc:bb:05:ac:
f5:ec:4c:53:2c:1f:f1:c2:15:af:e0:0d:52:3d:dd:6f:32:76:
52:3b:0d:2f:3d:c1:e5:ee:45:47:13:0e:9f:72:73:60:1f:14:
9f:15:fd:54:db:97:8b:9a:c4:29:e9:26:ce:29:13:28:da:99:
ca:82:3c:c4:a0:e8:18:44:bc:d3:0f:b6:07:01:36:03:f6:07:
87:01:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:36 2026 by rpki-client