
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json)
Hash identifier: lgiFxy2SZXuAzlRFa4T7SieEnM7n6jSMNIPyUxzds+o=
Subject key identifier: D4:61:BB:B5:69:E5:52:93:1E:47:BA:F3:9B:CC:9B:F7:64:73:32:43
Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55
Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
Certificate serial: 0295
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
Manifest number: 028F
Signing time: Fri 17 Apr 2026 01:29:25 +0000
Manifest this update: Fri 17 Apr 2026 01:29:25 +0000
Manifest next update: Fri 24 Apr 2026 01:29:25 +0000
Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: sUYqlFC7TIhla/2m8NkLL3PXgywEa/sfMaeev3ZUiUQ=)
2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: ySqmK71UK+jNs+wh1mi4xJfCYQhQm8sGIT3aKm073iI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl
rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
Validity
Not Before: Apr 17 01:29:25 2026 GMT
Not After : Apr 24 01:29:25 2026 GMT
Subject: CN=69e18cf5-9f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:00:0e:a4:fa:e6:20:83:0e:a0:a9:18:ea:
62:5f:92:fb:7e:66:84:29:53:3a:13:e7:1e:b1:5f:
d3:5a:64:0a:36:e8:9f:6f:75:e4:65:16:5c:bb:e3:
c5:4f:77:f6:53:28:c0:37:ca:88:60:fb:1f:95:be:
73:67:e9:76:f5:c5:4e:5d:2a:44:af:01:ad:d6:4b:
40:b7:3c:6e:0c:83:cf:86:db:c5:74:da:04:00:3c:
e4:46:61:1b:e0:c6:91:02:7c:4c:40:1d:07:c3:63:
eb:50:e5:96:8f:be:80:52:69:a3:60:88:6b:10:26:
2d:d5:ce:80:9b:3d:88:23:d7:c2:c9:2d:70:f9:f8:
5e:a1:7e:f0:5e:ee:e8:47:91:cb:19:b7:fa:77:a7:
2a:e9:70:9d:09:86:56:f8:66:7d:93:2a:83:63:5f:
3a:28:90:00:9a:45:45:72:bd:65:47:f6:09:23:ae:
27:62:d4:c1:9b:65:94:9f:79:6c:16:f8:de:da:5a:
c1:3d:09:39:a4:df:86:78:d4:b0:2e:84:54:f8:11:
78:61:4c:f7:bf:d4:75:b2:18:43:1e:da:c7:a3:28:
8d:95:1a:29:23:bc:17:bc:e6:d0:94:7c:72:e4:28:
0c:68:33:7f:4d:20:5e:15:f7:76:d1:5d:40:ca:c0:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:61:BB:B5:69:E5:52:93:1E:47:BA:F3:9B:CC:9B:F7:64:73:32:43
X509v3 Authority Key Identifier:
keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:12:c1:a5:28:31:14:f8:32:89:28:92:c2:65:fe:8b:6f:db:
bd:bb:c6:d4:e3:83:ef:a2:8d:7a:c9:1c:51:03:d0:8f:48:b6:
28:be:0b:20:e9:73:c3:62:94:6e:4f:6a:c7:8d:c2:5b:c2:e4:
6f:1d:57:41:e0:2a:2f:2c:21:01:49:f2:ef:6f:06:f2:13:b9:
1c:73:b1:42:b8:e4:fc:66:3e:fe:06:e8:2d:35:65:9c:0e:c7:
7b:b1:7f:a4:98:ff:1c:86:ca:19:9a:57:fb:0e:eb:b5:d1:3a:
bc:27:c4:3a:fc:35:db:d7:26:6e:c3:c9:8d:24:96:92:4a:27:
e0:36:74:10:4d:1c:b0:c7:f6:37:21:8c:91:7f:83:f3:86:cf:
de:17:a8:ec:37:7b:11:13:51:de:6a:fa:20:5a:d0:ce:8a:37:
2e:b7:b5:42:d3:6d:e7:52:b4:68:f3:79:c9:13:46:a5:63:f7:
b8:a4:74:04:3d:c8:ca:27:d4:52:ce:46:b2:0e:b7:ac:e4:98:
a1:23:44:79:87:dd:c9:bc:4e:86:26:6e:c1:fe:b7:1c:51:73:
10:36:ed:20:25:66:c3:6d:f1:5b:bb:0f:5e:ee:d3:40:cb:50:
7f:da:cf:13:65:3b:b6:fc:87:82:87:54:55:3b:75:a5:50:71:
1a:a5:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:04 2026 by rpki-client