
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json)
Hash identifier: AaBTuJsgBE0Fz1SPbu0/fc590aXzsJaInyBBIrUAGsc=
Subject key identifier: 3A:7A:2E:1D:1B:E3:67:DD:5A:33:B1:72:09:99:35:B7:C6:47:FF:E3
Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Certificate serial: 3547
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
Manifest number: 353A
Signing time: Thu 16 Apr 2026 14:58:18 +0000
Manifest this update: Thu 16 Apr 2026 14:58:17 +0000
Manifest next update: Thu 23 Apr 2026 14:58:17 +0000
Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: zVUb9+o3UKx/O0KyAGJlny2WFSe5/lruobxzIObdh8E=)
2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: Ey46KUiipWBFHMSvJf1iTaWHEkjjgiOERViTlngdL/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13639 (0x3547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2
Validity
Not Before: Apr 16 14:58:17 2026 GMT
Not After : Apr 23 14:58:17 2026 GMT
Subject: CN=69e0f90a-a5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:45:a1:34:9b:73:f4:c2:5e:a3:ee:7e:54:
e9:8d:17:df:97:ff:78:fb:d4:07:61:3e:1f:70:98:
3e:39:5a:93:46:67:7a:05:8a:3c:b2:2a:a6:21:a7:
01:81:ec:f5:6c:35:ef:0a:ca:e9:4d:2f:bd:ac:03:
83:3e:85:51:60:87:87:e4:b9:47:96:d7:2b:99:2f:
c1:60:cf:c5:54:24:8c:bd:60:3b:b6:a4:d7:1f:55:
01:7f:ef:3a:8d:92:5a:bc:0a:b1:60:bd:a7:4d:b5:
45:e9:76:d2:7f:ce:6f:04:b7:58:8f:70:48:78:41:
41:75:29:8c:17:4a:b5:1d:ed:9e:70:3c:f3:9e:97:
71:f8:9e:2b:c7:06:df:f7:b7:58:0f:08:f7:d5:57:
38:a7:a6:8d:eb:9f:c1:ea:50:8b:53:c8:a6:97:68:
3f:29:ac:8d:b1:15:b7:d3:b8:ae:b5:b0:8c:a2:53:
01:a2:82:9b:b5:f6:16:f3:69:ac:7c:62:96:72:9d:
e5:1f:29:e9:db:db:8a:78:25:62:b4:87:0f:23:bb:
a8:dd:d9:2c:50:d2:dc:73:93:7f:ed:64:ca:90:95:
68:77:ee:7a:f2:28:9a:dc:e1:85:19:72:2a:ac:4a:
01:0d:c1:f1:ec:c5:54:c9:cf:9b:7a:f5:94:6c:09:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:2E:1D:1B:E3:67:DD:5A:33:B1:72:09:99:35:B7:C6:47:FF:E3
X509v3 Authority Key Identifier:
keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:76:6a:eb:0f:d9:c7:24:4c:b1:eb:99:af:c7:ac:cd:3b:bd:
5c:82:1b:68:17:16:98:84:13:c4:da:4e:d6:eb:a7:bc:af:f4:
0f:21:fe:69:5c:42:cf:a2:40:e8:da:41:85:2d:7a:54:b4:ab:
8b:98:3b:28:37:e4:0d:1a:44:d3:db:5f:74:fa:22:70:6e:3e:
c1:00:ea:2e:15:56:c2:b9:35:a7:76:f1:04:2a:dc:a9:88:66:
b1:e8:93:8d:52:87:12:e7:5f:de:6d:65:08:3f:01:9d:94:44:
6e:e8:34:ce:e5:bf:6f:42:a5:63:7b:44:6a:2a:54:98:63:6b:
d4:cb:47:0d:f7:d4:66:be:d4:bf:1a:60:26:ab:43:17:58:bf:
42:63:ef:0f:79:b3:ff:55:b1:5e:3b:61:74:ad:1e:70:4a:f0:
45:0c:a8:31:6b:e4:1a:ec:58:bd:6d:2c:e6:11:c1:cb:6f:b1:
13:4e:93:87:49:b6:10:9e:78:15:13:e3:65:cd:9e:27:4d:8a:
52:89:0d:d9:3f:72:54:bc:0d:5a:95:0c:66:a5:a8:40:d4:86:
05:52:c4:ae:43:43:c3:24:f4:d6:66:ae:0d:ef:36:1d:9b:40:
1d:dd:4b:5b:77:ff:c6:07:c5:8e:2e:ce:18:96:7f:b1:93:94:
a7:db:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:14 2026 by rpki-client