
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json)
Hash identifier: M10ZFsemmmOFO2Q7rst2zSe5PEZfsbxnxa8mAPa5VzU=
Subject key identifier: AC:7B:6D:90:C5:48:49:57:A0:70:3F:E5:B5:5D:6B:77:84:02:BD:A8
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial: 2347
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
Manifest number: 2338
Signing time: Thu 16 Apr 2026 14:39:08 +0000
Manifest this update: Thu 16 Apr 2026 14:39:07 +0000
Manifest next update: Thu 23 Apr 2026 14:39:07 +0000
Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: S7O8Rp8GibrjdGLm3NPNDxOfRXTL0nDk3VMHmUcgDjY=)
2: FD36E81421D811F1A613849C243D8C67.roa (hash: JJMfeShYAnmCXRlBjx4h40MQ/VALdK8zOK54QosFsRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9031 (0x2347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Validity
Not Before: Apr 16 14:39:07 2026 GMT
Not After : Apr 23 14:39:07 2026 GMT
Subject: CN=69e0f48b-b8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:6a:50:71:f1:4a:e3:b0:3a:0a:8d:7f:de:
ee:07:6c:76:71:f3:bd:df:6c:4f:f6:ee:f9:d1:9f:
48:9d:65:35:69:78:bd:95:4f:34:9b:62:b8:4b:f2:
9e:40:f8:42:59:0c:17:b7:05:f5:5e:3f:90:0b:4b:
4e:11:bc:14:9e:d4:fd:ea:64:4d:e9:90:d7:ed:c7:
57:fb:23:df:49:a2:04:95:07:12:14:e8:0a:c6:2e:
ed:b9:e8:56:00:2f:d8:bb:5c:be:a2:58:88:26:ca:
6d:5e:d9:e3:a3:08:2f:69:13:5b:c0:8f:49:08:08:
79:c7:9b:84:57:63:3f:8c:3d:d4:9c:1e:b5:9f:fc:
f0:74:8f:1c:c6:e5:77:45:3d:8d:47:a7:8b:68:f3:
3a:e7:3a:07:24:77:03:8e:b1:92:8a:bf:e4:56:1c:
5a:45:f6:91:12:7d:0f:80:a7:e4:77:90:93:00:2a:
be:d2:68:49:b2:40:3b:03:78:c0:b2:3f:ef:30:fc:
9f:60:83:3d:ab:0f:3e:10:b0:04:46:5a:6f:90:9b:
a0:8f:88:e9:37:02:f7:7f:81:5f:a8:f0:d7:f5:4b:
4c:ef:54:16:60:b3:e0:fa:93:9f:e9:40:45:2d:24:
40:6b:58:f6:1a:d3:f7:87:af:4d:db:e0:b5:43:20:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7B:6D:90:C5:48:49:57:A0:70:3F:E5:B5:5D:6B:77:84:02:BD:A8
X509v3 Authority Key Identifier:
keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:c2:86:6a:59:10:d2:e4:66:b7:4d:8b:61:ca:89:f3:31:9d:
ac:4b:df:ee:1f:35:ee:6a:a1:47:37:17:5c:0d:a3:fc:95:63:
40:50:da:c1:de:94:8f:8a:28:4b:dc:79:eb:a7:7a:d0:9b:1a:
e2:f7:aa:53:22:ad:ec:9b:a0:0c:81:2e:00:02:08:78:a5:e4:
6e:3e:a1:2c:3b:54:14:3b:7d:48:b9:4c:74:f2:32:d0:09:bc:
81:c0:86:89:c5:27:f7:d7:bf:32:06:62:9f:f4:e8:d0:01:bb:
2b:cc:05:ce:61:70:c0:22:19:c7:22:01:65:99:18:0b:cb:70:
95:3a:29:96:fb:5a:4c:db:29:5d:42:cb:d9:4f:79:1f:1b:93:
00:82:95:e0:51:a6:7a:94:bf:42:e5:be:b6:d2:23:de:92:eb:
03:cb:1e:ac:df:2d:16:5e:30:06:ca:ac:f6:ee:fd:96:cc:7f:
31:a1:1f:8d:16:9a:bd:c8:19:75:92:6b:3b:41:93:c4:60:80:
c0:14:8f:84:ce:da:65:38:52:9e:e5:5e:e2:16:77:fe:a9:01:
08:fd:d2:80:5d:38:b4:cb:6e:9b:d6:a1:05:39:3a:db:30:46:
a4:ad:c7:60:b8:05:c7:1d:d4:e6:cf:ce:04:3d:47:73:6d:9c:
4c:5b:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:08 2026 by rpki-client