
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json)
Hash identifier: RwiHv+b5774C+zng1WeGhYLz636ggJ3vkr9UsTM2pzI=
Subject key identifier: 3B:42:B4:91:F4:05:95:76:B2:A8:20:24:6D:28:DF:D9:CD:5F:37:67
Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA
Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
Certificate serial: 05CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
Manifest number: 05C3
Signing time: Thu 16 Apr 2026 23:00:58 +0000
Manifest this update: Thu 16 Apr 2026 23:00:58 +0000
Manifest next update: Thu 23 Apr 2026 23:00:58 +0000
Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: StDppTXxpxebaoxEBXKpmOS2dYnq95UdyEx8sjZDzow=)
2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: wf2a4w67T5LlxEVDGfGnefxaFfP9ax9DaJiTme9ygjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl
rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1484 (0x5cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
Validity
Not Before: Apr 16 23:00:58 2026 GMT
Not After : Apr 23 23:00:58 2026 GMT
Subject: CN=69e16a2a-64a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c1:b7:d5:49:0a:fe:51:38:b1:9c:42:ca:b8:
02:15:30:c3:9f:31:51:8c:cc:ab:73:50:51:54:1a:
78:f9:71:dd:f3:e7:5a:6b:bf:cd:a9:df:27:be:28:
8b:cd:d3:ad:2c:82:71:bd:8e:0d:58:2e:d4:bd:59:
8e:49:54:85:42:35:0a:91:ab:13:87:56:4f:e6:64:
21:bd:7e:c9:a4:c9:b1:74:6e:91:f6:9e:43:6c:56:
c7:ba:e4:d5:63:4b:d3:81:a6:e9:5b:4d:f0:95:0c:
bd:ed:f8:4c:3d:98:86:98:38:82:7e:4c:8b:d3:2d:
22:53:cf:1d:14:f1:c8:88:48:89:48:1b:33:de:d2:
0a:dc:60:e2:50:e8:e9:a6:e8:26:ec:de:22:bd:4e:
69:7f:dc:56:a1:42:b0:38:8e:7f:53:4b:3e:93:4a:
7e:2c:fd:25:7a:bb:c8:af:72:4b:24:2a:66:d3:5b:
d9:ac:4a:32:7a:28:08:03:2a:99:c6:b0:67:dd:58:
43:1e:5a:79:aa:5a:f0:bb:63:b9:c3:49:e5:30:48:
e7:e7:df:f5:d4:0c:63:91:1b:80:45:e1:a6:b2:ee:
5f:35:30:82:ab:54:e7:a7:b7:e5:c1:82:a5:4a:d1:
75:cc:63:69:ba:55:df:b0:27:95:de:ce:68:63:72:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:42:B4:91:F4:05:95:76:B2:A8:20:24:6D:28:DF:D9:CD:5F:37:67
X509v3 Authority Key Identifier:
keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:4a:36:96:35:ed:e4:60:0c:c8:ae:4c:87:22:23:09:79:44:
66:d8:e9:88:ee:58:60:47:15:b3:c5:0b:f4:70:d0:3b:76:3b:
3a:31:8e:15:d2:9f:d6:a8:7d:f9:a0:83:9a:43:f9:f4:60:70:
fc:38:22:b6:e3:e1:81:0f:02:81:ef:e0:5f:a8:43:05:8e:3d:
ca:ed:dd:d3:1c:69:1c:d1:23:72:0f:b4:a0:8c:8c:88:01:be:
3b:ed:6b:36:a2:0c:80:4b:6d:4f:31:a1:5f:6a:14:35:71:44:
e3:85:f5:fd:0c:ea:e6:36:16:20:2b:b8:3c:31:c2:d8:eb:6e:
9b:81:56:b3:35:fc:c2:40:84:15:77:69:b7:34:df:04:d9:c7:
8d:99:fd:b3:a0:c3:04:02:59:8d:6f:bc:b3:26:99:5d:60:0a:
84:db:c9:a8:30:d5:63:45:24:3c:27:92:fb:57:16:be:3a:3d:
a9:ff:37:f1:38:d9:07:6c:dd:b8:f3:de:ec:7a:4e:c6:20:11:
fc:37:20:4d:f2:93:26:fb:a0:4e:98:90:a6:20:18:12:3d:f4:
f6:85:31:0a:c1:37:d8:7c:9d:d1:c2:7c:f1:b5:bd:7a:77:8f:
f3:4e:d4:01:12:1e:fb:e2:c8:65:e6:a9:23:6d:2c:c1:ef:1c:
8d:a6:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:33 2026 by rpki-client