
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json)
Hash identifier: k3CoRKmPBOOLsFIaKAshiYCGGKJP5KBMTYGA9h6nL0A=
Subject key identifier: 01:3B:29:CC:52:59:67:20:C7:01:31:12:DF:EA:F1:8F:3A:D9:64:97
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial: 1577
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
Manifest number: 1565
Signing time: Thu 16 Apr 2026 15:30:22 +0000
Manifest this update: Thu 16 Apr 2026 15:30:22 +0000
Manifest next update: Thu 23 Apr 2026 15:30:22 +0000
Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: gRR44AFWqLfwRygwbPg5x74jtGOePlNIGql+LVDqUNI=)
2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: hQYRG8ncZ6CHxCWYK1hLhmfKl621jQSkzGCZnvGLqeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5495 (0x1577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Validity
Not Before: Apr 16 15:30:22 2026 GMT
Not After : Apr 23 15:30:22 2026 GMT
Subject: CN=69e1008e-6976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:a3:cc:d4:10:bf:d6:26:1b:14:9c:28:73:
a0:6a:d1:21:de:88:d9:d9:b9:c0:ed:d5:db:fa:80:
61:85:3b:87:ef:3e:7c:84:94:90:06:c7:d8:97:35:
ff:b6:bf:db:c7:05:6f:fb:60:7c:ec:e6:c1:01:b9:
6b:00:0e:1a:41:5c:cd:08:00:31:eb:91:8c:3a:a9:
cf:31:8d:dc:c2:90:53:23:77:2a:aa:db:c5:43:36:
3d:f9:13:50:72:e7:bf:93:c5:d7:8c:fa:0a:e2:58:
80:90:c3:ae:6b:f9:d3:4f:d8:53:66:9d:91:dd:0e:
eb:72:f9:61:72:43:ba:72:86:c1:d8:b2:23:12:1d:
35:7d:fc:6f:77:2b:49:d0:37:cd:5f:f3:96:31:8b:
e9:90:c1:0a:0d:87:f2:3a:85:ea:71:e7:40:e1:8e:
f9:08:d7:11:bc:68:ce:5a:cb:cc:cd:e7:a3:a3:ca:
fe:9b:80:68:fa:78:b0:3e:17:4d:53:b9:94:23:64:
2c:cd:ff:77:be:58:97:fd:50:70:22:b3:ca:20:b0:
7a:4e:5d:3e:47:72:35:03:a1:c2:46:76:b5:d3:74:
bf:41:29:dd:32:97:d5:96:60:44:65:5d:67:85:98:
7a:70:17:1e:5b:33:0e:e7:09:c3:34:2c:72:11:5c:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3B:29:CC:52:59:67:20:C7:01:31:12:DF:EA:F1:8F:3A:D9:64:97
X509v3 Authority Key Identifier:
keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:05:5d:86:b4:be:06:fc:99:6f:bb:57:fe:f8:b6:3b:7b:60:
8d:9d:da:e9:1e:a8:e7:24:52:0e:bc:7d:71:fd:fb:09:3f:3f:
77:61:4e:7c:87:d5:ab:85:63:d3:51:40:ad:10:bf:fb:bf:f0:
a4:55:58:3f:6d:5f:a9:d3:40:eb:85:be:cb:db:46:3f:8f:17:
07:d6:24:1c:eb:f4:d6:8e:2a:5f:e5:42:8a:7f:21:9f:bd:70:
e3:33:af:24:fd:3a:4f:33:3b:6e:da:52:f9:d6:07:16:42:29:
c1:49:52:5a:9b:1e:ef:c4:92:19:f2:d8:52:98:c4:21:72:5f:
62:db:de:d9:42:12:36:6a:06:d7:2f:62:85:62:ba:ee:b0:4e:
1c:45:e0:ae:6e:34:0e:f7:bc:17:25:b0:f7:80:f0:ad:2c:bb:
1b:b4:2b:b5:0b:30:2a:a1:43:bd:61:bc:cf:12:52:f4:89:7a:
c2:75:34:ee:37:6a:cc:f0:c8:69:33:ea:78:a5:68:1f:ae:2a:
fa:74:e6:c3:50:b6:d8:2f:14:b5:c9:8b:35:92:87:a5:b9:ca:
5a:2f:09:94:a2:f2:23:1c:48:ff:45:f4:cf:90:84:81:c7:f5:
e5:ec:8c:34:16:f3:6d:b6:7f:52:0f:81:95:6e:4d:2e:8f:fe:
eb:07:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:41:08 2026 by rpki-client