
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
File: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft (raw, json)
Hash identifier: u3v5hDcj0gyaPWGxgcHSA9+i8NkcHlg7qMG8m2CC1A8=
Subject key identifier: 9F:54:5A:71:10:12:EC:84:E4:5C:56:BB:3F:DA:1A:04:F1:B3:88:67
Authority key identifier: E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88
Certificate issuer: /CN=A91E3441/serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
Manifest number: 35
Signing time: Fri 17 Apr 2026 08:17:47 +0000
Manifest this update: Fri 17 Apr 2026 08:17:46 +0000
Manifest next update: Fri 24 Apr 2026 08:17:46 +0000
Files and hashes: 1: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl (hash: aQPp/S1HWyjnP1WnUr+cWcen7CPldgYXM+Q7H81iG9U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl
rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3441, serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
Validity
Not Before: Apr 17 08:17:46 2026 GMT
Not After : Apr 24 08:17:46 2026 GMT
Subject: CN=69e1ecaa-50d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:c3:8e:62:65:93:63:e7:ae:84:7b:e0:d2:
51:aa:e6:47:f4:f9:da:6f:21:36:aa:9a:53:2b:00:
45:57:dc:de:ef:f0:65:a2:36:27:9a:f5:07:84:b1:
06:8a:ba:23:55:be:a3:84:59:22:90:7a:c3:67:4d:
fc:5d:39:c3:61:b9:8a:e4:c5:96:b7:90:d7:b9:83:
bc:0b:15:25:e1:21:40:d8:36:69:38:b1:b2:55:3c:
06:f7:4b:8f:d8:b3:d6:c3:f8:bc:47:50:0b:b8:43:
a3:66:3b:77:75:ab:87:95:19:85:5b:f7:2d:5a:c7:
f6:c9:97:f6:ac:e3:19:dc:51:e1:ae:49:b5:f0:45:
2c:15:c5:87:1d:c2:65:74:0e:96:c2:63:2d:6a:b3:
10:f1:9c:62:73:bb:9e:c8:03:38:15:53:59:40:82:
89:d6:d5:18:0d:07:4b:5a:df:aa:c5:e8:4f:f1:5d:
c1:fd:e0:2f:fa:2f:34:73:8b:d2:d7:5c:8f:39:cf:
a3:70:27:31:d4:f7:12:52:6b:0f:2c:42:77:8c:72:
0a:8e:3c:3e:39:2b:7d:b2:50:56:a3:1e:8f:31:c7:
eb:d9:06:bd:9b:2c:01:3a:af:4b:53:14:01:56:52:
e7:db:c1:6a:87:95:0e:49:f8:47:b8:9a:df:a4:ad:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:54:5A:71:10:12:EC:84:E4:5C:56:BB:3F:DA:1A:04:F1:B3:88:67
X509v3 Authority Key Identifier:
keyid:E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:65:29:21:4d:43:c9:12:dc:25:8b:29:2c:e0:d1:b4:b1:4a:
4c:75:ae:70:7d:23:3d:f0:54:20:6e:26:87:dc:d6:da:a7:4a:
4d:8f:f5:4f:6b:d9:18:83:f7:2e:9f:28:be:6d:8f:6c:f7:02:
08:01:33:2a:aa:bc:93:77:5b:b1:42:7a:67:0a:f2:98:98:64:
1e:dc:a9:5d:1e:84:5e:d6:32:be:d2:fe:ee:23:5d:4b:48:39:
00:5a:33:4e:fc:10:51:63:33:28:0d:bd:73:32:e9:3d:00:b9:
3f:56:00:5b:3f:51:5e:65:d9:76:8e:1d:62:7d:cb:e5:bb:28:
69:80:f8:2c:ed:fe:a6:9f:77:7d:06:31:4f:cc:18:71:ea:f7:
d8:ee:c3:89:03:e1:46:53:b7:53:a3:77:3d:d6:db:80:1d:82:
ed:cc:b5:b5:da:3d:bd:ad:ec:51:78:a9:70:fa:44:36:6f:44:
05:e2:27:90:16:b1:3d:17:1d:2a:a2:e6:26:5d:4f:9e:2a:cf:
50:d1:dc:5d:f7:6b:3e:e5:42:59:52:67:27:a3:14:84:95:6b:
20:c1:48:cc:81:c5:03:4d:39:39:db:f8:7e:c1:cf:25:40:65:
97:ef:a3:c7:18:ad:44:33:d2:34:d2:33:16:d6:22:8d:42:a4:
96:99:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:43 2026 by rpki-client