
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json)
Hash identifier: GmzR51C3mPexLfbpWFCVrkYxgqhEKmt8D2vov1/mjm4=
Subject key identifier: 45:59:EA:F4:D4:C7:DA:60:8C:78:BC:17:59:20:40:49:AF:27:FC:A9
Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Certificate serial: 06F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
Manifest number: 06F1
Signing time: Sat 18 Apr 2026 21:59:14 +0000
Manifest this update: Sat 18 Apr 2026 21:59:14 +0000
Manifest next update: Sat 25 Apr 2026 21:59:14 +0000
Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: H1zjUGKwCuIzJM8UcyZrvsLOIs4Z9ft689GdAeeyVgE=)
2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: GFVauPq5fJh/s7MjoQc/i7d6D36WUmsf38yMr3GXmuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl
rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 21:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785 (0x6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Validity
Not Before: Apr 18 21:59:14 2026 GMT
Not After : Apr 25 21:59:14 2026 GMT
Subject: CN=69e3feb2-fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:d5:df:49:cd:02:5b:26:a7:3c:07:62:89:
3a:a1:d1:34:a7:96:6d:77:c6:a0:15:20:7c:e0:7f:
e6:55:72:e8:1c:b3:d5:22:39:d1:36:3e:46:e7:18:
48:c8:05:b9:89:6c:68:2a:15:25:fb:72:39:1d:48:
be:be:1a:b8:a5:c8:10:7d:e7:d3:ad:4c:2f:9c:f7:
7f:69:0a:d1:e5:3b:c2:ae:df:aa:42:cf:3a:67:ca:
c3:ec:0b:21:f4:f1:69:ab:9e:55:5c:aa:3b:b3:a3:
bd:99:91:01:ab:78:9c:bc:96:93:e0:c0:c9:48:0c:
f5:b7:78:fb:76:33:6f:98:11:3d:49:20:d6:05:e4:
25:b9:60:e8:29:ee:77:66:be:38:34:7f:82:20:4e:
9a:b4:ab:98:45:34:f4:b1:a5:47:5b:2c:70:e9:c4:
52:9e:44:08:69:c7:bc:59:6b:dd:ba:93:42:bd:1e:
b6:56:c5:54:f6:e2:19:2b:5f:c0:d3:1a:b9:78:48:
00:83:ea:ac:70:a6:6d:95:6d:c2:01:0c:95:06:6f:
a9:3e:12:19:1f:bc:a1:20:2f:71:12:b3:35:94:3d:
25:c2:e5:bf:af:d1:c2:8c:6f:fe:56:2d:ff:60:02:
10:1a:eb:c2:70:ed:aa:7c:1c:a4:bb:dc:f8:97:dd:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:59:EA:F4:D4:C7:DA:60:8C:78:BC:17:59:20:40:49:AF:27:FC:A9
X509v3 Authority Key Identifier:
keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:5a:91:a0:4a:87:c6:75:c6:52:cf:0d:95:e9:96:e3:52:78:
20:b3:37:4e:ff:1e:b2:b0:e0:92:5e:30:53:3a:8f:6e:e7:13:
19:ca:7e:14:5c:c3:4e:41:13:66:f7:72:fb:56:9e:2f:1a:ce:
72:62:27:de:f2:e6:4e:fb:f1:dc:0b:b6:d2:7c:39:91:2e:f2:
34:ef:e0:09:29:45:a1:64:45:21:58:32:4f:0d:e5:c5:4d:91:
30:c5:50:82:31:d2:47:be:8c:56:51:35:35:c1:7f:b8:4f:2c:
06:c9:d7:21:bf:e7:da:f4:b3:60:9c:42:87:ec:23:cb:1b:42:
14:10:c3:34:d3:6c:ca:30:cb:df:0a:69:6f:dd:e5:67:0a:19:
98:3a:ff:42:e6:ec:1f:76:0b:27:a7:01:06:96:77:00:54:59:
e4:f4:0f:03:1f:4c:0b:7d:50:83:0b:72:fe:4c:e3:3f:ac:b9:
38:51:26:12:c7:2b:a6:04:5a:69:1a:37:53:bc:e6:4f:23:9e:
e5:89:f1:f5:e1:e1:3a:e2:e9:95:84:b8:9f:0c:d1:80:8b:84:
30:6b:d2:5a:57:ce:d2:fe:0c:cd:44:be:1e:10:4a:9d:d6:88:
3e:1c:72:4d:9b:a4:c2:46:96:b8:95:36:f6:07:b1:9d:11:fb:
89:01:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:35 2026 by rpki-client