
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json)
Hash identifier: 58k27UaCqPEO/tWysp05NKD11TlM9NJGdXfz2yoKXvk=
Subject key identifier: 62:5C:D8:64:2F:BB:D9:E0:12:80:AD:44:C7:28:31:FC:19:8E:AF:CA
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 3537
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
Manifest number: 3535
Signing time: Thu 16 Apr 2026 14:35:57 +0000
Manifest this update: Thu 16 Apr 2026 14:35:56 +0000
Manifest next update: Thu 23 Apr 2026 14:35:56 +0000
Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: gpwUlcDUD4MlipVwemWOZErKHm8yGmqqSsSEg13RJMM=)
2: C264EF40348611F1AD86C498AC833773.roa (hash: wTMXhIJHuGRKi/fQE0t7xt0V+AnCVKBleH1O5usD6Xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13623 (0x3537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Apr 16 14:35:56 2026 GMT
Not After : Apr 23 14:35:56 2026 GMT
Subject: CN=69e0f3cd-def9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:fc:2e:44:e8:c2:3e:64:e1:89:1c:45:c5:
e5:11:46:a1:bb:6e:f0:fa:40:f5:79:de:6b:64:c1:
c3:c2:1c:a2:7a:cd:31:7e:5e:8b:0a:81:eb:53:9e:
6a:83:29:37:47:a1:ad:52:a2:ff:64:17:0b:e7:a7:
90:22:56:b5:0f:45:c2:36:2a:33:ca:89:55:21:39:
f2:3b:10:51:eb:03:9a:9a:67:e7:16:70:55:1f:fd:
f2:f0:4a:2e:21:05:44:7f:81:e1:99:9b:25:0d:33:
cc:a8:a9:c3:5b:c0:74:8a:51:74:2f:67:dd:d2:38:
10:0e:ff:83:00:d9:b0:c5:cf:fb:74:f8:42:ec:00:
3d:d2:be:fb:b5:a7:ec:b8:59:cc:e6:cd:43:56:46:
e9:8d:0e:93:4c:35:72:85:4f:b5:b9:47:26:11:a7:
a7:85:b7:c2:14:5c:e5:aa:ea:6e:01:08:4c:09:63:
f9:71:b4:17:8d:9d:c9:cb:65:a5:90:5e:8c:e3:a6:
a7:ee:76:61:01:c9:3e:7a:1e:a9:ae:c2:bd:27:c6:
07:37:3f:69:0c:8f:e8:7e:04:b7:ea:c1:29:80:e1:
48:a2:80:36:4f:47:f7:16:dc:6b:b3:90:ec:20:ae:
23:4a:14:40:b6:42:74:d8:2e:e3:0a:79:a2:0f:ca:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5C:D8:64:2F:BB:D9:E0:12:80:AD:44:C7:28:31:FC:19:8E:AF:CA
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:25:09:69:9b:ac:64:41:18:5b:ba:c9:b5:2b:24:a7:db:c9:
e4:ca:09:8e:26:2d:b0:c9:02:a6:52:99:d0:1c:ee:66:99:26:
05:a1:87:60:f5:3e:3c:da:e9:de:7a:b2:b3:22:a5:72:c4:4c:
18:c7:2d:5b:3a:d2:78:7f:1a:0b:fc:17:c6:b2:97:2b:05:1f:
f6:78:f6:f4:c8:5a:3a:90:e3:dc:32:17:b5:f5:04:22:51:ca:
34:71:bb:db:62:d3:75:46:f7:aa:5f:02:11:91:b4:b4:67:88:
58:6f:f9:3b:b5:5a:82:e0:ef:e2:8f:aa:3a:e1:06:f1:f5:b2:
d2:1b:4d:28:d5:6c:06:e0:bd:04:4c:ad:4c:20:92:cb:a0:e5:
19:9b:4e:fd:d1:29:ad:6c:43:26:eb:7c:b9:c1:2e:32:0c:11:
35:8a:60:70:46:88:d9:de:64:41:aa:77:68:64:76:e1:f5:ce:
02:38:ee:f9:02:74:8c:4e:4f:eb:1f:98:d1:df:59:67:bf:58:
83:e3:5c:b2:4d:d8:e9:7f:18:72:e7:c3:c8:b2:4e:f3:68:d9:
4d:4f:17:21:12:5b:77:e9:17:7f:e1:a2:cd:c7:c7:7c:37:12:
53:0f:97:98:2b:e3:37:56:f5:ae:32:8d:80:26:40:da:7e:b6:
8c:d7:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:32 2026 by rpki-client