
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json)
Hash identifier: j59Mh7IeUyTKPNlyw2AppNvL48bdoPNXDvjev4QtuOM=
Subject key identifier: E0:7F:55:6B:00:31:DF:62:EF:67:95:B5:FA:A9:F4:A7:7D:01:0D:2C
Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
Manifest number: 01D4
Signing time: Fri 17 Apr 2026 03:29:16 +0000
Manifest this update: Fri 17 Apr 2026 03:29:16 +0000
Manifest next update: Fri 24 Apr 2026 03:29:16 +0000
Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: xGbCmFw7oZP7gMBVgR4PoG8NBDlLmQu060cSMODreQY=)
2: E5196DA6335811F1BC79FB1BCA833773.roa (hash: vyYp7IA/5MNA4gMbec/CoUCTSiktnAR4FwpLUhRjRvU=)
3: 27A66CC4335811F18709AA0FCA833773.roa (hash: pPUHKA5s9wq04L2qfb/B2EY59WS05X4PfzFkdep1N34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221
Validity
Not Before: Apr 17 03:29:16 2026 GMT
Not After : Apr 24 03:29:16 2026 GMT
Subject: CN=69e1a90c-0445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:78:e1:c5:dc:07:7e:d7:9c:ed:e2:3a:82:
6b:17:77:88:ee:4d:46:68:e6:93:c9:77:b5:04:8f:
ab:1b:e9:c8:27:f7:b7:fe:22:4a:04:17:38:6a:b5:
8b:91:e7:a0:b6:9c:08:d8:ca:28:47:be:22:ef:6f:
f9:82:1a:ab:be:13:d3:15:b8:fc:51:ad:d4:e5:ac:
77:a0:04:84:23:fb:e3:1e:25:ec:64:61:77:7c:35:
68:21:b3:dc:47:86:5d:79:a8:b1:96:47:6a:9c:19:
87:83:b3:85:bf:6b:00:0a:f0:f0:75:b6:31:2d:53:
5c:03:bc:1d:13:45:91:04:01:46:7f:25:ed:49:be:
f2:9b:11:45:84:2e:01:33:06:f7:f8:60:af:86:27:
d8:02:e7:0b:c7:bf:5d:f7:ee:8f:f3:0f:05:49:fd:
6d:44:73:07:db:f9:c3:5d:a1:38:f4:49:e8:9d:da:
9b:a8:a1:7d:a1:c3:cf:15:29:2d:52:c0:93:81:84:
cc:bc:15:f9:24:6d:e9:5c:40:50:32:0a:94:84:75:
34:9b:4e:1e:01:9d:16:b7:b2:47:cb:27:22:c7:02:
ab:e4:47:ac:4f:06:b7:71:79:82:57:f7:58:5b:e8:
bd:95:43:73:0e:2c:b6:0f:ff:17:1e:2e:4d:54:2b:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7F:55:6B:00:31:DF:62:EF:67:95:B5:FA:A9:F4:A7:7D:01:0D:2C
X509v3 Authority Key Identifier:
keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:20:ab:f9:a2:ac:1d:a8:3f:f1:19:9f:89:97:8f:a4:d6:68:
96:7a:2d:5c:da:e8:ca:cb:e0:eb:a6:aa:fc:dc:3c:af:3d:9a:
ee:a4:81:16:72:06:87:b4:c8:1f:48:6b:98:6d:ed:a4:64:16:
09:50:2b:db:9d:e2:e7:54:f8:71:2f:ac:38:cf:96:1f:10:34:
06:58:9d:99:39:3f:ea:0f:10:e1:5e:54:38:ed:a6:20:a9:95:
e9:0a:1a:84:31:a7:8c:2a:53:8c:89:92:ec:44:3d:36:24:a5:
33:57:84:21:90:6c:78:44:8c:24:c4:fc:f1:0d:aa:9d:7b:6c:
5e:9f:3f:d6:d2:fe:da:d5:25:4c:c5:6c:e5:69:78:ad:e7:e4:
c3:eb:ae:8c:0a:b8:f1:17:ca:c2:bf:bf:86:1c:b5:bd:f1:2c:
9c:2c:98:64:79:4a:0e:f9:d8:fa:49:c5:a7:33:3b:20:4c:0b:
1d:69:dc:3f:6c:3c:41:fc:4e:90:3d:94:54:7a:ac:1c:b2:15:
10:06:ff:c3:da:27:41:1b:bb:d7:96:6f:41:3d:30:ea:16:1c:
ef:49:fa:ce:7a:38:48:98:cd:86:05:93:31:1c:b5:b3:eb:ee:
cd:4c:1e:7e:c6:b0:81:86:4a:a5:99:42:24:95:e3:d2:ab:31:
4c:bd:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:22 2026 by rpki-client