
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
File: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft (raw, json)
Hash identifier: DJqNiXsnlL/94Jr/wtfW8mA5dKgsjl9dV/LoXzcaeHI=
Subject key identifier: 1D:75:B5:28:67:29:49:95:48:9B:BD:B9:0D:7D:62:BB:80:B1:7C:C8
Authority key identifier: E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
Certificate issuer: /CN=A91E9406/serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Certificate serial: 030D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
Manifest number: 0305
Signing time: Fri 17 Apr 2026 01:08:28 +0000
Manifest this update: Fri 17 Apr 2026 01:08:27 +0000
Manifest next update: Fri 24 Apr 2026 01:08:27 +0000
Files and hashes: 1: 40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl (hash: 9Tn3ZaJx+EloYoEVPWsWb3qos2zLhfSWcuhUfOjbT/M=)
2: F76D8A5C170D11EDA7EC2F87C4F9AE02.roa (hash: bTkT2MqFX/19qcSjcX3ccXtP/wVqXRGcmC6IZgoF9mg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9406, serialNumber=E3438405476402A3AA8F987C3AFA0690D96ED474
Validity
Not Before: Apr 17 01:08:27 2026 GMT
Not After : Apr 24 01:08:27 2026 GMT
Subject: CN=69e1880c-9500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:cc:a7:e1:55:00:b1:17:f5:88:3d:c4:cd:
48:0a:e0:1a:a9:47:9b:79:83:4c:c0:1a:02:cc:17:
7d:55:64:80:63:e5:61:c9:c5:5d:19:7a:8f:d3:fb:
1f:23:18:75:79:8d:d8:f8:de:91:20:b7:58:d3:83:
23:22:3c:4f:73:35:78:f2:38:95:03:bc:2b:58:27:
ff:b6:65:70:7a:3b:a9:7f:25:bb:3b:2e:79:b7:d9:
73:db:95:58:9b:d6:5d:f2:06:1c:bc:16:ea:d5:de:
af:80:2a:5a:86:6b:a8:90:df:ca:d5:07:b8:95:56:
b3:22:7b:26:c1:1b:d2:04:ce:cb:a9:a2:96:47:7c:
bd:bd:8e:3c:0e:87:33:f2:2b:ef:2c:33:80:ae:9f:
41:5c:9a:fd:ed:56:b2:d7:ec:2c:42:57:45:4f:63:
b4:df:a9:af:09:2b:0a:ed:b0:16:66:03:82:6c:0d:
26:d2:d6:b6:70:c1:83:75:e9:14:91:92:ae:60:9d:
c2:d6:6a:eb:22:b8:f6:41:27:ad:51:4a:f4:f4:c5:
ac:8e:9c:80:f5:2d:7a:d8:fa:58:cb:71:bd:80:f4:
27:a7:c8:35:ea:b6:35:b4:17:a9:97:06:1b:65:78:
07:7a:72:23:d5:60:07:44:8d:13:29:0f:98:84:02:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:B5:28:67:29:49:95:48:9B:BD:B9:0D:7D:62:BB:80:B1:7C:C8
X509v3 Authority Key Identifier:
keyid:E3:43:84:05:47:64:02:A3:AA:8F:98:7C:3A:FA:06:90:D9:6E:D4:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OEBUdkAqOqj5h8OvoGkNlu1HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9406/9868A9F0170911EDB6F80868C4F9AE02/40OEBUdkAqOqj5h8OvoGkNlu1HQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1a:56:aa:59:7b:e4:07:ed:ca:5b:90:c6:38:60:8d:63:44:
e2:7a:2f:6a:32:49:ed:8f:e0:e6:b3:aa:21:ac:8d:98:98:00:
46:ee:b8:d7:1b:d2:22:03:03:01:0e:74:f8:dc:5c:40:30:a4:
90:a7:b0:0a:28:5a:8f:2d:87:8a:10:c2:c6:e9:fb:02:e2:f3:
3f:23:46:fe:82:f7:75:a9:b0:a8:ce:51:eb:13:99:e3:d5:4c:
a3:a6:cc:b8:78:2d:f3:bc:5e:83:39:2d:28:fe:3c:36:f7:c3:
79:5d:1f:48:2c:bc:56:13:3a:92:8c:58:ec:91:e9:ee:88:6e:
0d:06:b6:7f:61:8a:92:13:86:c4:38:b8:8f:ba:f7:16:36:31:
84:25:e1:ee:c6:c3:96:a0:d2:7e:d1:51:54:0e:08:07:ad:e5:
0f:46:7e:7e:4e:02:4c:fc:49:e3:63:07:77:f9:46:e1:e1:2d:
e9:f2:10:61:4e:ed:08:fd:e9:69:6d:e0:bf:c9:28:a5:1b:0c:
4d:58:f4:49:b2:3b:f6:29:5f:b4:f5:fd:92:33:66:af:44:61:
a0:4c:fe:11:4c:90:78:da:62:ec:d7:4e:86:51:39:4f:b5:33:
d9:6f:83:be:00:8a:fe:a6:30:c6:e5:b8:a0:74:d4:2e:95:51:
1c:01:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:42:58 2026 by rpki-client