
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
File: d4O93Owt-bn8-48Qm3PU95Shc4Y.mft (raw, json)
Hash identifier: gitdCdIRgfKLt6XTZJyCW7Nq4VQcBigigoPdpil3ZiY=
Subject key identifier: 89:AF:7C:F1:B7:85:EB:BF:74:47:A1:71:EE:DA:7C:4E:CA:86:38:A7
Authority key identifier: 77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
Certificate issuer: /CN=A91EAD63/serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Certificate serial: 02C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
Manifest number: 02BC
Signing time: Sun 19 Apr 2026 01:19:16 +0000
Manifest this update: Sun 19 Apr 2026 01:19:16 +0000
Manifest next update: Sun 26 Apr 2026 01:19:16 +0000
Files and hashes: 1: d4O93Owt-bn8-48Qm3PU95Shc4Y.crl (hash: X7yxXKn4+2PwZEy4bdc9x7USc2m8OP7JJSl/zHWHFbQ=)
2: 9BA13212344C11ED8F22CB70C4F9AE02.roa (hash: PeFV/oLu/csLft0iODoJnYJS2cAXlNVSsKTM91Ov3+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 01:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAD63, serialNumber=7783BDDCEC2DF9B9FCFB8F109B73D4F794A17386
Validity
Not Before: Apr 19 01:19:16 2026 GMT
Not After : Apr 26 01:19:16 2026 GMT
Subject: CN=69e42d94-b19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:80:a0:b8:f9:91:39:aa:3f:5d:53:dd:5f:
62:c8:6a:19:5d:d5:24:14:27:4f:5e:c7:93:ea:cb:
c2:ee:6f:3a:67:b1:fc:5b:b9:ff:69:03:d6:fe:bf:
b0:03:25:6e:ff:aa:3b:36:fc:15:23:95:df:f5:6c:
9a:4e:ab:56:61:b6:30:fa:3e:50:75:04:3e:0e:ef:
16:a2:85:2a:21:24:a8:40:ee:67:26:50:a4:d1:76:
4e:9a:58:bb:d8:f6:1c:17:59:45:bf:1a:62:b5:0b:
93:20:2e:3e:fc:3a:95:24:99:4e:1b:93:ca:bc:de:
b0:1c:d9:8d:dd:f2:85:6e:b6:e8:49:35:a6:b4:75:
89:a0:72:93:42:bc:f0:49:31:87:af:60:36:b0:d3:
31:84:a2:fc:03:54:49:9e:95:ef:89:a6:6a:d0:9e:
2b:14:4e:8d:17:8e:fa:87:7e:3c:2f:85:d6:51:a7:
52:bb:c6:af:bb:f3:e5:c0:1d:64:d5:2a:1d:2e:72:
83:38:db:20:50:cb:1a:4f:8e:d7:92:b1:63:2b:99:
65:e4:92:2c:8c:57:c1:9a:e7:6a:95:05:17:24:b9:
fe:77:2f:58:7d:ee:d7:b7:2f:30:2f:2d:65:20:92:
af:a3:c2:f1:95:28:b4:0b:3f:50:b1:f2:dc:25:f5:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:7C:F1:B7:85:EB:BF:74:47:A1:71:EE:DA:7C:4E:CA:86:38:A7
X509v3 Authority Key Identifier:
keyid:77:83:BD:DC:EC:2D:F9:B9:FC:FB:8F:10:9B:73:D4:F7:94:A1:73:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4O93Owt-bn8-48Qm3PU95Shc4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD63/DD364118344711EDB10DA43AC4F9AE02/d4O93Owt-bn8-48Qm3PU95Shc4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ab:49:5e:e1:df:4b:99:52:6b:0b:9f:41:68:62:93:ea:ef:
5b:f0:c8:2a:9b:de:bd:b8:9c:ed:20:f4:91:71:8e:93:3e:4a:
d7:8c:94:24:bd:d2:ef:95:31:c8:ca:f8:31:bf:0e:c9:26:43:
e9:d5:f1:8e:7a:06:d6:bb:65:44:d9:45:63:76:84:81:d1:55:
7b:4c:3f:b3:de:02:ec:b0:7d:bf:c3:f6:d1:6f:68:d8:01:49:
6f:c4:f4:b0:2b:f4:e5:ea:68:c4:39:d1:e4:a1:ef:d9:c9:02:
ad:56:67:ab:e9:bc:1b:42:2b:dd:c5:36:55:00:02:a0:bc:a8:
50:ae:09:36:71:18:63:6b:67:b0:cf:74:70:d1:46:22:08:fc:
99:be:f8:0d:b5:cb:b7:79:f6:e0:bd:76:86:af:c0:69:67:d3:
d7:9d:3c:3b:b6:09:b0:78:5d:ee:63:bf:53:a4:38:1a:54:50:
b6:3e:51:64:89:1f:94:8c:f9:40:2f:b8:34:9c:32:9b:d0:f0:
bc:ab:97:eb:e2:0c:13:f1:e6:48:df:58:b5:c9:25:a0:4a:6c:
e6:72:7a:9d:5a:a2:61:21:5d:dc:db:06:4c:ca:f3:f4:d1:6c:
81:a3:c8:ad:6a:fb:a8:b7:b8:03:21:a8:96:2b:e0:b7:73:9f:
bc:a9:e0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:20 2026 by rpki-client