
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
File: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft (raw, json)
Hash identifier: jbkOEOYxYsV1xHDTfGwh2bSrIdSXanEEDxRKrKxtfag=
Subject key identifier: 0C:99:A5:B3:BD:23:61:4C:76:CD:1C:6C:36:54:3F:C4:7F:8D:D1:3F
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Certificate issuer: /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial: 152A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
Manifest number: 1513
Signing time: Sat 18 Apr 2026 16:45:48 +0000
Manifest this update: Sat 18 Apr 2026 16:45:48 +0000
Manifest next update: Sat 25 Apr 2026 16:45:48 +0000
Files and hashes: 1: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl (hash: GHRsIm+4nWUKYryhV1eSScgGA4K/bH8QIikgyc6f3oA=)
2: F693F2689CB811EB97F77E14C4F9AE02.roa (hash: YMv0r7cgJCxpk4HSp8I/SfGyxuRnawMQX2mraCd5KmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 16:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5418 (0x152a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Validity
Not Before: Apr 18 16:45:48 2026 GMT
Not After : Apr 25 16:45:48 2026 GMT
Subject: CN=69e3b53c-fc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:c7:35:5b:b5:b9:17:18:85:a9:47:ec:0d:
9d:74:ca:2c:4d:f1:22:e4:0b:23:9d:7e:f2:8e:94:
6c:65:31:91:62:54:b1:56:3c:eb:c6:40:25:8d:81:
ed:6e:17:76:31:44:9c:c9:00:17:d0:36:18:93:fb:
fa:1c:e6:66:31:01:67:2f:a3:36:0f:0d:f7:7e:ca:
e3:18:34:f6:bb:e6:5f:35:45:2f:c5:62:12:0f:ee:
72:af:8a:b8:72:74:94:42:90:09:c2:ac:c0:32:5c:
67:40:92:ca:65:b9:0c:d1:88:97:a7:2a:82:d5:e0:
a0:3e:eb:e7:fa:3e:ec:49:9f:56:5a:0d:ae:29:89:
9d:51:0f:ef:31:c3:3b:09:82:ba:36:49:7c:07:93:
63:b1:0b:f2:f5:72:fb:1e:76:03:2b:82:11:4a:5e:
5e:9d:5c:04:d4:ee:e7:08:b4:5d:29:66:06:21:a3:
18:5b:24:1a:a6:00:5d:01:66:60:c9:42:26:81:7c:
c5:cf:9d:54:88:0c:ae:9c:83:72:71:85:b0:02:5a:
c3:67:ea:bc:8d:e8:4b:22:9c:fd:76:26:e3:5a:e4:
10:06:b0:10:66:2c:4c:21:16:d5:43:8c:fe:f1:af:
34:91:6a:a9:4e:7d:14:ff:93:1d:09:45:83:78:77:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:99:A5:B3:BD:23:61:4C:76:CD:1C:6C:36:54:3F:C4:7F:8D:D1:3F
X509v3 Authority Key Identifier:
keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:35:c8:bc:31:bc:a5:5d:64:cd:8a:be:f6:9c:8a:50:38:88:
d0:a8:b5:e1:ce:7f:ac:84:aa:60:9d:e3:bd:ba:5a:50:c1:46:
2c:a8:d6:42:49:37:29:9c:24:5c:ea:e6:49:00:d2:95:2e:3c:
37:76:00:45:5a:11:61:24:1c:e6:dc:13:03:37:f5:be:b1:17:
cf:86:37:14:b5:5e:18:b1:04:50:3e:40:a1:f6:6f:65:24:bc:
82:a2:23:7f:55:ff:22:e0:82:0f:a8:12:a0:81:52:25:58:a0:
67:d1:2f:38:0c:93:1d:54:59:6e:84:7a:b3:1b:a9:be:5e:ee:
78:93:a7:36:1c:9b:44:92:63:bc:67:4f:01:10:61:a0:fd:25:
7c:c1:1a:8e:27:47:07:f6:dc:91:b2:bc:f5:8e:e5:54:03:26:
61:9d:e5:8a:f4:a6:a0:cb:ee:2b:99:41:b7:36:44:68:fc:95:
29:02:92:6d:13:03:ac:4e:53:e2:e1:4a:d1:62:42:6f:1c:ff:
b5:eb:df:48:d2:8b:03:34:bd:e2:34:30:52:19:40:b7:96:7f:
9d:b8:22:11:dd:cf:d8:2c:30:90:08:37:73:e3:b9:60:6b:21:
ff:0d:5b:6d:57:7c:91:26:d2:53:45:f7:14:a3:0d:ed:e6:60:
50:26:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:44 2026 by rpki-client