
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
File: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft (raw, json)
Hash identifier: u8gPBwsWr8sTKwaiJeyDcQu913bqVCpKoSrEPdm5aos=
Subject key identifier: 6B:6B:47:C9:E4:28:B9:5D:66:24:CB:BB:31:A1:12:B7:6E:49:FD:EE
Authority key identifier: D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4
Certificate issuer: /CN=A91EB820/serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
Manifest number: 8A
Signing time: Wed 15 Apr 2026 07:10:32 +0000
Manifest this update: Wed 15 Apr 2026 07:10:32 +0000
Manifest next update: Wed 22 Apr 2026 07:10:32 +0000
Files and hashes: 1: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl (hash: I0PR45WYwR6MDLqSEpR138p0GniSyq3+hOIph1sMOjw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl
rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB820, serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4
Validity
Not Before: Apr 15 07:10:32 2026 GMT
Not After : Apr 22 07:10:32 2026 GMT
Subject: CN=69df39e8-bf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:da:ba:2b:cf:59:82:81:68:50:d7:6e:9e:
bb:42:67:8a:28:97:69:c7:30:b5:47:4f:03:e0:7d:
39:19:f7:ee:0a:0b:60:12:f1:64:f5:bd:a3:ee:b6:
c5:6c:b2:b6:67:04:0b:2d:79:65:34:b9:84:60:44:
b4:90:98:82:ac:15:3c:16:25:50:4e:03:d2:15:48:
1e:d1:7d:dd:f0:87:1a:04:4f:81:6b:a9:7b:d5:9b:
ac:9d:82:21:58:0b:b1:82:a9:57:11:40:02:19:a4:
7c:0d:f3:36:a2:3d:d4:35:41:9f:17:41:04:43:14:
cb:9c:d4:b3:8f:85:98:b1:69:40:70:b1:bf:c2:51:
1b:a9:a9:7b:f3:42:b1:13:57:d8:da:5c:c6:01:f7:
ba:3b:bd:69:65:50:9a:d3:e4:79:a8:99:2f:aa:71:
2c:86:17:78:85:86:ac:01:e7:72:3c:17:06:73:b3:
c9:be:bd:f1:a1:95:f5:8f:28:e8:86:8c:8c:73:2b:
b0:59:67:e4:ae:af:be:01:e5:89:54:db:4b:33:dd:
db:1a:8e:6f:36:51:cb:c0:1a:7b:28:de:e9:0f:80:
4a:a5:5f:75:8d:19:2d:f1:f6:60:86:72:1b:45:fe:
98:28:fa:99:9d:bd:e2:7b:4c:00:75:84:ea:18:b5:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6B:47:C9:E4:28:B9:5D:66:24:CB:BB:31:A1:12:B7:6E:49:FD:EE
X509v3 Authority Key Identifier:
keyid:D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f4:9d:e7:36:2f:58:42:5f:cd:b3:be:ec:82:dd:76:23:30:
10:a0:50:20:62:d2:22:0a:81:20:5b:44:9c:54:3a:56:88:13:
5d:3a:97:ea:08:c9:82:48:8f:08:45:4c:90:78:29:45:54:99:
d6:4a:f2:75:c4:11:da:a2:b5:d2:74:04:e6:c8:44:c3:2e:cf:
6f:37:fb:15:e0:8f:bd:03:8d:fa:be:be:d9:55:23:1b:3c:61:
d1:1c:7e:76:89:ee:74:d5:b9:b8:59:4b:98:0f:15:7e:c7:b5:
48:fb:d1:5f:21:f7:57:a3:27:26:3c:13:b6:07:4d:68:e6:80:
62:60:04:42:85:c0:74:3f:05:e4:23:fa:07:34:c5:90:aa:27:
ac:76:9d:92:3d:55:1b:4b:8c:03:6d:68:8c:59:54:e8:fb:6c:
9e:27:86:9d:95:11:33:7d:3d:b9:ea:8c:0d:ff:65:41:e3:60:
4b:0c:35:62:bb:a7:c5:d7:b7:e4:7d:84:92:ee:03:be:2d:54:
dd:cb:21:d9:08:e6:db:3c:fb:13:c4:f8:c0:bd:1c:4c:a8:af:
c5:e2:bf:cd:1f:e3:f7:a3:43:e8:a0:d3:d6:ac:e2:e3:f9:37:
46:29:4a:8e:06:19:4c:2e:f0:21:07:e4:07:7c:1d:3f:6e:09:
fa:80:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:57 2026 by rpki-client