
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File: cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier: upbWESNE7bFrnjnsF93BiJQlgXtI8EZOo0ifUFIKS60=
Subject key identifier: BC:51:68:A7:4D:23:AC:4C:F5:98:73:12:18:1F:E3:D6:C9:1F:87:BE
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial: 07F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number: 07DD
Signing time: Thu 16 Apr 2026 21:14:01 +0000
Manifest this update: Thu 16 Apr 2026 21:14:01 +0000
Manifest next update: Thu 23 Apr 2026 21:14:01 +0000
Files and hashes: 1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: oYlBAmvOutRgqlvGpPcPM3gstJ1UfU2cMDdnsPJVVOg=)
2: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: CTWOd8KheR3keIlbrNxRArJRmdo8CaaRry2+oBpk3yU=)
3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: QBJiXn1vmmVOKa4Qn9zvdWt1huYz5jaSfTVbrGzUrJA=)
4: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: f5hhJw4iBxxWOy12bw08irJ3HIRgdS2JYxiH6LKMToo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034 (0x7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Validity
Not Before: Apr 16 21:14:01 2026 GMT
Not After : Apr 23 21:14:01 2026 GMT
Subject: CN=69e15119-c694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:b7:ef:47:85:a1:04:ef:3f:19:de:2b:9a:
d2:ee:f4:19:9c:5b:e2:fe:19:70:ed:b8:c2:7d:81:
75:2c:0b:3f:2e:57:b1:f1:7e:47:38:8a:38:65:94:
2b:9a:f1:09:01:aa:ac:00:e7:a8:27:4a:20:84:0f:
d7:3b:52:27:4a:7b:ed:1a:f3:30:53:76:58:69:57:
57:a6:3d:0c:30:6f:b6:a4:f1:1c:59:a2:83:95:72:
04:d1:b5:57:92:49:a0:e1:59:d1:75:39:96:5f:02:
86:46:02:03:50:be:04:17:b4:8e:38:02:27:79:47:
db:da:c3:ff:1a:7a:1b:a2:f2:c3:49:1b:3e:fa:00:
45:13:78:22:2c:9c:1d:a6:cb:7f:09:e7:ae:20:8c:
69:82:8c:87:19:bc:d3:77:86:c2:d1:ad:d0:d0:c8:
e9:fe:f7:cc:bc:8c:90:20:6c:4d:fd:1c:b0:86:11:
48:78:ee:15:3a:7c:5f:d2:61:af:a0:dd:12:4c:44:
b7:74:8e:0a:3b:76:d3:a4:53:db:0b:bf:e9:e0:40:
29:a2:0b:51:1f:c2:05:96:bb:cd:f9:1b:e1:87:bf:
c6:9b:03:3b:be:f9:91:e4:de:af:69:2b:9c:95:b9:
c9:7e:30:f6:ff:fb:5c:d9:23:5e:74:7c:68:81:b6:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:51:68:A7:4D:23:AC:4C:F5:98:73:12:18:1F:E3:D6:C9:1F:87:BE
X509v3 Authority Key Identifier:
keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:7d:cf:25:e6:a6:7f:73:10:cc:88:c9:d7:06:3d:54:a6:1c:
74:58:28:4d:f3:65:84:e8:c6:51:67:c8:a9:fd:6c:cf:4a:8c:
8f:c9:49:b7:33:23:ab:58:06:fe:50:f7:13:a6:0b:ba:0d:ae:
de:52:eb:af:03:88:f6:58:cc:5f:d9:d1:f1:d0:ed:7a:7c:8a:
96:27:a9:e2:0a:20:4b:de:07:d0:41:1c:93:a6:98:09:e2:b0:
88:f5:5c:a8:55:06:c8:c7:f6:dd:c7:7f:d9:85:3a:84:c5:44:
8f:05:07:a4:a5:de:3c:c8:12:f1:9e:2e:79:59:5c:dc:1d:b3:
d5:0e:3c:28:74:21:19:87:f4:c8:30:3c:39:db:60:32:10:9a:
69:a4:d5:f1:65:60:d8:7e:e7:5b:09:f1:5c:ee:68:54:3d:c0:
b7:70:75:09:1f:c1:73:2f:69:29:35:da:63:03:77:43:00:b8:
15:14:18:23:60:92:c5:aa:6d:e2:bc:01:16:26:6d:62:e3:f0:
cf:c5:d6:c0:03:a2:39:9b:e7:6a:50:c7:a4:27:4e:b7:0f:1c:
ef:26:05:f8:99:a6:15:26:bb:54:f5:b6:8f:4a:6f:ff:19:17:
65:42:ab:c1:f2:b5:7d:14:98:38:27:64:f6:4c:57:87:ce:f5:
df:3c:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:30 2026 by rpki-client