
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json)
Hash identifier: MSrvvZc/S941vkI3LaqccQq25hJBwNwWQouTeBs4nso=
Subject key identifier: D4:B3:17:DE:BA:DC:CE:B9:B0:73:22:5C:C5:16:FA:39:93:06:35:CE
Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
Manifest number: 0153
Signing time: Fri 17 Apr 2026 04:50:39 +0000
Manifest this update: Fri 17 Apr 2026 04:50:39 +0000
Manifest next update: Fri 24 Apr 2026 04:50:39 +0000
Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: X6CkL+LluI4XnJFX6rdnsk0ZIdsKXVdAiaJ7bem2i+Q=)
2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: kDnQaZkgd3eRRV1TX5nuWTf0BQqvLUjGytAokBZ6vug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB
Validity
Not Before: Apr 17 04:50:39 2026 GMT
Not After : Apr 24 04:50:39 2026 GMT
Subject: CN=69e1bc1f-cd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:31:7b:4e:45:8b:eb:67:e4:cd:e7:ee:f2:
24:e5:fb:9f:f6:12:b4:51:06:13:f5:73:71:57:8d:
6f:c6:52:ba:a0:b4:b0:93:b3:10:ee:28:4a:b1:2b:
a9:fc:d8:ff:09:22:6e:b3:4e:e4:8c:ae:44:a5:3e:
2d:4b:1d:ac:8c:3f:3e:e3:02:7d:41:eb:48:bc:79:
59:ee:7f:e9:a5:cb:f4:29:57:e8:f4:a5:dd:7d:d7:
b0:55:82:1d:f3:1d:b0:1c:f8:d7:ec:89:ae:4e:87:
19:23:a3:a2:03:32:fd:67:c9:f3:da:a4:ea:21:6d:
4d:5b:2f:2a:96:4e:d0:f7:6a:58:d8:39:b2:33:64:
18:d0:b9:36:99:07:22:51:9e:bc:c8:1d:35:a0:ac:
33:a1:93:f5:c8:31:d9:20:3b:43:c1:56:95:2b:78:
d8:28:c3:a9:e1:45:04:1e:ca:46:68:11:39:e0:9e:
03:64:73:14:e7:4a:d8:c5:92:22:2b:e1:3a:7e:9e:
ae:06:87:41:d2:0d:cc:dc:8a:b5:14:2c:ed:41:ef:
37:98:3b:76:8a:c2:02:00:65:7e:84:2e:a4:66:1e:
80:05:07:ec:9b:6b:8e:f2:83:60:fb:33:72:d9:d3:
83:85:db:b2:d2:30:b7:05:06:8e:f7:70:67:03:c8:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:17:DE:BA:DC:CE:B9:B0:73:22:5C:C5:16:FA:39:93:06:35:CE
X509v3 Authority Key Identifier:
keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ab:76:c7:fa:04:18:e1:9b:ab:27:d9:e9:1c:75:b5:b0:68:
b4:20:3a:8f:a3:c5:30:02:30:f7:ae:70:ec:fc:45:24:7c:37:
89:15:f9:0f:3b:e1:06:4e:07:0e:32:1f:d4:93:3e:87:8d:ed:
99:02:c3:98:fe:be:a9:0e:4d:a1:86:a7:ba:a0:d3:38:0a:28:
fa:ff:e2:3d:a5:f5:65:26:48:a6:04:dd:b3:23:38:f3:65:da:
7e:51:cc:6a:65:84:2e:b6:42:7c:dc:ea:6c:ed:2b:84:a4:9c:
98:a1:09:5b:41:b2:bc:bf:f9:b6:e1:ed:ce:28:ff:01:2a:0f:
5b:81:db:08:17:93:f4:7e:6f:8f:64:09:ea:07:f5:69:73:c6:
fe:fd:da:b1:e0:36:5c:5c:e7:de:cb:a4:59:a3:23:89:94:bd:
38:39:c6:ad:be:c9:b3:23:56:bf:d2:ec:ef:67:08:68:ed:6a:
ad:85:34:65:69:0c:98:d2:3c:e7:1d:8b:4f:7d:b4:13:c7:f2:
95:e4:a5:61:dc:e5:3b:e9:68:5e:61:d7:97:d2:d8:00:08:93:
01:08:e2:b3:65:eb:a5:b2:de:60:2e:a7:84:b0:29:66:05:a7:
9d:8f:8c:f3:94:22:1f:ed:4d:50:31:0c:ac:91:8c:e7:f8:22:
46:85:50:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:01 2026 by rpki-client