
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json)
Hash identifier: EBFviLFCPJiIP4qxKW9e3eHb/uwdbZX347lCe15j2lM=
Subject key identifier: ED:C4:1F:07:F2:28:3E:E7:63:C0:0D:07:F3:34:D3:F0:78:C9:FE:B2
Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Certificate serial: 063A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
Manifest number: 060D
Signing time: Thu 16 Apr 2026 22:55:43 +0000
Manifest this update: Thu 16 Apr 2026 22:55:42 +0000
Manifest next update: Thu 23 Apr 2026 22:55:42 +0000
Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: 7MBaUUITJyVz4D6UygEOvxXH5R2EkCugGKGY+evm8s8=)
2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: bH1L9ZSWpulV/YHi19WJkDCesjZJBYuj3hbuB5QanKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1594 (0x63a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Validity
Not Before: Apr 16 22:55:42 2026 GMT
Not After : Apr 23 22:55:42 2026 GMT
Subject: CN=69e168ef-70b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:37:e6:d7:9c:da:0b:c3:a5:22:2c:87:00:
e4:db:a6:a5:78:f3:86:c7:ac:42:b1:bf:71:5d:d9:
0b:dd:d9:d7:18:cf:31:91:0c:c3:91:30:90:47:21:
87:c2:f8:88:73:61:bb:19:86:75:8c:17:b9:2d:a9:
4b:b0:6e:3d:4c:b8:05:d0:09:d2:77:37:37:16:c6:
4b:29:39:fa:05:e4:34:28:32:3a:0d:60:22:92:f0:
22:0e:4a:c6:2d:03:99:ae:f3:3f:ab:04:04:67:e0:
78:67:5c:65:1c:7c:91:6c:23:26:75:cf:86:cd:b4:
c3:d5:25:c6:a4:7c:8c:c3:59:46:51:96:7e:67:4a:
1c:f8:35:95:8c:a3:61:76:d3:01:1d:a5:6d:be:30:
48:c6:6a:2c:3a:91:ca:38:b3:0c:f7:82:21:8f:2b:
58:7d:64:bc:6a:1d:f4:44:63:42:2a:37:45:42:15:
83:01:3a:a1:28:fd:b9:de:ee:3c:47:30:50:be:c4:
67:c9:4d:d6:df:27:d7:9c:e0:6a:8d:84:b9:52:1a:
b5:93:6f:b3:ef:3b:85:07:19:4a:b5:7d:df:10:61:
6d:8d:12:c7:ee:c8:95:1f:51:d9:ba:68:5a:3d:24:
94:b2:2c:8d:b3:48:ca:cb:78:49:04:23:47:bf:22:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:1F:07:F2:28:3E:E7:63:C0:0D:07:F3:34:D3:F0:78:C9:FE:B2
X509v3 Authority Key Identifier:
keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:26:25:87:74:cc:81:95:59:a5:65:af:04:31:83:d7:07:de:
cf:71:b0:d0:49:e7:d8:91:b0:4e:f5:ed:aa:3b:7f:b1:b7:3b:
48:4b:5c:8c:7e:e1:5a:39:7d:84:06:5b:b1:46:fe:11:5a:bc:
37:25:15:30:78:14:3e:53:d7:47:f4:2f:29:73:27:af:67:9f:
02:42:89:d5:9a:7d:8f:45:d9:b8:ce:41:9b:f0:c1:86:0b:e8:
bd:83:39:fd:b4:8d:f2:42:70:2c:67:db:dd:2a:1f:1c:72:53:
02:54:8b:d9:d4:48:9b:ce:89:c8:ef:2c:3d:99:d9:46:c4:66:
ff:60:da:91:32:4a:5a:67:c1:36:04:dd:28:21:dc:d9:e7:2d:
04:db:a8:be:2a:c3:64:9b:39:9d:be:b4:42:51:33:fa:eb:83:
fd:65:e8:0c:82:e0:b2:62:a6:8c:09:77:52:25:70:0b:c9:09:
4a:12:2f:6f:0f:90:6c:db:32:c6:44:7b:36:c3:95:d6:52:b0:
59:d6:c2:b8:d2:49:74:57:67:3e:3d:0d:c9:18:51:2c:f1:6c:
a3:91:1f:6d:83:fc:f8:90:eb:07:2e:a3:09:76:4d:cb:e6:8a:
e0:7e:6f:cf:99:f5:3c:8e:29:63:5d:1a:f7:0f:ac:bd:93:9b:
62:fe:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:23 2026 by rpki-client