
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
File: o0Zki0rfT8W0d8faLPBbFoQ3210.mft (raw, json)
Hash identifier: INbs35NA7UISgvoZNrJxfE5yyAt6i5eQiLBOhNbOHjc=
Subject key identifier: 86:93:EC:50:E0:F5:DE:88:13:E6:63:15:8A:FB:85:1C:EF:04:21:63
Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
Certificate issuer: /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Certificate serial: 2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
Manifest number: 27
Signing time: Wed 15 Apr 2026 08:24:58 +0000
Manifest this update: Wed 15 Apr 2026 08:24:58 +0000
Manifest next update: Wed 22 Apr 2026 08:24:58 +0000
Files and hashes: 1: o0Zki0rfT8W0d8faLPBbFoQ3210.crl (hash: ND7jSleYY8iaP83K/7HrvmjnQNDLgQ0VNNOQK9wSSNY=)
2: 82DA388A0F7911F1809984312C3D8C67.roa (hash: DwV5RyDcCjRsx1pQK6SE6C7k8xmybS0fqEBWiL5+TBM=)
3: 836B482A0F7911F1809984312C3D8C67.roa (hash: TwW5dd+M0PGrRvNWJtYRZ8DHnqNKe/MUb3Dt0nluACA=)
4: 825697D20F7911F1809984312C3D8C67.roa (hash: zwLj1p60QJZhGqM9OFrvvmZ63ABgfQGgbVPoX25wiFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D
Validity
Not Before: Apr 15 08:24:58 2026 GMT
Not After : Apr 22 08:24:58 2026 GMT
Subject: CN=69df4b5a-b744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:0d:24:86:78:cb:ab:00:6e:e6:4a:69:26:
fe:85:a1:78:b8:40:44:ff:8a:d8:63:17:d3:3f:08:
8f:b8:94:d6:ba:ed:a5:0c:a7:0d:a1:4f:ab:bd:65:
c2:47:b3:74:db:7b:37:24:5c:37:b3:e7:71:8c:6b:
ef:92:db:88:04:3a:fa:51:b4:2f:d0:9d:9e:58:40:
d4:86:48:1c:fe:06:01:62:05:8b:9a:93:68:0b:04:
be:5c:e4:ec:58:46:aa:91:3c:ca:1d:f0:16:2d:69:
cc:01:18:b9:a1:f3:6f:47:b7:a3:7f:c0:19:9a:4d:
63:4f:d9:5a:17:2a:a5:04:f1:02:79:7a:e0:d2:48:
db:3b:ff:f1:1e:43:24:07:fb:22:07:75:75:e8:93:
97:f9:d7:db:eb:7c:c7:1a:4e:1b:74:5f:5c:67:a2:
b6:1a:1e:1f:f1:59:57:a2:43:d2:a9:36:4b:e9:83:
6b:2d:d2:67:06:4f:1f:62:28:6b:f3:62:2e:05:3c:
3d:fd:f3:75:d8:d9:f6:70:d9:c2:29:ff:8d:59:4a:
13:56:a5:ab:e5:1a:3d:53:d9:ce:66:1b:74:09:8f:
84:13:19:8a:d5:ad:d6:65:20:c3:b0:f5:2c:30:8b:
f1:89:63:cd:63:50:5c:05:cf:a4:d5:80:9c:7f:49:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:93:EC:50:E0:F5:DE:88:13:E6:63:15:8A:FB:85:1C:EF:04:21:63
X509v3 Authority Key Identifier:
keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ed:87:2d:a8:54:5a:e6:2c:1f:2f:32:72:fb:93:b4:92:17:
50:e0:0d:29:07:db:ff:b3:ad:57:3b:b9:7b:83:ae:58:06:98:
bc:93:72:d8:7d:84:92:df:5f:ce:b9:92:79:f9:af:93:f6:69:
6d:f8:d9:c8:d6:9b:28:2f:df:87:42:10:90:e3:01:22:ab:88:
c8:4b:c8:13:d2:7a:19:48:c1:6b:94:95:1c:2e:d0:b0:79:9c:
d5:cc:7a:ec:fa:0c:96:d9:71:25:9e:1d:08:27:24:36:4f:b6:
1e:f4:c6:7c:47:e9:9d:17:42:8e:f4:90:64:e0:dc:20:57:47:
3b:d8:69:c3:f0:22:4e:5d:79:6a:f3:77:2d:fc:72:d3:8a:a8:
26:bb:f9:f6:d3:79:56:f6:7b:6e:22:e4:2f:1d:33:f6:4e:e4:
81:e7:c4:e6:8f:2c:70:00:86:a2:d4:eb:82:1f:88:6e:ff:1d:
04:30:46:da:a1:d4:4e:c5:f8:31:7e:29:84:e8:48:ff:b0:f7:
1b:f4:25:2b:e9:2c:c2:b8:ae:14:c7:39:69:b2:9a:ee:f2:6c:
d8:25:73:03:3b:f5:35:54:d4:26:fa:12:1e:27:cf:7f:d4:3e:
70:1f:17:b4:ce:a5:72:75:9c:f6:92:fa:13:47:fa:09:56:17:
cd:f7:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:54 2026 by rpki-client