
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
File: F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json)
Hash identifier: Zpj6IOtzuSop9Ma7OS8pynbuvk0ZV5W0cbI1MrHI4+I=
Subject key identifier: AF:E5:52:5D:B2:82:5E:03:09:7C:9F:F3:BE:D6:B0:9F:CB:42:06:50
Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
Certificate issuer: /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
Manifest number: 0133
Signing time: Fri 17 Apr 2026 05:16:12 +0000
Manifest this update: Fri 17 Apr 2026 05:16:11 +0000
Manifest next update: Fri 24 Apr 2026 05:16:11 +0000
Files and hashes: 1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: 95lUa8A1221pfdin11UwjOkVoLarb4WkwBh+ND98phk=)
2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: Sy6cRszkN1joBse3YSNJ6ZAfwoikvcSiyyXdPrmFTpE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Validity
Not Before: Apr 17 05:16:11 2026 GMT
Not After : Apr 24 05:16:11 2026 GMT
Subject: CN=69e1c21b-679b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:9b:07:c8:11:f5:ac:ee:d9:1c:53:b0:32:
f2:3a:57:10:c9:46:5d:2a:bf:bf:0a:a9:28:d5:a1:
cd:97:29:23:be:26:1f:68:74:a8:40:0c:8d:c7:0e:
90:6c:1a:ba:65:bf:db:32:a3:4c:21:27:84:df:80:
33:07:99:43:22:ca:b9:96:d3:6e:d2:6d:db:b7:71:
5f:77:92:90:fd:6c:32:4d:12:aa:cd:80:aa:a4:68:
f1:60:b7:8f:5e:30:64:bb:46:29:00:f6:b1:7e:13:
b8:3c:3d:d1:0a:79:ce:de:f3:1b:3a:6a:39:d7:b7:
cd:0e:7c:1f:f9:7a:97:06:e1:87:6d:aa:d4:ab:c0:
2f:04:45:56:e8:b2:02:62:8d:76:29:70:77:1f:6e:
18:a8:8b:2e:b4:fc:ab:49:be:5a:da:ac:83:7e:e6:
77:f9:20:45:d5:d9:32:62:a0:f7:aa:75:de:f1:df:
f2:9c:5e:24:7c:66:0f:d0:c7:39:c4:e6:f8:af:81:
27:c8:fe:ac:c3:7e:c6:38:ab:a6:6f:31:60:71:48:
19:5c:61:ba:3e:33:6a:3c:0b:35:17:67:67:15:a7:
e0:d3:8d:46:4f:56:88:77:96:2b:80:14:b2:06:4e:
86:74:68:85:af:1d:5a:05:73:19:29:a1:db:cb:43:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E5:52:5D:B2:82:5E:03:09:7C:9F:F3:BE:D6:B0:9F:CB:42:06:50
X509v3 Authority Key Identifier:
keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4f:24:7f:d3:01:a8:42:92:55:54:88:83:a3:94:12:00:98:
a9:8f:0b:6a:ec:52:0d:ac:db:df:db:6b:3e:bb:67:16:a4:aa:
c2:4f:c8:d3:35:dd:63:cc:66:43:43:d9:ed:e4:71:b0:6b:27:
5b:bb:fa:da:92:5c:b6:b0:4c:f0:b3:9e:f4:db:d8:ca:0e:da:
fa:20:40:57:09:12:ca:a5:0b:6d:bb:de:6c:96:27:6b:1a:f6:
fc:00:de:93:4b:25:de:94:ac:e8:8d:ac:bf:54:37:d2:5d:ff:
21:6c:6d:03:ca:f5:34:63:b0:32:00:20:1b:ba:19:98:25:41:
14:88:37:9c:ce:7c:b8:b8:a0:4d:3c:a5:26:aa:1a:66:f0:58:
08:80:a8:2e:c3:d5:2a:10:8d:b4:92:1a:a2:c6:80:26:fb:fd:
63:27:c5:ad:54:c7:e2:20:84:3c:75:37:69:31:29:35:5f:25:
b3:f0:1a:fa:ce:85:9f:2c:8e:fa:7e:23:a6:87:e4:22:62:3a:
b4:4d:bc:6f:3d:38:38:90:2f:54:4e:02:dc:2e:a1:80:db:0f:
ee:cb:50:15:3d:d6:4a:50:88:f4:1e:75:7a:75:c9:7a:e6:87:
d7:c7:75:02:f0:54:93:7a:ed:89:d0:9a:d3:0f:b8:d8:6c:04:
ee:c6:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:32 2026 by rpki-client