
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
File: MFikabZ9AwcsLYo4Xp8qq7oTTis.mft (raw, json)
Hash identifier: 8mCLQbR6kKtDpZoic0reKmLG3sQpctI8fvx7gq9GlZs=
Subject key identifier: 3E:61:B8:A4:8E:59:86:3E:36:77:75:42:E5:6E:03:C0:A1:C3:DF:88
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 07DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
Manifest number: 07B0
Signing time: Thu 16 Apr 2026 21:25:50 +0000
Manifest this update: Thu 16 Apr 2026 21:25:50 +0000
Manifest next update: Thu 23 Apr 2026 21:25:50 +0000
Files and hashes: 1: MFikabZ9AwcsLYo4Xp8qq7oTTis.crl (hash: OEosBpxxfuFaKJ46ndiNm9sG1yiJG8RigAKrXuFQJ4M=)
2: 446CB34270E711F083707432C4F9AE02.roa (hash: kZy79YthAxUXnqeeWJ0YITudamfKZP7o+VZk50JTteM=)
3: 62884F1AB6CC11EF84CBC45FC4F9AE02.roa (hash: AXDH2N6IFT5Fud9AQTkuO+onQ48n5ZtmHoBIWEhfafk=)
4: 7CA749FCF63E11F080BDB1B6646F56BC.roa (hash: u2rDocooyxiz9s72SCuMZgdQBeeYVSQpawmphR3YaZo=)
5: B791EB5251A811F08D434B5BC4F9AE02.roa (hash: Yv4gel1CvyBk9MP04CS6oXlyji+0CdFjC5TBaKzGRfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665, serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Validity
Not Before: Apr 16 21:25:50 2026 GMT
Not After : Apr 23 21:25:50 2026 GMT
Subject: CN=69e153de-4370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:96:6b:81:c5:ee:8c:9c:3a:c9:26:b3:23:
8c:02:cc:fb:4b:63:16:89:86:d3:da:25:68:6a:6a:
88:b1:f8:f9:eb:bf:e1:88:61:e0:88:23:ec:fb:cf:
e5:ed:d1:e1:ad:b5:66:0e:4c:a3:b9:e7:01:8d:19:
bd:20:2e:b4:d9:c0:35:18:4c:94:6d:d6:ed:48:3a:
fb:64:06:39:8c:1c:a1:f3:7a:66:e8:09:d3:bf:47:
41:e0:08:13:b8:b4:0e:4d:db:c5:e6:0f:2c:54:b5:
5c:7a:f2:4c:79:fe:cc:90:ab:e6:01:1f:2d:e3:62:
44:b7:a3:cd:89:12:bc:33:79:00:1a:40:6d:c0:ef:
ab:b6:a1:34:f0:c5:bc:b3:db:f8:3c:a7:2d:df:f3:
d7:0d:47:fb:db:0a:11:c0:0b:c7:48:c4:c5:a4:a9:
03:f3:75:97:82:05:b7:b6:2f:a7:d2:9c:bc:86:42:
31:ba:e3:3d:33:9a:bf:11:ea:ac:5f:2b:dc:ff:f1:
cd:07:07:e1:66:1d:b5:87:ba:b2:27:a7:e9:7e:98:
50:3d:5a:fe:21:b1:5c:52:41:a6:18:91:c8:12:ef:
d6:3c:6c:15:80:21:80:30:35:c3:a4:59:36:58:ce:
5d:a2:ce:4a:5a:c6:a9:13:ef:cb:7b:f4:0a:d7:30:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:61:B8:A4:8E:59:86:3E:36:77:75:42:E5:6E:03:C0:A1:C3:DF:88
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:3d:37:84:a7:4f:ed:3f:60:8d:c7:c5:bb:25:f7:1c:56:d5:
a0:b0:9f:2d:b7:5e:97:04:90:1a:99:fa:a8:34:a2:37:9b:be:
67:5a:c2:47:3a:82:5a:af:1f:f6:11:94:d6:0a:f7:98:fb:6b:
d8:cb:c3:8e:94:9f:17:28:93:bf:fb:67:fb:cf:25:80:46:b3:
1a:a6:03:03:f9:92:ad:26:27:25:c8:53:d1:c1:50:7f:fd:ca:
87:e5:fa:5e:df:68:90:5e:7f:5e:de:28:72:f1:c6:ef:67:39:
41:e7:7c:b7:53:cb:f1:9c:c6:b0:06:82:fe:7a:39:2d:bf:96:
8f:c6:f7:11:a0:cd:b2:34:e4:3b:e5:c0:ae:b4:cb:57:97:12:
2c:ed:82:6e:a4:cf:0a:1c:2e:9b:b1:d3:78:d8:9b:d4:69:4d:
de:36:e9:79:ba:64:68:35:71:9b:63:c1:69:21:bc:76:c2:4b:
14:e5:ef:a3:2e:13:1a:cb:c4:42:dd:b9:67:a9:ca:19:d7:83:
0a:bc:aa:62:11:77:99:0c:c9:46:bd:4a:d3:64:cf:88:00:8e:
44:c5:3e:3d:3d:aa:a5:4b:48:bb:3b:cc:4a:60:df:79:eb:c5:
d3:51:18:4e:5d:96:0d:d7:f2:9e:89:36:7f:be:6d:25:2f:90:
1a:a2:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:09 2026 by rpki-client