
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
File: R2e2k72EYu6vqD2egDydKGtiHcg.mft (raw, json)
Hash identifier: lIOz/AibgvEQqh5oNGy/8Cu9CWNC8jUozaqEwvM3fQU=
Subject key identifier: 40:DA:B6:BB:57:7D:06:74:60:99:BF:AE:58:7F:C5:E3:F7:5F:29:B1
Authority key identifier: 47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8
Certificate issuer: /CN=A91F9B6C/serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8
Certificate serial: D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
Manifest number: D5
Signing time: Fri 17 Apr 2026 06:25:04 +0000
Manifest this update: Fri 17 Apr 2026 06:25:04 +0000
Manifest next update: Fri 24 Apr 2026 06:25:04 +0000
Files and hashes: 1: R2e2k72EYu6vqD2egDydKGtiHcg.crl (hash: 3tBoPBIeCKnjTH/xZTskxZiF8tmZ+AGqFIsu6v1By3E=)
2: 3D60B6FCFA5E11EFB84AF068C4F9AE02.roa (hash: NN7TdFNt1WRW/52kOM2Hp51nX3VWKqgOLsvUo4lFNA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl
rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9B6C, serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8
Validity
Not Before: Apr 17 06:25:04 2026 GMT
Not After : Apr 24 06:25:04 2026 GMT
Subject: CN=69e1d240-151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:59:e3:4f:83:e2:d0:7a:6d:fc:c4:5d:83:
5e:6e:85:da:71:0a:56:f3:b3:5b:ad:6f:14:97:12:
26:1e:13:43:34:e9:69:13:48:0d:37:81:3c:e9:a2:
c4:8b:88:92:da:53:48:c7:52:3a:1c:68:21:1f:92:
1b:26:eb:78:37:b7:ff:3a:4f:b1:31:ab:b4:93:7e:
2d:c7:34:93:f4:89:5a:40:72:67:f0:29:e4:61:dd:
65:16:3a:ae:f5:84:55:a9:49:6a:39:3a:83:4b:af:
30:83:f3:2e:af:fd:d4:b4:06:be:f0:13:fb:00:40:
68:de:2a:90:30:2f:61:41:46:6c:5d:13:34:5c:cd:
2c:38:e4:e7:02:52:e3:de:d5:32:85:ff:78:da:94:
ff:b8:c4:b6:be:86:da:54:5b:f4:41:4d:62:0f:07:
a1:ba:ed:80:f2:fa:ef:e1:ae:e7:3c:8a:de:b0:e7:
47:51:be:e7:93:d9:e2:c9:76:a6:dc:85:26:fe:49:
3f:1a:17:b4:3a:65:f6:16:56:63:1f:67:62:20:79:
64:95:c7:e4:4a:27:7e:cc:c4:5e:7e:7f:bf:24:98:
77:82:9b:bb:17:47:d7:2c:a1:18:19:a8:3a:d8:da:
01:4b:fe:b7:53:e6:91:96:13:13:dd:a8:6d:c6:b9:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:B6:BB:57:7D:06:74:60:99:BF:AE:58:7F:C5:E3:F7:5F:29:B1
X509v3 Authority Key Identifier:
keyid:47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:33:68:35:00:4a:57:39:bd:9d:dd:c4:d2:22:13:43:0b:cd:
18:b5:f1:6c:e8:a9:2d:62:bc:c7:e7:f0:2a:b7:5f:af:fc:e1:
f4:3f:4b:f6:46:bf:7d:a6:cb:0d:eb:61:cf:ef:15:5f:21:9c:
8d:c8:58:0a:d2:77:94:a1:5a:2e:a5:29:fa:f5:1a:59:7a:67:
af:c9:33:b7:fa:55:9c:7c:1f:0e:f5:82:a5:05:9f:36:fc:c8:
6b:88:0b:23:0c:4f:14:87:1c:fe:15:c8:9d:65:11:2a:20:69:
99:fe:5e:91:60:57:a4:48:7f:23:52:7a:18:ee:44:de:db:45:
12:b9:9f:86:97:86:c1:03:ea:60:ee:9b:56:73:5a:51:23:6a:
ff:66:58:d9:c1:f3:79:72:4c:e1:ac:20:ae:67:96:28:7a:c8:
70:3c:20:6a:b1:25:1b:0d:43:e6:9a:55:ec:b2:8a:d7:a5:1d:
9d:f1:fa:0c:4a:46:b1:ae:4f:84:c4:b1:12:78:99:62:4f:88:
62:b6:99:24:33:de:c5:68:6b:de:76:8b:6e:98:6a:ca:8f:b4:
78:81:ea:aa:5b:43:ca:58:02:ed:ee:75:72:df:91:13:04:92:
f2:d8:3a:bb:fd:b0:79:92:ec:4e:7e:27:9f:ff:b1:eb:1f:4a:
08:bd:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:40 2026 by rpki-client