
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File: sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier: jpCnupySDRp7XkqBjEwT1Ys0D0iN+bBOjXrmSlJ9YW0=
Subject key identifier: 86:46:C6:92:C1:08:8A:61:80:FB:5E:C4:E0:DF:90:94:07:E6:75:69
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer: /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number: F3
Signing time: Fri 17 Apr 2026 06:20:44 +0000
Manifest this update: Fri 17 Apr 2026 06:20:43 +0000
Manifest next update: Fri 24 Apr 2026 06:20:43 +0000
Files and hashes: 1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: +rqAG6OW4SXJLFEicADKxyWcdlVMeJVh5RE8mvRGE4c=)
2: 84E249E030D711F1A9283A38AD833773.roa (hash: aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Validity
Not Before: Apr 17 06:20:43 2026 GMT
Not After : Apr 24 06:20:43 2026 GMT
Subject: CN=69e1d13c-948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:54:1f:ac:70:dc:ee:d2:a9:de:3a:c9:e1:
31:96:6f:0e:c0:4c:8f:e8:84:b5:83:16:ef:34:d5:
bb:27:89:19:d3:4e:36:e1:7c:7e:ad:48:6f:98:a6:
38:be:d3:81:9b:e0:d7:d0:13:d9:50:c9:2d:30:20:
7f:17:6e:20:0b:06:5f:29:ab:38:63:9c:e0:2a:ab:
95:01:b6:cf:b1:b6:ff:14:31:7d:9f:2a:2f:6f:51:
c5:ae:d2:88:c1:d0:fc:7c:86:c9:b2:87:d0:51:11:
e4:9d:01:e8:ad:49:d8:39:50:20:0d:56:66:f0:30:
bf:29:fd:1d:6c:7f:c7:04:d4:d1:cb:05:c5:ab:b8:
9e:6e:9c:13:4f:75:56:3a:3a:40:50:bd:06:6f:fb:
54:5c:6d:8b:40:25:28:2e:19:cf:d8:4a:e0:8b:f5:
a7:ab:e4:8d:30:86:24:80:ab:5e:ea:5b:34:5b:46:
2b:84:61:ae:d2:35:90:a0:7c:df:ec:b9:14:0c:f5:
92:6b:7e:8f:98:41:d7:5b:92:8d:d7:17:e0:52:fb:
d6:66:02:56:22:b9:3c:f4:35:a0:79:f1:98:87:6f:
e8:57:ba:5e:8f:47:d6:92:c0:ee:c2:59:93:76:a5:
37:94:54:4c:97:5f:cb:e6:f3:7e:1f:68:7b:07:1d:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:46:C6:92:C1:08:8A:61:80:FB:5E:C4:E0:DF:90:94:07:E6:75:69
X509v3 Authority Key Identifier:
keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f7:e4:b9:a8:5f:f2:83:84:d1:c2:11:3c:5b:8b:22:60:0e:
a6:49:a1:57:ba:a5:f8:6a:3d:c2:f6:ca:8f:c7:f1:c5:99:b0:
7f:6a:e9:13:a8:bd:f5:ba:09:00:42:82:d2:07:53:89:b9:b8:
ab:cc:3b:fa:bb:62:43:26:ce:ec:7d:30:f0:82:6b:24:a8:31:
fb:44:17:d3:2c:f7:36:24:4d:05:46:e6:a4:b3:42:6c:12:c2:
1a:08:fa:4a:8b:75:ea:d5:8d:4d:80:e4:b8:57:20:3c:3f:97:
a0:82:71:f4:0f:34:45:3b:1b:4a:f7:e8:d0:ad:10:a8:11:3b:
db:60:57:43:d8:bc:68:30:d2:13:8e:dc:74:88:3d:ef:aa:28:
88:e1:6f:8a:31:50:2a:c3:94:13:57:17:f0:fd:8a:b6:5f:92:
5a:fb:15:a0:33:41:fc:85:39:4d:6d:f1:a6:1c:d7:0d:95:a0:
64:46:a4:1c:2e:33:fe:7c:ea:b9:1a:4e:e6:aa:08:9c:f6:d1:
af:e1:61:a8:e7:4e:a5:44:44:b2:bd:92:dc:56:9d:e9:9a:8b:
d3:41:f7:85:dc:ff:59:34:b4:07:88:89:9a:5a:38:08:47:14:
c7:93:a6:5c:c6:ba:42:0e:b5:bb:ca:14:94:41:fd:24:d6:77:
9d:e5:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:48:47 2026 by rpki-client