
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json)
Hash identifier: kQ/CoUguFDwhMrEU3ZvFDyBxgW7kA0cpE/Int3b14/Q=
Subject key identifier: 75:CC:18:21:8E:4F:FB:3C:45:EE:67:64:C0:2D:6F:9E:3F:AB:DC:60
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial: 2355
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
Manifest number: 2343
Signing time: Thu 16 Apr 2026 15:47:45 +0000
Manifest this update: Thu 16 Apr 2026 15:47:44 +0000
Manifest next update: Thu 23 Apr 2026 15:47:44 +0000
Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: qvQbs+Y3HtqUmvRWtv48L3qw1FWLvsNhMkxbD3qL5s4=)
2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: M/O1J1VLRBP8Yu48SR4HhSAZfmBAh2lLp+RQu6a6E8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9045 (0x2355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Validity
Not Before: Apr 16 15:47:44 2026 GMT
Not After : Apr 23 15:47:44 2026 GMT
Subject: CN=69e104a1-e708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:1b:89:f4:93:cb:11:7c:b3:10:58:fa:8e:
7f:90:68:d8:83:6e:ff:3e:12:6c:b5:b6:0f:03:e0:
69:2c:62:99:f7:82:b8:ea:51:a6:9c:24:f0:61:24:
8c:1d:0c:47:d1:30:6f:80:92:ca:43:96:26:c9:90:
8e:72:3f:2c:a5:07:17:96:f1:b8:c8:5d:4e:ab:f6:
40:a2:70:c6:f0:2e:7a:ac:2d:55:c1:4b:ca:66:c4:
7b:a1:07:8c:ad:71:ec:6c:16:39:bf:7d:7c:3b:03:
16:0a:b7:82:9e:9a:5a:58:7a:c6:94:56:cd:4d:59:
e9:73:ae:16:38:22:ae:91:89:f3:57:03:de:18:5d:
85:cf:b4:a5:aa:3e:e2:ca:fe:4e:79:33:0b:12:20:
b6:e6:4e:f8:94:96:ac:46:68:40:32:34:bf:e3:7e:
34:95:f7:40:05:08:d4:b5:bd:4e:40:34:47:3d:19:
3d:a7:d0:92:7d:a5:2b:5b:a9:1d:01:a7:f1:1e:76:
c2:4b:aa:89:cb:f3:47:9a:de:b7:43:ed:79:70:e2:
73:98:f5:13:a3:d2:54:31:67:6d:bb:f3:c1:de:a1:
1a:dd:c2:ad:11:75:43:c4:99:a1:b1:35:7b:a0:07:
70:ab:7a:e7:00:f7:01:9a:0a:14:26:00:5f:7f:91:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CC:18:21:8E:4F:FB:3C:45:EE:67:64:C0:2D:6F:9E:3F:AB:DC:60
X509v3 Authority Key Identifier:
keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f2:12:18:14:97:cb:63:71:37:56:e8:1b:bb:c5:49:da:64:
28:50:80:33:6f:1e:72:f7:e4:69:9d:9c:00:d0:bc:3f:93:db:
8f:bd:62:2f:2e:dd:a4:f7:a0:91:89:1b:4b:1c:8f:5e:70:52:
35:f2:da:1f:57:73:99:17:d6:ea:9b:c6:13:e6:30:cf:ed:65:
14:d1:41:c2:d3:0e:7a:a5:30:ef:b8:d3:97:9a:b1:4d:7c:b2:
de:1e:41:1f:98:9f:14:cf:1f:59:82:5b:97:ca:e0:b9:e5:d3:
f2:eb:6b:e0:23:f7:19:9e:91:1f:30:f4:54:e5:10:1d:e1:87:
cf:23:d7:57:30:f9:38:1b:32:a0:fc:a7:15:4f:82:b9:cd:f3:
51:8e:e7:b8:aa:55:c9:93:5b:8a:f1:d8:b3:4d:42:cd:d7:a7:
14:b3:5f:6a:a4:d5:9b:b0:42:6d:56:7e:0f:15:f1:c6:57:ed:
99:86:99:36:94:e4:c2:76:af:6e:66:e7:1d:ae:37:34:7c:b9:
54:86:22:eb:a8:7e:69:8f:72:f5:dc:c7:d2:68:56:09:f6:77:
d4:49:e5:bd:56:11:82:01:62:b4:dc:1f:5f:45:ee:6e:f0:42:
04:41:2a:da:5b:e5:24:70:9b:48:0f:17:0f:e0:0a:55:48:e2:
54:69:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:43 2026 by rpki-client