
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json)
Hash identifier: fckFm4BlMNmxicRJdu031fB9rn38wDM+EFdWTVqBzMw=
Subject key identifier: 87:40:C7:5D:E8:9B:1A:B9:B7:F9:C6:6B:B0:A8:8E:77:12:A4:8E:A3
Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
Manifest number: 014E
Signing time: Fri 17 Apr 2026 05:07:55 +0000
Manifest this update: Fri 17 Apr 2026 05:07:55 +0000
Manifest next update: Fri 24 Apr 2026 05:07:55 +0000
Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: q6VTFKQvg0fIXvtoga3Jd199PegcOiivnGiGWrIG0Ys=)
2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: zIk6J0N0742RdEvubg3AlZvYEvOIg7avsvcbwF9cq9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl
rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34
Validity
Not Before: Apr 17 05:07:55 2026 GMT
Not After : Apr 24 05:07:55 2026 GMT
Subject: CN=69e1c02b-c261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:7f:77:7a:85:cd:2b:c0:4b:cb:96:84:e7:
7d:fc:72:63:26:31:5f:a3:c5:90:3e:d1:cd:9a:bc:
1a:3f:fb:4d:7c:96:05:b3:e6:29:43:88:b2:f8:4f:
5a:53:9d:0c:b1:b6:b5:68:42:4b:5d:fe:35:6c:96:
73:1b:62:3d:0a:2e:b6:ac:3d:ec:2a:46:39:1d:9a:
8c:ee:d2:99:5a:2b:5c:68:29:bf:29:12:06:06:2c:
e9:cc:fb:5f:2e:23:3c:42:4c:28:ee:d6:ec:a2:94:
c6:98:07:aa:72:21:6c:1f:f3:22:5b:64:77:d8:06:
06:80:93:5a:6a:95:1b:7f:15:0f:b9:1a:3c:a0:9c:
2d:c6:77:fb:dc:a1:b1:96:41:bb:cf:8a:d1:4e:fc:
3f:c0:54:ec:77:4b:d6:92:5e:fb:90:20:68:a6:62:
b4:2d:99:3b:e9:49:ac:ae:09:5a:52:12:85:2c:98:
b1:e1:5a:1f:21:24:86:c7:80:3e:67:84:8b:5d:f3:
95:93:6d:36:24:fd:6a:0f:7b:2b:27:cb:40:38:e3:
6e:9f:bf:74:03:97:16:df:8e:96:25:a3:ec:b6:ef:
fd:a7:df:e9:19:78:3f:3c:fb:f7:7b:bc:bf:7b:24:
d8:5a:a4:dc:16:04:96:64:72:b6:53:37:65:13:9c:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:C7:5D:E8:9B:1A:B9:B7:F9:C6:6B:B0:A8:8E:77:12:A4:8E:A3
X509v3 Authority Key Identifier:
keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:26:2f:44:53:0f:83:45:48:4d:89:0b:97:8f:21:ae:4f:28:
6b:f9:f1:c6:44:c7:36:fc:9c:b0:e4:94:17:56:6d:14:d7:47:
0d:92:d3:15:61:e3:f7:f7:10:3d:07:e9:55:c5:f9:f8:2c:8a:
e2:aa:a6:6d:57:9c:13:5a:8c:33:63:61:0c:61:a8:05:6a:33:
0d:57:e5:b0:59:73:61:70:0e:b4:5f:d9:3f:66:a4:2f:f1:f7:
0a:58:9e:f1:a4:c7:b5:d5:28:44:f9:69:81:5b:7a:2e:11:a7:
20:6b:8c:89:03:4b:c6:28:a5:e7:0c:97:f8:4f:55:cd:c9:6e:
39:6c:46:11:cc:0f:a1:b1:51:a8:08:18:4e:b4:ab:30:65:16:
76:cb:92:db:88:6a:1e:5a:cd:57:21:cc:91:c0:cd:04:bd:c3:
09:7e:2c:ca:2e:29:26:a0:48:dd:78:1d:c5:1c:a4:77:3c:2a:
2a:93:2e:1e:40:2b:17:ea:26:4a:a2:7c:87:1d:82:b5:16:c5:
59:c5:67:8a:ab:0f:fb:74:f3:7a:1b:d0:8a:a9:cc:3f:7c:5f:
98:e2:ea:ff:00:2f:f2:c4:c4:58:6e:47:bd:68:d3:07:43:73:
31:25:c6:a5:f1:bf:1b:9a:6d:1a:23:9d:78:c1:b8:70:39:6a:
ba:f2:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:05 2026 by rpki-client