
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json)
Hash identifier: EGEagErAjVfKhxWqchydZzmR/bz09xCVdvDee1e8TTY=
Subject key identifier: F5:AB:E6:F2:59:20:F5:53:27:76:7B:39:C4:57:12:53:BE:24:A6:52
Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Certificate serial: 0AD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
Manifest number: 0AD2
Signing time: Sat 18 Apr 2026 19:18:38 +0000
Manifest this update: Sat 18 Apr 2026 19:18:38 +0000
Manifest next update: Sat 25 Apr 2026 19:18:38 +0000
Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: nYAB45qyTQVSO5auRp6mgMzaV7NjmGVF7P4I+ge7kOQ=)
2: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: h3ulFk49Rm6PN3v20dTyyirREDU7f9uOVa0xWMwIDh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53
Validity
Not Before: Apr 18 19:18:38 2026 GMT
Not After : Apr 25 19:18:38 2026 GMT
Subject: CN=69e3d90e-7152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:6d:a3:04:b9:fe:e1:25:a2:3d:3a:1c:87:
b8:82:b5:15:93:eb:9c:4c:db:1c:35:ea:91:e8:03:
8e:55:4b:eb:44:e4:ed:36:2c:92:ce:fa:77:e4:ae:
80:0e:d8:30:5a:7a:bb:64:22:84:2a:5d:2a:f7:e8:
7a:47:3c:e8:d1:e8:46:26:33:c9:e5:95:0e:e0:51:
d5:f4:e5:2e:70:c7:19:52:37:ec:4e:ed:0a:ad:6d:
4a:d7:66:59:c5:05:11:8c:3b:3d:dd:3a:ea:80:07:
28:5d:84:3c:5d:63:b1:83:64:0d:ce:89:54:6c:dc:
d2:f8:4b:30:c8:98:73:eb:d6:f0:82:4b:fd:dc:d1:
59:07:06:19:5d:33:cf:e1:ea:b1:72:97:c9:fc:c3:
b1:35:31:48:bd:3c:28:da:98:7a:13:6f:e2:15:cd:
86:e6:d8:93:40:e9:f7:c5:aa:2a:c0:6a:0e:81:93:
a0:b3:37:6f:60:fd:42:4a:f6:9d:4d:7d:7a:4c:d5:
ae:10:fc:31:83:18:ec:ec:a7:01:f5:61:70:1b:f0:
d9:53:e2:83:94:99:f5:1a:40:3d:ed:65:b3:6e:f9:
80:55:1c:66:52:c5:fe:db:58:a4:c5:f9:a5:ea:de:
54:50:5d:9d:0d:ad:e1:29:5c:5a:2e:04:da:91:bb:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:E6:F2:59:20:F5:53:27:76:7B:39:C4:57:12:53:BE:24:A6:52
X509v3 Authority Key Identifier:
keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:8b:42:d6:fd:66:d1:53:06:b0:68:c6:88:15:45:76:9f:5e:
68:cc:48:01:e7:4d:ae:96:01:78:9d:92:0e:07:d4:5e:c7:49:
63:85:5e:1a:a2:b0:17:e5:c5:a4:ed:7a:4a:7c:e6:a5:a1:df:
b9:ac:32:03:44:d1:8b:5a:9c:b1:d1:31:d9:ee:67:d3:76:5a:
2b:38:01:5b:73:03:f1:ca:05:4f:17:ac:dd:9f:50:da:d1:29:
0f:02:18:cf:66:5a:71:99:db:04:72:7b:3a:82:48:a6:30:f9:
55:a7:f5:ba:e5:c9:2f:5d:87:91:f8:3f:61:fe:4c:fa:d8:8f:
55:76:b1:00:f2:b7:1f:05:b2:e8:69:2d:06:c2:a1:03:ec:1b:
30:fb:84:8c:23:a3:e3:b0:67:f3:cb:cb:f3:98:c7:2a:09:a5:
16:f7:3f:a3:d0:71:ce:cf:df:0e:9c:1c:f7:3b:f3:28:e7:6e:
62:8e:76:5b:88:a0:68:2c:f2:b4:a8:25:a6:5c:93:73:98:72:
6a:80:1c:9f:92:e2:75:85:a2:02:7c:d8:d7:c8:fe:28:00:85:
62:4b:80:01:9d:c5:2d:dd:f5:77:e8:41:f0:95:10:cf:e8:48:
a5:9d:69:5d:5b:c5:1c:cc:67:3f:73:bc:88:d2:1f:b7:11:98:
d1:57:a4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:19:31 2026 by rpki-client