
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json)
Hash identifier: eCf/fraT/ySFf6G7/CjJuyrIjPO5l4BzbSK2YOoCpJ0=
Subject key identifier: F9:04:2A:07:EC:65:80:01:36:70:DF:25:48:13:37:B6:9B:D2:F3:19
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial: 0CFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
Manifest number: 0CEB
Signing time: Thu 16 Apr 2026 18:11:31 +0000
Manifest this update: Thu 16 Apr 2026 18:11:31 +0000
Manifest next update: Thu 23 Apr 2026 18:11:31 +0000
Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: BJ6zLOoQNPU+fW5Ckx8go409H2BX5cQ2KYX8sXqOU6s=)
2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: 1fv3/pXl5lcDYoLzTz47KptyfQ/fj025AndBgH7ATRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3323 (0xcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Validity
Not Before: Apr 16 18:11:31 2026 GMT
Not After : Apr 23 18:11:31 2026 GMT
Subject: CN=69e12653-092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:d9:51:90:44:5b:f6:3b:a3:e1:2f:c7:cc:
84:b6:2e:16:6a:c8:df:89:88:5e:49:72:c2:ad:97:
79:13:5e:bc:89:75:94:ad:8d:7c:02:80:48:34:31:
70:f0:86:0b:9b:ad:d0:e6:b2:ca:0c:73:50:65:8f:
f3:61:2c:45:25:e5:13:a4:62:49:e2:0a:6b:76:f3:
e9:03:09:cb:21:b1:ec:1c:4e:e7:d7:52:11:54:9d:
5e:26:26:19:e6:37:d6:1e:f5:2d:cf:b3:75:1d:18:
6a:0e:8d:eb:fd:38:44:8c:72:9d:0d:07:ff:51:19:
23:d4:62:7a:fa:58:0b:d2:b3:77:4b:b1:49:ad:79:
c4:87:ee:cc:36:8f:ca:42:03:5a:40:bd:4c:04:4f:
bf:1e:f4:d5:b5:e5:df:06:52:ec:65:19:45:7f:d1:
3f:d1:ce:5d:18:5d:20:d2:ec:62:10:99:53:14:60:
45:37:fb:1a:9d:cb:a5:c3:5d:f6:38:a0:15:a3:2f:
92:d9:23:13:8a:f0:19:51:6b:c4:d8:18:af:dd:85:
0b:c4:6e:33:6c:c0:d8:b4:00:c5:ac:14:5e:28:27:
c7:7d:2a:f3:3b:40:db:a3:6e:6c:1c:b5:23:69:2c:
b8:5a:e9:db:b4:09:70:9f:84:13:e3:de:3c:da:2e:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:2A:07:EC:65:80:01:36:70:DF:25:48:13:37:B6:9B:D2:F3:19
X509v3 Authority Key Identifier:
keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:28:b9:bc:63:1c:f2:c9:0f:93:f5:35:a9:3d:f8:45:de:9d:
27:a0:62:19:81:80:6e:21:78:6a:fa:8a:c5:b2:d8:29:b5:fc:
8d:10:b6:8d:db:3b:b6:bf:47:b3:ab:92:2c:e5:df:c4:d7:c4:
ac:38:c7:6a:29:5a:c4:57:75:8b:f4:bb:42:c8:88:3a:6d:72:
2b:cc:a5:1d:4f:a6:4e:27:66:0a:12:ee:70:4b:43:2b:2c:ad:
7d:4e:a4:6c:a8:77:7f:5b:66:fe:d6:cd:7d:01:61:76:41:16:
60:49:a6:67:0e:07:d9:07:13:96:8b:1d:d7:43:21:93:34:c5:
a1:9f:48:51:d7:29:c0:b6:d5:50:56:b3:cd:f2:f9:f6:23:6f:
31:52:77:f1:1c:db:f2:62:fc:7f:9f:95:bf:d0:51:22:cf:42:
5d:5c:c3:78:e3:6c:fc:1b:60:92:b7:fa:7e:80:e4:04:e6:b9:
fe:fd:bf:42:a8:58:cf:18:64:57:58:8f:32:f4:54:1e:7c:85:
db:a2:1f:cf:17:86:35:05:72:d0:12:5d:01:7e:61:64:19:dd:
24:35:8f:c8:4b:a3:85:1b:f9:f9:68:55:06:fc:35:fe:71:88:
82:d4:20:6d:ed:70:95:b7:72:c4:cb:52:d1:03:c0:85:57:54:
6b:b4:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:30 2026 by rpki-client