
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json)
Hash identifier: QpXW/In3sSn26dXLiTfDC4HMpw/scYnU6ebE7TMFzV4=
Subject key identifier: FF:74:DC:D1:6F:E2:76:B0:54:C8:9B:C3:80:1B:77:F1:E0:A1:F8:E4
Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Certificate serial: 11D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
Manifest number: 11BF
Signing time: Thu 16 Apr 2026 17:07:42 +0000
Manifest this update: Thu 16 Apr 2026 17:07:41 +0000
Manifest next update: Thu 23 Apr 2026 17:07:41 +0000
Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: spjihiAsMqysyhja75zZtDeG/+3JH86VOAPG/cGZnuQ=)
2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4569 (0x11d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08
Validity
Not Before: Apr 16 17:07:41 2026 GMT
Not After : Apr 23 17:07:41 2026 GMT
Subject: CN=69e1175d-ad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:d6:fe:6f:fd:13:a3:67:35:01:a1:ed:92:
73:bf:be:ec:e4:2e:f8:0f:9b:24:33:3f:10:ab:1a:
23:df:d9:43:38:3a:92:8a:59:85:fa:d9:5c:b9:13:
28:ce:96:ff:f0:d4:35:78:42:94:cf:a9:69:4b:2d:
54:71:fd:61:28:3d:52:f2:42:29:fc:d5:44:4e:05:
c5:b0:51:18:1c:06:f9:43:81:2d:25:01:54:14:b6:
f2:d6:cf:b7:3c:52:80:5f:45:d6:63:e3:ae:d5:ea:
71:07:35:4d:96:bb:0f:f0:87:ba:75:0f:e5:4d:c6:
9e:81:c0:59:12:84:7f:00:07:28:4d:87:bd:a0:07:
a8:f7:91:f7:ab:11:cb:b7:a7:eb:fa:64:52:fb:bb:
43:a6:a5:45:64:10:e5:9a:da:de:68:8d:6e:63:46:
54:97:9f:48:a1:2d:52:e5:f3:e1:fd:56:dd:ad:c3:
74:a2:9f:ea:8b:59:9d:7b:cc:2d:02:3c:47:c7:df:
a4:89:3c:b7:c4:bc:2c:ba:47:a3:6e:be:58:92:3e:
1f:e4:76:98:cd:08:2e:d5:a2:78:0c:2b:f0:37:c0:
b4:d6:79:27:47:b9:bb:d5:be:0c:3c:48:97:77:e4:
12:3e:d8:90:76:61:7b:5c:5e:dc:e6:5f:7a:aa:67:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:DC:D1:6F:E2:76:B0:54:C8:9B:C3:80:1B:77:F1:E0:A1:F8:E4
X509v3 Authority Key Identifier:
keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:9b:b9:34:f4:20:5e:65:90:ad:5e:26:22:50:19:47:c7:46:
3f:d4:32:f3:74:28:1c:44:4b:46:95:57:b1:92:05:13:88:f5:
90:68:5a:c4:e5:28:07:5f:7d:98:8e:1a:8d:32:bd:b1:e8:cb:
96:19:2a:ab:eb:ff:53:28:81:fd:29:6f:bd:fb:1f:4a:cf:ad:
51:ce:5e:62:d7:23:73:dd:03:0f:96:16:8a:8c:83:04:7d:4d:
91:51:a5:73:69:ed:36:b6:f9:31:14:a2:1e:84:81:6d:22:80:
b1:b6:64:e0:87:b6:a0:62:1f:be:b4:4b:3c:53:52:6c:23:7d:
cf:73:70:ff:a8:9b:25:17:03:44:b3:cf:d4:ec:aa:cb:7a:e3:
43:d9:2b:ef:00:69:54:46:28:54:db:58:65:6e:7b:9c:51:2e:
75:a4:5c:55:dd:0b:d7:0e:de:28:e2:b8:0e:9c:f9:14:00:51:
bd:58:56:a0:e7:0b:17:b5:bc:17:86:e9:5f:8e:58:7e:19:c2:
33:7d:25:58:be:6c:39:c4:a7:28:ca:bf:e7:4e:83:a6:44:f4:
4c:84:17:e5:11:0b:46:48:db:a6:f0:e0:45:e6:bc:93:f6:53:
83:4e:5d:c2:4f:ce:6b:e6:5e:20:e6:0c:6e:5c:2a:5d:ac:33:
1b:eb:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:55 2026 by rpki-client