
$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
File: _AVdqSFUGMKhRWbvVna4pPTSCzA.mft (raw, json)
Hash identifier: iXnFeSQAB7i5Z4anvWPNpXioIVt39vEORs+mo11Lfpw=
Subject key identifier: 67:D8:E0:66:34:AB:B2:C5:B8:70:E8:39:CF:F0:7A:3A:E2:FA:0A:4D
Authority key identifier: FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
Certificate issuer: /CN=A91133DE/serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
Manifest number: 0F
Signing time: Sun 05 Apr 2026 08:24:23 +0000
Manifest this update: Sun 05 Apr 2026 08:24:22 +0000
Manifest next update: Sun 12 Apr 2026 08:24:22 +0000
Files and hashes: 1: _AVdqSFUGMKhRWbvVna4pPTSCzA.crl (hash: fMwHq/rLh2C92Xm1+TaEgistroGqunC8gH6LvN19824=)
2: 3F1CEAEC1D0311F1B8948CF0043D8C67.roa (hash: 1C1WKunXRhUP/ppMqilBjQAG9/WWODiA+ekMdQn1ktE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133DE, serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Validity
Not Before: Apr 5 08:24:22 2026 GMT
Not After : Apr 12 08:24:22 2026 GMT
Subject: CN=69d21c37-e590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:78:25:ad:fd:87:c0:22:8f:dc:bb:af:c6:
3f:35:22:2c:67:44:f3:5e:cf:23:ec:08:3f:6e:9d:
c3:6d:ef:dc:16:03:9d:f3:4f:96:93:4d:58:1e:91:
34:07:b2:09:90:7c:f4:f9:7d:83:91:95:59:73:a4:
19:6a:e3:72:52:a5:4c:9e:71:76:77:56:cc:c6:64:
e3:b3:e2:b3:89:e0:18:2c:93:65:f2:8c:b8:26:a7:
a8:16:dd:ff:f9:d2:c6:e7:17:30:a7:4e:e0:96:5d:
4f:d6:51:fc:f7:e0:94:cb:d9:51:73:12:2a:a0:c3:
74:63:05:11:22:a5:31:d7:f7:55:a2:74:a0:ad:00:
11:f3:da:a4:b0:9f:8f:8e:80:20:88:7d:15:0b:e1:
81:fc:dd:25:ae:79:07:22:f4:d9:e3:f7:d0:57:9d:
41:f2:08:8d:0c:1a:26:5f:ff:a6:09:7f:a5:cd:f4:
d0:38:ef:6d:6b:df:dd:31:f6:f6:15:3a:21:ad:8d:
51:bb:b5:57:52:d0:a0:2a:b4:32:0e:76:36:40:2c:
e3:d3:f2:80:99:f3:14:8a:1e:ba:d0:a2:24:9d:86:
50:57:bd:a9:ca:52:ca:73:17:72:c7:43:cc:da:8f:
02:97:4e:42:1b:39:69:d0:b9:2b:4d:0d:c6:11:60:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D8:E0:66:34:AB:B2:C5:B8:70:E8:39:CF:F0:7A:3A:E2:FA:0A:4D
X509v3 Authority Key Identifier:
keyid:FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:92:2d:be:b6:86:b6:7f:6c:ba:fe:7b:f1:b1:7d:32:19:
32:3b:36:a1:a0:60:30:58:95:8f:b7:a1:b0:42:a4:e7:ae:ea:
44:75:f7:65:2d:4f:e0:db:e2:f6:63:bd:1c:1d:2d:0a:f2:9b:
ff:79:e2:94:47:00:4a:98:1c:c7:a9:ed:0c:92:45:cc:12:19:
06:7f:0f:e1:bf:b6:ba:04:6b:1d:a3:25:93:1b:5e:f6:11:66:
07:6c:b4:13:0e:8e:06:18:8f:92:34:51:a7:85:7a:86:63:59:
de:ec:3b:79:c0:22:3c:3f:bc:3b:1c:59:0d:09:0e:ea:73:f2:
25:2f:89:67:64:e5:8f:ee:90:2f:2d:b6:34:5e:7e:e4:84:e0:
bc:a8:58:8b:7b:39:2b:de:bf:01:05:f4:da:16:71:d1:79:dc:
d5:85:22:b4:36:99:f9:1c:f7:bf:b1:97:89:20:5c:38:42:9c:
de:1d:5e:3f:99:7f:2c:29:9a:c6:29:f5:4b:3b:e8:b7:09:9a:
04:8d:91:e7:b2:30:6f:a3:89:d1:a3:c4:5c:f5:11:ad:eb:17:
71:ab:c9:92:ed:07:48:e9:63:7b:cd:2d:e6:5e:64:e9:14:aa:
c4:31:86:9f:85:ed:2c:1a:2a:34:b1:98:a4:13:7e:2f:9e:f8:
41:47:a3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:32 2026 by rpki-client