
$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json)
Hash identifier: er+ReSpjzUdANaDHywTt1JnCc8/KksehgPszs4cQR6k=
Subject key identifier: 60:A5:CB:EE:C1:77:4E:B5:C5:E8:CB:2A:AA:F9:0C:FA:3E:4A:F6:41
Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Certificate serial: 06E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
Manifest number: 06BD
Signing time: Sat 04 Apr 2026 22:11:48 +0000
Manifest this update: Sat 04 Apr 2026 22:11:47 +0000
Manifest next update: Sat 11 Apr 2026 22:11:47 +0000
Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: xvHSGN3flGY2KMChZN10EwRcI3ITR5a74aQ+WWh+n2Q=)
2: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: VcPDZ+MjDxOrAucs/eNtjD49z2FRbuaZ3EQPIJQykws=)
3: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: S0fZW2dgUJeGAm9ytfhirRt94xu3NkvG3zNOfvuS6tg=)
4: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: XhBS8XISfFKFYm/i2g3VuZVNJ/6YSjzLu6944o2vZmU=)
5: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: w3+aZlQ2RBmGjxz4SlkYvG+q8BQVGDzpFhvPTfzKDVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Validity
Not Before: Apr 4 22:11:47 2026 GMT
Not After : Apr 11 22:11:47 2026 GMT
Subject: CN=69d18ca4-3a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:d2:b1:d3:6e:b4:ee:9e:1d:21:72:8a:0c:
3d:99:c3:7e:5d:e9:09:97:0c:de:ee:99:33:36:fc:
e5:a0:d5:c0:9e:83:e7:99:7a:85:f4:ac:52:30:b3:
9f:2f:e0:bb:d4:94:26:f3:79:81:52:bc:36:fa:32:
8f:fd:83:5d:e6:ee:e0:59:b2:56:da:75:34:12:45:
61:43:6a:6f:12:db:f4:60:7a:6d:c5:5a:52:8c:f1:
ac:97:51:d3:7c:47:87:f9:0f:21:54:fd:ee:35:ce:
dc:e3:16:f7:54:40:8b:aa:1f:b5:9e:83:d4:6c:17:
97:45:58:5d:d8:dd:37:a4:f9:82:ea:71:56:f6:6e:
a5:b0:a5:f3:8b:14:66:fb:8b:ed:22:d8:ca:dd:ca:
61:76:85:b7:bd:59:81:d3:74:0d:15:df:83:4a:b3:
f1:e6:18:fe:06:4c:2e:a5:b9:44:86:e8:ea:39:9e:
f5:4b:d1:f8:ab:a4:2d:f1:83:4a:8e:ff:22:12:21:
bb:06:4f:66:7c:96:12:62:94:4b:c4:6f:c0:d1:a5:
de:46:5d:bc:d3:2b:ae:f7:e1:94:ad:dc:ef:f7:a7:
01:42:3e:42:b8:77:a0:29:2c:09:e8:67:9b:79:a3:
04:0f:e2:61:a0:90:35:90:c3:46:c4:fa:23:13:92:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A5:CB:EE:C1:77:4E:B5:C5:E8:CB:2A:AA:F9:0C:FA:3E:4A:F6:41
X509v3 Authority Key Identifier:
keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:69:17:5d:90:50:8c:22:aa:7d:a1:e1:18:ae:7d:64:57:74:
a9:fd:b4:b9:b3:b3:9a:af:c9:98:5c:90:56:43:f0:b2:0a:41:
6d:27:28:ef:38:2a:5c:24:cd:77:c1:ec:ab:17:00:b7:45:45:
35:3c:35:5a:cc:cd:4e:0d:99:ed:c5:cd:45:4f:64:81:63:e0:
d6:21:c1:5b:ed:f5:e6:2d:98:bc:7f:f6:2f:1b:9f:33:21:e3:
f7:96:7c:83:69:27:a7:0f:9e:27:44:86:6a:e9:26:c8:74:dd:
13:a3:e7:9b:b3:37:ee:82:2e:ed:89:14:9a:47:f9:3c:56:7c:
be:1e:4d:1b:55:f1:ae:a8:2b:62:50:a8:7b:43:d4:7c:04:71:
2e:1d:96:33:33:1d:9d:96:d9:44:4c:b2:04:44:18:fb:0a:32:
50:f6:71:b1:d2:81:57:e8:88:7e:74:81:f0:d6:14:9b:17:f0:
86:96:3f:29:a6:c9:16:05:9d:16:61:72:03:ed:79:39:0c:0a:
71:a9:40:a6:a3:37:65:b1:f5:93:c8:63:54:09:a2:a6:da:e9:
f6:58:83:33:79:42:29:27:c6:9c:54:2d:98:0e:91:be:2e:22:
fc:18:81:8f:ce:82:c6:0f:07:15:69:f2:ac:10:18:a6:62:e9:
35:2a:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:57:27 2026 by rpki-client