
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json)
Hash identifier: 5hYXNi5pA+Fhy605qZZi8kwpN0QlMv7zpzUPVE9JECM=
Subject key identifier: C5:14:FC:CB:C6:34:50:29:03:53:60:A3:B1:0B:91:CD:8A:DD:97:F0
Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
Manifest number: 017C
Signing time: Sun 05 Apr 2026 04:07:58 +0000
Manifest this update: Sun 05 Apr 2026 04:07:57 +0000
Manifest next update: Sun 12 Apr 2026 04:07:57 +0000
Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: Fb4WiTs/ld5OzR8sdxyOYIJl611Mbpx/l1T2QaSzMs8=)
2: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: FYJl6u4bIjvmb0ZcMvBiaR6Ed53PaPf6I85ZtXduzuY=)
3: AC82414A392511EF88F70D39C4F9AE02.roa (hash: hKQ2h489zBdCdDYcUOKChPL8Ijm3M758tY3uGhwDTqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Validity
Not Before: Apr 5 04:07:57 2026 GMT
Not After : Apr 12 04:07:57 2026 GMT
Subject: CN=69d1e01e-8fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:67:a2:41:ea:c4:bc:b1:15:84:2b:d2:0c:
bb:5e:56:5d:c6:e7:b1:ae:c5:eb:63:3c:6f:c2:ec:
72:fc:52:7b:c5:1b:f9:0a:e6:ba:37:91:ab:72:8f:
23:3e:9a:82:5d:19:0b:cb:a3:a5:fd:b8:07:a6:c1:
7b:5f:90:af:11:6e:56:f3:33:70:8d:89:ef:5e:ec:
94:12:e9:2f:27:67:f4:fd:df:ea:84:90:49:7c:cd:
da:50:da:12:d7:27:3c:1d:05:fc:1d:55:e0:9d:09:
d6:d1:c2:63:36:dd:45:ca:36:62:5e:90:ed:46:18:
b9:a2:be:dc:cb:c8:7f:8d:4f:20:5e:f8:62:45:8a:
9e:6b:77:b0:23:59:62:ef:28:0d:3f:b0:04:f6:03:
ab:09:0c:85:1c:7b:36:09:b0:20:38:6d:15:ae:d8:
9a:dd:7e:e4:b1:12:61:0d:ec:cf:3f:58:71:b5:ba:
37:1b:d8:f0:a0:28:88:d7:e6:9c:8f:ad:a3:28:5d:
81:5f:39:1a:3b:4d:0c:27:c9:53:4d:f7:2f:4d:d7:
fb:b0:a8:f3:d8:0d:08:00:f0:c6:57:52:59:2e:91:
44:21:0e:b4:80:99:65:65:57:c0:8d:b3:00:eb:84:
e4:6b:39:ff:40:2a:0d:92:f3:d5:f7:07:1f:d4:ff:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:14:FC:CB:C6:34:50:29:03:53:60:A3:B1:0B:91:CD:8A:DD:97:F0
X509v3 Authority Key Identifier:
keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9e:ba:a8:f4:a8:33:b7:0f:1b:07:2f:51:5f:7d:ef:85:b0:
92:c3:f5:4e:dc:c7:89:f6:6d:58:af:74:5e:89:c3:fd:1f:54:
15:cd:ae:b6:02:ce:9c:45:3a:b4:e3:de:3e:5e:a8:c1:17:f4:
36:82:41:38:4a:62:cb:cf:e2:fb:7a:23:ec:ca:e6:68:9f:dc:
09:8f:e8:24:dc:7a:07:dc:55:0c:f0:52:99:0c:3f:2d:60:54:
d9:39:e1:83:a3:84:92:d7:ec:46:7d:3d:cf:29:6b:9f:a5:64:
60:7a:bf:fb:d2:28:ce:6f:fb:42:68:71:52:39:12:3b:29:6a:
d8:9d:63:25:6a:2c:0a:25:66:ec:de:82:cd:36:02:74:31:e5:
8d:e6:ac:6c:ee:88:74:f8:aa:ec:94:4f:4f:bd:93:3b:ae:d2:
86:23:eb:13:36:f2:3b:b0:ee:d4:75:93:1a:a3:ee:9f:5d:e3:
35:92:b7:85:58:2f:e8:87:c3:5f:6b:47:a3:b8:03:10:7c:20:
43:10:4e:79:f0:7a:00:9b:d6:a6:d1:2e:a2:4c:69:66:a6:45:
09:3b:05:4e:6a:9a:db:be:16:9c:65:0e:5c:52:ef:80:78:58:
ba:6f:81:2f:e8:66:04:0c:3b:66:38:63:2e:ed:b8:3c:9f:ba:
76:32:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:08 2026 by rpki-client