
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json)
Hash identifier: jrLna6WrDtn9zpyzbJbxvSbkyLYIycKPaVUB3fE5vbk=
Subject key identifier: 56:AA:E4:34:95:F4:29:D3:84:97:41:B8:66:D5:DD:09:EE:01:36:0B
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial: 0652
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
Manifest number: 064B
Signing time: Sat 04 Apr 2026 22:28:52 +0000
Manifest this update: Sat 04 Apr 2026 22:28:52 +0000
Manifest next update: Sat 11 Apr 2026 22:28:52 +0000
Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: 7pLJmfXMjmSr+Hk15JHUl4v+4dLMc8pJW4PC0+tgHxA=)
2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: DIxhiXc0lWrP1HFp4dV9JN6j/Zz8GVR/zOlWSXrjAEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Validity
Not Before: Apr 4 22:28:52 2026 GMT
Not After : Apr 11 22:28:52 2026 GMT
Subject: CN=69d190a4-b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:8f:46:cf:a5:f3:6e:df:f8:94:50:0d:4f:
f2:d6:9a:5f:80:f4:79:33:5e:40:2a:30:07:9f:36:
87:d4:11:af:5d:bc:1e:71:6e:02:f5:03:98:8d:c2:
00:75:aa:0d:60:3b:74:41:03:7b:d5:0e:a4:9a:6c:
19:b7:6f:c7:c7:ee:66:52:74:f2:b7:d9:f9:af:94:
3a:d8:9a:b8:09:05:7b:04:5b:31:a6:ea:94:c8:bb:
b5:4c:b3:5e:12:6c:8a:a8:31:47:04:4a:11:41:da:
e3:38:b2:8b:90:62:bf:20:ed:15:e3:35:68:e9:cf:
9a:c5:7d:58:e9:f4:a7:da:16:f2:ac:3e:c1:91:d4:
de:b2:c3:e5:24:d7:40:08:d4:00:51:17:64:ad:e2:
99:ea:15:bb:1e:5e:7a:f4:62:92:95:01:d5:70:f5:
88:5b:05:46:b0:f9:4f:98:79:43:c7:9e:38:80:df:
d9:d9:57:80:05:a9:62:b4:56:93:fe:3d:f7:2a:58:
b9:01:92:53:20:be:ce:93:3e:1d:bd:e9:f5:1c:75:
86:1f:ee:ca:2b:6a:6c:03:a6:13:49:70:d2:5e:32:
9e:86:cc:9b:5a:36:5d:8c:21:f4:a8:1c:59:70:b9:
43:fa:aa:3a:45:d6:97:14:7a:e3:81:30:46:73:51:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AA:E4:34:95:F4:29:D3:84:97:41:B8:66:D5:DD:09:EE:01:36:0B
X509v3 Authority Key Identifier:
keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:95:b3:b6:8b:f4:9e:c8:d4:c4:f4:30:17:dc:49:13:09:da:
12:24:9d:41:70:67:a0:6e:83:fd:5c:be:00:82:f2:c8:c4:1a:
ed:e0:6b:7a:5a:63:1f:4b:18:5d:cd:19:56:71:2e:b0:3d:f3:
7c:a0:50:68:f6:e8:5e:77:86:04:8b:4f:eb:fc:96:47:3c:7b:
74:34:03:f0:62:7a:c0:e1:eb:26:81:d1:53:c5:9b:2a:b0:b9:
59:9c:e1:24:a8:bb:3a:8d:d3:fb:9e:90:e2:c1:aa:00:96:9d:
bf:4e:6e:b0:a5:be:61:3e:f1:d2:d2:2e:6e:a4:c6:92:f7:81:
b4:cd:4e:22:d5:6f:04:d8:8a:58:6f:ab:86:5a:9a:ab:c8:24:
5d:10:f8:f8:eb:9a:b8:31:71:e1:46:97:4d:d5:c4:17:8e:41:
a1:cc:5d:63:c8:20:15:cc:b7:36:a1:73:c3:36:dd:3e:2d:f5:
95:03:af:5e:bc:c3:22:c8:d3:f0:a4:ff:be:5f:c3:de:3f:36:
a4:e3:a3:b6:af:98:f0:40:1e:af:a4:df:d6:b9:9d:30:89:2f:
70:55:26:b1:c6:29:a7:fa:74:06:b1:a6:bd:b7:40:1c:4e:6e:
a9:53:bc:ba:06:fe:95:b5:76:ee:96:e1:b8:ee:10:82:04:f8:
5d:29:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:09 2026 by rpki-client