
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
File: Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft (raw, json)
Hash identifier: UA19G8Xc3EH0coEIsIkJTh9b5BQPXedECUhrJHUWOvU=
Subject key identifier: 1F:27:2F:73:71:8F:D1:60:02:9A:80:49:DF:86:33:41:BF:C0:25:24
Authority key identifier: 16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
Certificate issuer: /CN=A91C8BAB/serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
Manifest number: 04
Signing time: Sun 05 Apr 2026 08:33:14 +0000
Manifest this update: Sun 05 Apr 2026 08:33:14 +0000
Manifest next update: Sun 12 Apr 2026 08:33:14 +0000
Files and hashes: 1: Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl (hash: xY4cEDZlqjO9jZbwtvR1XnzoFcXAZ1X9uLaQCQUsz+M=)
2: B8FC2F342E4311F1A2579C1594833773.roa (hash: vGKy7Sa+q5U/O3Xs6QkfrT0xdcp2SafDBBYAHDPN+2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BAB, serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E
Validity
Not Before: Apr 5 08:33:14 2026 GMT
Not After : Apr 12 08:33:14 2026 GMT
Subject: CN=69d21e4a-a0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:26:73:0c:cc:34:47:a8:ee:25:3e:04:bd:
f2:9b:8b:47:e7:6a:52:15:e1:9f:52:5a:42:02:14:
dd:93:15:bb:4a:d6:fa:32:46:26:97:ad:31:2a:b5:
f3:eb:2c:ca:d6:54:f1:88:22:21:d8:e2:42:be:93:
65:00:c7:4c:e4:f2:17:a8:18:2a:15:5d:29:92:ae:
87:f3:41:4a:d2:0d:ac:20:88:90:50:cd:85:7d:85:
a3:a3:4a:c6:b6:98:27:8d:f5:c2:cf:ca:31:5f:99:
fc:69:63:97:c0:b8:fe:ba:a8:af:1a:e5:de:91:65:
83:58:4b:24:df:ab:be:08:b1:17:ca:dd:9f:79:a2:
25:e1:72:8c:a5:90:72:08:26:81:a2:5d:3c:30:34:
29:c7:93:52:55:94:13:f2:9c:85:bf:41:de:c1:09:
d3:8b:e3:5d:f4:31:5b:9e:6d:cd:61:c7:a1:db:7b:
1c:85:2e:88:69:4c:c6:1b:96:e2:1e:30:c4:d4:e6:
4e:46:84:9c:fd:65:b5:96:fe:9f:aa:44:4c:1a:d0:
63:7b:4d:f3:fa:e1:87:3c:a4:66:e5:fd:00:7f:9f:
1b:5f:e9:4c:f7:9f:1c:1b:de:0f:90:bc:52:a2:5d:
0a:5c:ca:b8:80:b2:bf:51:f2:f2:0b:0b:dc:02:f4:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:2F:73:71:8F:D1:60:02:9A:80:49:DF:86:33:41:BF:C0:25:24
X509v3 Authority Key Identifier:
keyid:16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:b8:c5:83:ec:0a:ae:51:9f:e4:78:6f:fc:58:2a:dd:cd:7f:
b9:61:37:6b:80:dd:9b:9d:cb:fb:7a:2c:c7:be:2b:55:fd:e4:
7e:2b:24:dd:1a:3f:56:d4:b2:43:56:5b:3e:23:55:e7:62:09:
ab:47:fb:ae:6b:68:dd:f8:30:b0:c2:9a:56:94:2f:5d:6e:bc:
11:61:83:6d:d3:ea:d9:89:ff:dd:38:b4:2c:c1:5d:ea:25:33:
cf:5e:40:4b:5a:5b:8e:85:87:80:0d:29:10:1c:98:f0:30:f2:
a9:e3:52:3e:28:21:46:ed:2c:b7:a1:7a:30:90:e8:50:0c:13:
88:84:06:2f:2e:76:4d:d5:f7:e1:80:2a:b9:da:71:c7:35:51:
47:32:2a:8c:f0:ca:13:36:19:09:e4:de:25:c6:fd:25:bf:f6:
7d:67:68:87:34:c8:33:36:86:37:5c:a2:39:15:96:c1:fc:eb:
9c:8f:08:3e:16:c3:c3:91:4f:23:6d:5f:95:e9:2a:80:43:f8:
28:84:3f:b1:5d:4d:ff:e9:74:de:3c:56:3f:05:67:ac:54:91:
be:50:37:8e:39:d3:c7:8b:fe:c1:47:74:42:25:6d:f2:6c:92:
4d:a6:72:37:a8:7b:ad:52:7d:fa:22:9e:31:06:52:f9:80:13:
c2:e3:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:21 2026 by rpki-client