
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier: 7XBXulOeJCfAQ4s7wHVlMkQpPa2cU7hhRAp3N/2t7Hs=
Subject key identifier: FB:59:6E:8B:28:90:18:0D:BB:FA:7C:53:3A:A1:0D:9C:EE:F2:9B:85
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial: 3562
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number: 354F
Signing time: Sat 04 Apr 2026 14:23:58 +0000
Manifest this update: Sat 04 Apr 2026 14:23:57 +0000
Manifest next update: Sat 11 Apr 2026 14:23:57 +0000
Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: sLK4I8q9KPeZ2CvKiNwJfc5CpQYwRJ3ysleOxRA5IDk=)
2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: B+l8TJuzuBfxkWLiU727TKBvSyJyZhyj59n2Kpa5X6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13666 (0x3562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Validity
Not Before: Apr 4 14:23:57 2026 GMT
Not After : Apr 11 14:23:57 2026 GMT
Subject: CN=69d11efe-8acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:7d:6f:3f:6e:1a:c2:3a:26:e9:81:32:f3:
e9:48:0b:23:85:ad:e3:37:a7:6e:18:e0:27:81:de:
49:2f:83:1c:cf:a4:7f:e7:df:62:37:ad:2f:3a:39:
19:ad:94:d9:ba:d5:8f:22:ef:b5:4f:c1:ac:f5:44:
3f:84:7b:9e:61:66:cd:ff:9d:b4:a7:8a:63:d9:50:
85:bc:5c:81:48:e2:25:b2:e8:c5:23:bc:da:b0:5f:
5e:eb:52:d4:e7:c0:fd:2d:83:af:ea:ce:cc:c5:88:
0b:c5:66:c9:6f:3a:d6:1a:0d:00:24:ad:5f:62:ac:
08:41:86:48:74:d1:39:40:4d:8a:13:ac:78:50:c8:
8b:c0:49:1e:82:97:5d:2f:07:55:e5:13:1e:04:e1:
0e:73:3e:e9:86:43:56:29:86:05:e8:fa:1f:f9:20:
ad:15:fc:e2:99:21:61:ca:5f:27:9f:98:fc:d3:b2:
d3:0e:72:1b:5c:b1:ac:78:c2:65:ec:57:19:7b:dd:
c5:91:d9:6c:35:f1:67:11:72:55:df:54:a7:fd:f3:
fc:df:9f:ae:fe:14:40:0e:da:c5:e7:41:7a:a2:f5:
c3:fc:a5:81:13:f3:d0:f4:d5:a6:03:1c:ff:54:e7:
9d:97:63:38:dd:a7:a5:79:77:6f:88:00:cf:f1:b0:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:59:6E:8B:28:90:18:0D:BB:FA:7C:53:3A:A1:0D:9C:EE:F2:9B:85
X509v3 Authority Key Identifier:
keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:07:6d:28:91:fc:bc:c9:87:8c:3b:03:88:0b:43:cc:dc:34:
5c:b4:d8:d5:1b:c0:19:8f:9d:d0:49:07:98:74:b2:0e:5c:d7:
64:03:b3:9b:23:07:d9:3d:d6:c2:22:7c:c4:3c:3c:51:7b:dc:
26:db:15:c4:c2:41:8e:f8:d4:7a:ae:14:ec:a5:97:77:34:6b:
bd:62:46:03:7f:70:91:7e:1e:8c:14:4b:13:26:36:d4:01:0e:
5b:fb:bf:bc:93:1e:e7:1a:66:d2:c8:20:84:a6:b5:1a:7c:55:
7e:0c:1c:71:4b:21:a8:db:66:b3:d7:5d:6a:76:6a:55:07:59:
ea:5a:85:35:f9:8d:0b:0a:a8:f6:48:1f:a8:d7:16:5f:6b:bb:
6d:11:c4:bf:5a:4b:fa:dc:7f:29:d9:7f:81:e8:f3:2b:c0:7a:
60:a9:a3:9b:26:78:e2:74:97:58:86:68:92:f8:e9:94:f2:3b:
45:2e:e0:c4:0a:b1:c2:ab:2b:8e:75:2f:30:9e:e0:4c:f0:1d:
17:4f:5e:2a:dd:ae:05:55:39:89:04:7e:cf:ee:1e:f3:26:ba:
1f:3a:1e:6b:9f:80:63:25:10:b1:9f:16:39:08:06:93:de:ce:
49:4d:22:a3:04:de:5b:e0:d3:70:f0:e3:1f:59:bd:98:4c:bf:
ee:a0:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:18 2026 by rpki-client