
$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
File: tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json)
Hash identifier: ++od3LqPnAaHGpXVMUeHY1MtXQRoip62im5a7+zQRF4=
Subject key identifier: 7B:5F:01:26:E9:E2:6F:B8:51:C3:26:78:EB:1E:61:94:D1:9A:52:82
Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
Manifest number: 022E
Signing time: Sat 18 Apr 2026 18:35:11 +0000
Manifest this update: Sat 18 Apr 2026 18:35:11 +0000
Manifest next update: Sat 25 Apr 2026 18:35:11 +0000
Files and hashes: 1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: JN7xRN4eLu6OvW8xlmmx1IMWd4d5qpuKr4BbDQyVGmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Validity
Not Before: Apr 18 18:35:11 2026 GMT
Not After : Apr 25 18:35:11 2026 GMT
Subject: CN=69e3cedf-12b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:9a:fe:fb:60:79:74:01:b4:90:89:fb:1c:
58:fe:ef:9c:a2:c5:a4:aa:45:54:6d:2a:69:bf:4e:
8c:28:fc:43:6a:f2:85:79:e7:c2:f5:99:09:ef:d5:
18:80:18:2d:df:53:44:61:e7:11:62:43:2d:d6:7a:
e3:48:10:e2:fe:65:01:34:fc:6b:2a:b3:4b:f5:70:
83:76:96:37:0b:b7:be:50:37:c0:3c:3a:1e:d1:c7:
c9:51:51:6a:72:9f:cf:b8:a1:39:58:c7:b5:dd:b9:
58:0a:50:e8:7d:ea:31:b4:e0:7f:92:a5:6a:1a:23:
c6:2d:3f:44:78:a5:ff:9b:72:76:fd:92:3f:68:a8:
83:d8:97:4d:3a:91:a6:0c:5a:c3:83:ae:f6:a2:d9:
df:3f:f2:f2:a3:59:a2:df:59:f7:ef:55:6c:5d:10:
ad:c9:ba:7c:cb:ca:f1:6a:e1:13:6a:7e:6e:bf:24:
e0:98:e0:34:37:38:44:51:b7:f9:ca:ad:fb:32:fc:
4c:c5:e2:28:72:e6:79:39:86:c1:cc:ed:0e:cb:4b:
25:4c:b5:ca:89:59:be:b6:b9:7b:a0:66:7e:ae:29:
e5:6f:e8:a2:10:44:c4:d9:0e:cc:56:52:89:6d:f3:
90:c0:fc:c4:5d:90:23:77:69:19:0f:a4:66:90:40:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5F:01:26:E9:E2:6F:B8:51:C3:26:78:EB:1E:61:94:D1:9A:52:82
X509v3 Authority Key Identifier:
keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:56:cc:00:9f:0a:14:0e:2c:30:bb:90:1a:e9:40:91:f4:93:
90:eb:27:03:5a:eb:15:a7:cd:fb:73:d5:0a:07:d4:f3:81:fb:
84:41:ed:37:c6:58:cc:78:b2:cf:5c:e7:d8:48:3f:eb:55:4f:
e4:66:ed:88:ba:19:a7:7a:d7:39:e8:e1:40:8d:16:07:5d:cc:
1f:6d:5f:78:63:61:ac:cf:84:a1:fc:f0:36:e0:f3:ca:91:4a:
1b:3a:5f:3d:0f:dd:60:4f:50:1d:67:d3:e5:df:fc:14:96:d4:
1a:fa:d3:51:bf:91:11:f3:ec:db:f4:13:cc:56:b4:05:ec:6b:
69:ed:24:17:e3:c0:9d:69:af:04:a4:81:89:f0:94:c2:ea:46:
cf:ef:e4:d8:7e:3a:34:d0:9a:ed:eb:10:af:26:5b:2d:a3:be:
12:cc:91:4b:08:84:dc:0e:88:b3:a7:9f:09:68:a3:0c:09:8a:
a0:0c:ce:b6:52:6f:81:5b:a2:fd:26:ec:d9:d3:21:14:22:9a:
ab:0f:aa:2f:29:b9:fa:8b:d5:61:23:1f:53:01:3b:dc:53:28:
d8:bf:2a:a5:e3:8c:72:03:e4:f3:c7:40:7e:7b:d1:d2:c4:89:
d3:16:d9:7c:57:78:65:da:29:68:b0:32:9b:42:bb:11:4e:e1:
f6:6e:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:09 2026 by rpki-client