
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
File: _KoIYibfAq-DlPqyLR-5bgt9Zd0.mft (raw, json)
Hash identifier: HBbFfVZwhV3WNh/aKZJXjuamyzPUiCq0PSjiR/h+ySE=
Subject key identifier: B3:5A:2E:02:6D:4E:AB:20:E2:33:3F:FA:EE:9B:84:41:33:C7:A9:93
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0CCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
Manifest number: 0C87
Signing time: Sun 26 Apr 2026 18:39:23 +0000
Manifest this update: Sun 26 Apr 2026 18:39:22 +0000
Manifest next update: Sun 03 May 2026 18:39:22 +0000
Files and hashes: 1: _KoIYibfAq-DlPqyLR-5bgt9Zd0.crl (hash: lEXAKDairmAcEDqYl08XsIEhTOK1L90zKaFC0WvX5YQ=)
2: 16C56390B6FF11F096DEAA71C4F9AE02.roa (hash: /XLi+JoFopcNaQS+dz0I9QQbByJLgyqvV+UDc3RM9XQ=)
3: 336E2134D0FF11F0904A3785C4F9AE02.roa (hash: /2RNIkBIhtZT+yQtCchMfxU/aFUT25YRMpbrC+A9cdA=)
4: 75775B8A5E3C11F094FDCD71C4F9AE02.roa (hash: 2LqeRUOZAwgxybnlCEWpL5xaNP5BZabdtxW3D8ogqXA=)
5: A28603BE3D5D11F19617582FAB833773.roa (hash: mAaWMtI1EVqxy6AbyPe2VukKTpE8ednyspOTClONDXk=)
6: 50229D303D6711F1A0848E61AE833773.roa (hash: VoAene/1GzVUsmM7TKxZzly12Ovo+E2l6qOpFxLNCP8=)
7: 9FC61D303F7A11F0BC711E7FC4F9AE02.roa (hash: TdD366YPbDVh8M4hWGlCIcUx+fM9FgqZUJ2TV/gnPRw=)
8: E2D5171C2F3211ED958A415DC4F9AE02.roa (hash: zZKkU5m5jrELsXLPpU2iKiEvYddsb6m7m0BK+ZsPDg0=)
9: 78E949B8BA2B11F091659A18C4F9AE02.roa (hash: VOBPRXqiWHsxxicImatBXQPFpdPNhWUthBewKk/mSYs=)
10: 45DE9550BADF11F09B91D509C4F9AE02.roa (hash: VFxaFuE3kLPbmnaiebPltW71W8wxxR4QeAfyqtq3Fsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 18:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3278 (0xcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: Apr 26 18:39:22 2026 GMT
Not After : May 3 18:39:22 2026 GMT
Subject: CN=69ee5bdb-2fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:56:26:a1:a0:db:d6:08:d2:a6:ff:68:c9:
50:9a:2b:c0:95:e5:67:50:78:a9:9c:9f:1e:c9:ce:
d4:73:c9:d3:31:79:22:33:cb:fd:a2:9d:a5:a1:28:
7a:d9:3a:1e:a6:40:33:48:b5:f5:1d:f9:b0:10:3f:
2d:f0:47:50:f7:d8:22:f3:d4:a0:83:d3:41:db:8f:
5a:ad:ea:32:44:df:fc:f4:b8:c6:17:d2:53:ee:3c:
db:3c:c3:41:9a:3b:50:0f:b9:0b:78:8a:9b:be:ca:
bb:b3:6f:24:5d:67:1c:22:1d:52:bd:11:fd:b2:11:
3f:23:14:f8:c7:5b:60:bd:b5:52:b1:42:82:9c:79:
52:68:db:fc:80:70:8d:42:df:0f:75:f4:75:34:d2:
47:22:e0:70:3f:eb:62:5b:dd:05:07:ef:80:94:aa:
ec:3d:39:dd:2c:9d:8e:42:e2:37:bd:7b:a1:01:04:
7b:b0:4c:6f:34:b3:55:2e:0d:bb:2f:5c:cf:c4:c0:
67:26:f3:f6:02:90:de:10:f3:32:49:f9:4d:7f:27:
78:a4:3d:65:66:96:de:70:cc:e0:66:6d:48:1d:03:
9b:94:7f:59:9e:21:e0:7e:24:fe:a6:e5:8d:52:3c:
c7:08:4e:84:c2:d5:66:6e:60:d3:49:22:54:9d:7d:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5A:2E:02:6D:4E:AB:20:E2:33:3F:FA:EE:9B:84:41:33:C7:A9:93
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:a0:e5:da:46:e4:4a:20:4d:18:a9:50:82:9b:6d:52:33:95:
9c:85:2a:b4:2e:48:47:12:f0:13:4b:04:7e:1e:9f:27:4e:c4:
45:8b:23:64:08:c8:9e:a6:63:d7:46:68:36:02:58:ae:4a:fa:
d5:54:91:c2:4b:c0:54:03:56:ef:4d:11:df:c7:6b:65:6f:9c:
7a:8d:20:cc:26:0d:6c:81:8d:c7:4a:67:43:3e:24:f0:ef:44:
3b:29:3c:e1:64:62:eb:ae:78:37:86:09:65:17:2a:b2:a6:e7:
ac:e9:82:3c:e1:5b:a3:ed:16:0f:c0:89:68:f1:be:b6:a9:99:
ac:a4:d0:d6:09:d1:be:ae:d4:26:f6:77:6c:97:c6:b0:06:01:
e2:96:a3:9d:9b:77:b0:2d:79:20:32:61:78:27:fb:1e:9d:8f:
45:01:b8:81:14:d8:98:73:66:b9:72:69:fb:5b:57:c8:e0:ed:
e5:ad:1e:fd:76:e5:58:fb:a8:6c:da:b3:fa:3a:63:f7:4c:1f:
47:af:e2:c8:35:87:a7:9d:73:e8:ef:bf:aa:17:6b:3a:a3:ee:
0e:16:de:34:07:76:7d:8b:5e:93:6a:37:66:3a:96:79:ee:5f:
9a:f3:9f:02:68:23:7e:3c:ab:76:7d:5e:db:da:ca:a8:9c:85:
61:48:9a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:39:57 2026 by rpki-client