
$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json)
Hash identifier: Ezsypn4vF/saD3+bDiko//VNsQT0XdQrNbq3IcEA0p0=
Subject key identifier: D3:95:AB:19:20:D0:01:25:F3:C5:31:8E:83:2A:00:89:65:27:73:D9
Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Certificate serial: 0A6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
Manifest number: 0A64
Signing time: Sat 04 Apr 2026 19:26:29 +0000
Manifest this update: Sat 04 Apr 2026 19:26:29 +0000
Manifest next update: Sat 11 Apr 2026 19:26:29 +0000
Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: kMcWBRdoNZCFbnnEy/BfwZRd2rtWm0WYNGE4E4zwHCQ=)
2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: q4cXehVjnW5Frytnddrazb4hlR7ZeGkY8+gUIhDzgls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl
rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2670 (0xa6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD
Validity
Not Before: Apr 4 19:26:29 2026 GMT
Not After : Apr 11 19:26:29 2026 GMT
Subject: CN=69d165e5-cd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:66:ed:2c:08:f4:b5:c8:e1:23:19:8c:4a:
b6:53:a3:4d:90:e5:fc:fb:ef:3e:83:51:71:6f:de:
e7:51:35:bc:e3:5e:41:8c:7b:af:02:eb:62:fc:0e:
2f:93:52:29:d0:8d:d6:58:47:4a:e1:c6:e9:fe:82:
da:37:e1:8d:32:0e:bc:c0:d2:03:56:1c:a1:c6:43:
08:a6:6a:1f:18:8f:a0:b1:3a:93:33:03:20:eb:9c:
f4:9f:0a:8c:07:a9:c9:8e:c6:91:24:89:a4:26:13:
fb:a9:91:10:88:53:0d:53:ac:78:89:58:30:a2:b3:
cf:28:7c:91:ef:8e:b5:64:c4:c6:77:55:0c:c2:df:
7d:a1:e5:e7:8d:a3:a9:44:df:da:ab:8f:b6:6d:61:
4a:f8:ea:61:3d:01:d5:d2:6a:5e:89:95:da:89:03:
09:4d:7b:84:2b:66:8e:89:ff:86:94:a1:e7:d8:17:
6e:99:c7:bf:28:4d:bc:b6:f8:1e:ac:cb:89:16:1d:
f0:34:6c:73:d0:0d:c8:35:e0:74:d3:6e:8e:04:6f:
87:c0:cd:71:d3:a5:51:96:b4:8f:ef:34:83:3f:e8:
3d:d2:3c:62:e3:64:bc:fe:c0:db:bc:5d:64:5a:b6:
fe:c0:aa:3c:e7:e3:26:ef:6d:03:bf:14:fa:51:7a:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:95:AB:19:20:D0:01:25:F3:C5:31:8E:83:2A:00:89:65:27:73:D9
X509v3 Authority Key Identifier:
keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:28:29:38:24:a6:d7:06:dd:2a:b0:95:d9:42:a4:ad:9f:d3:
c0:f7:03:86:e0:f4:4a:03:f2:87:dd:9b:05:2f:99:05:59:f5:
b1:60:9a:f5:c5:da:7f:d9:7c:26:97:5e:52:54:84:ee:5d:2f:
66:5b:14:d3:89:f2:81:f3:e8:ac:1a:59:2a:b9:28:49:1b:f7:
1e:d6:54:1f:92:52:f4:e8:46:5b:01:c3:77:93:73:67:db:a5:
1e:9d:f0:52:fd:8e:5f:d5:27:ea:d7:9d:94:41:c9:6f:39:4c:
9e:c0:92:97:0b:16:f0:68:d1:4c:58:da:6e:46:7e:e2:41:f1:
fb:c4:da:78:9f:e6:71:65:96:31:f2:3a:1e:36:3d:e9:c2:b3:
03:40:48:17:4a:2f:2d:6f:a2:fa:ab:5f:70:c1:48:4c:5a:1d:
ce:7b:b6:fc:b8:d0:6d:ac:e0:24:02:c9:95:fc:f2:4c:2a:95:
83:7f:05:65:f2:1a:67:ff:1d:39:38:98:14:4a:f4:7b:ec:5d:
55:7c:04:a8:1e:15:d2:e4:84:a0:9f:c4:00:e9:6b:13:7e:1d:
1d:c3:e1:98:85:42:b3:4c:78:b6:a5:68:14:f1:62:26:c4:bf:
0b:d8:43:cc:3d:bd:8d:d8:13:81:bd:1d:a0:97:57:df:28:28:
06:b1:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:33 2026 by rpki-client