
$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
File: V4hJyblKNVp2IKl0eXPSG77aP1M.mft (raw, json)
Hash identifier: xkcbY16GDt4pytdoksSKVAZJAwd91RJqbkkfIq+kpjI=
Subject key identifier: F7:ED:DC:8E:4D:C7:2B:9D:83:B7:F0:6C:45:7F:CA:5D:E8:D0:BA:A4
Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Certificate issuer: /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Certificate serial: A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
Manifest number: 9E
Signing time: Fri 17 Apr 2026 07:07:59 +0000
Manifest this update: Fri 17 Apr 2026 07:07:59 +0000
Manifest next update: Fri 24 Apr 2026 07:07:59 +0000
Files and hashes: 1: V4hJyblKNVp2IKl0eXPSG77aP1M.crl (hash: a5gQOPeYFgEwkgKrEZLpQIuxVyD36P1YXJsbmNplRXo=)
2: C7142BC6654E11F0903B1F31C4F9AE02.roa (hash: jSnDPdRwLgLUo951EUUUzNF6wRHOATS/A4EXJoQ++AM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Validity
Not Before: Apr 17 07:07:59 2026 GMT
Not After : Apr 24 07:07:59 2026 GMT
Subject: CN=69e1dc4f-3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:b8:b1:65:3c:25:f6:7c:25:6e:95:0a:08:
78:80:c2:7e:5e:de:b4:56:6d:9f:1a:45:24:1c:0d:
fe:29:36:36:76:fe:49:4a:e6:b1:9a:db:46:bd:09:
df:88:c7:58:1b:00:3f:e1:d3:55:59:d5:3e:f2:f0:
ae:8e:50:34:51:ad:c6:57:3a:34:5d:4e:60:92:48:
5c:fb:83:d6:8c:f9:7f:cb:c4:f7:15:d2:57:a6:2f:
24:85:1d:75:b9:96:49:7e:63:fa:5e:7b:ac:dd:34:
69:f7:4f:b0:c0:5b:32:ec:58:a8:b5:19:47:7f:e2:
45:74:09:17:ce:be:9b:8b:9b:e2:52:c7:7b:02:e4:
25:9f:6c:48:d7:7d:20:0a:87:d2:19:23:3d:77:6f:
a6:9a:e2:f8:8a:c4:79:81:3c:59:c6:0f:33:21:8d:
6d:c5:43:2c:c0:bb:8a:51:67:da:20:ff:66:52:b2:
d1:07:68:c7:e5:ce:56:0c:e3:a4:01:29:bc:4d:99:
29:9a:00:11:df:5c:29:07:3b:11:c8:a1:0b:82:ef:
d0:14:77:7a:95:25:64:79:93:c0:ef:37:87:fd:0f:
3c:b4:65:fc:de:dc:6f:cd:f1:4a:45:b7:13:06:bc:
15:a7:4f:da:46:bc:0e:f3:19:9e:83:50:26:97:72:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:ED:DC:8E:4D:C7:2B:9D:83:B7:F0:6C:45:7F:CA:5D:E8:D0:BA:A4
X509v3 Authority Key Identifier:
keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:2e:52:0e:27:95:b2:ff:7f:fa:d5:6f:99:79:90:3d:62:ff:
26:e4:0d:dd:71:1f:ba:d3:96:74:16:b8:68:a3:9f:b8:70:18:
57:a7:16:5c:3a:c7:25:3c:b8:a3:f1:c7:8c:e6:da:14:cd:4e:
f7:06:20:f5:8f:17:0d:b9:1c:a4:a2:85:a6:64:01:47:4a:2d:
00:a4:7e:d2:60:02:80:9b:32:64:03:90:f7:d9:41:75:b3:c6:
3b:f6:6b:d4:cb:65:f4:88:c1:d4:5c:02:4e:83:ea:ad:e3:29:
af:83:1d:af:e7:32:06:17:d8:00:a8:86:d5:56:2a:04:c5:db:
9e:5d:47:bc:23:72:b7:42:8d:14:30:b5:08:3a:53:60:7a:3c:
e3:59:4a:68:16:0b:71:8e:f5:41:97:fa:57:94:5c:25:fd:73:
c7:89:f1:52:d7:5f:3e:56:69:95:77:24:ef:d7:cf:bd:9d:16:
32:74:89:d9:81:87:57:13:bc:e2:8e:8d:bc:a1:c8:84:bf:9d:
09:91:49:93:e0:5b:9c:09:bd:2e:32:ea:d0:44:bc:e9:60:5b:
9a:cd:db:f9:dd:97:36:70:2f:0a:c8:55:83:28:57:cf:78:67:
fc:c1:7e:8f:50:35:73:e6:40:72:5b:22:30:9a:ee:99:2a:cd:
f6:8c:9f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:56 2026 by rpki-client