
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json)
Hash identifier: 9I5HPhMA34/k06PZMcvFFWxbznoeos/oEidQEFdT9hM=
Subject key identifier: 08:E2:98:E3:53:D1:D5:D8:7C:0F:94:99:78:03:7C:C8:A6:2C:BF:B7
Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
Manifest number: 087F
Signing time: Sat 04 Apr 2026 20:27:32 +0000
Manifest this update: Sat 04 Apr 2026 20:27:31 +0000
Manifest next update: Sat 11 Apr 2026 20:27:31 +0000
Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: RAM8vPYyElzPyft/JBjLR6xL3cVIZffwL35882F63Wk=)
2: F43185921DF211F18E2EA673173D8C67.roa (hash: srrIw1L1shwtn6ty4ggxa65JRJwKoEkJgFL5J1FGVi8=)
3: FC73A04E22D611F184630225C8833773.roa (hash: tJS9rWyhxR4tRPQ8is4B5FOtrK9FChl388SXvR8zyok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291
Validity
Not Before: Apr 4 20:27:31 2026 GMT
Not After : Apr 11 20:27:31 2026 GMT
Subject: CN=69d17433-cf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:fe:f9:fe:b8:63:69:60:a5:13:e4:a3:e3:
14:92:36:47:10:35:9d:34:f7:31:97:29:c6:34:c0:
22:0c:de:60:5a:97:43:be:b1:65:73:76:d1:2b:33:
b8:f9:a3:48:92:93:e2:c5:88:e0:21:8b:6c:5e:db:
85:db:d8:e1:e7:8f:db:91:92:0e:47:6c:a8:66:24:
8c:5e:b6:8a:ec:d3:d9:be:c1:9d:34:36:8f:40:cb:
36:0d:80:01:06:e0:78:d7:e1:49:be:5f:bd:cc:2f:
d0:4e:db:65:0e:4e:c8:0f:f1:3c:f9:a8:b5:ab:db:
7b:bd:9b:da:07:a2:73:b5:a6:9a:04:64:1b:4c:40:
9a:95:d2:21:cf:19:86:b2:93:62:c8:b3:0a:c7:e8:
3c:71:6d:d8:7e:df:d8:78:d9:ec:1c:e1:a7:d9:00:
98:21:99:2d:c1:44:db:a2:1b:a0:e2:12:e4:f0:44:
50:89:09:12:48:12:4a:44:1d:4a:96:37:86:59:9c:
b7:6d:ef:8c:1a:58:b7:05:17:26:62:88:15:f5:bf:
a2:35:33:a8:04:6c:6a:43:c0:06:f8:fb:85:25:ce:
d6:4a:bf:37:05:68:57:7b:8f:c7:44:18:d7:9f:e5:
74:dd:c3:0f:98:a4:c8:ce:15:a0:91:9c:c2:0f:d1:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E2:98:E3:53:D1:D5:D8:7C:0F:94:99:78:03:7C:C8:A6:2C:BF:B7
X509v3 Authority Key Identifier:
keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:91:90:6c:d1:b9:52:fc:77:31:3c:5b:28:b7:f8:0e:91:42:
89:52:fe:bc:e7:3c:ad:58:47:6b:da:53:be:0d:2d:fb:cb:a9:
93:d4:cb:f6:c5:1e:74:1e:8c:b5:9f:f4:6c:85:c2:af:14:75:
b3:e9:05:43:2f:88:15:96:30:54:38:05:99:ec:18:a7:6d:65:
2e:3f:de:08:14:e4:d9:07:1b:18:ad:91:da:b9:cf:3c:ba:ff:
c3:8a:92:51:eb:c9:74:04:c5:fa:94:73:1f:ca:53:43:8b:47:
20:a6:ff:06:4d:61:f1:3a:47:f2:13:b6:ad:34:a0:5d:fe:90:
9d:ed:3f:58:03:c9:33:b7:d8:83:e9:7f:e2:04:98:c3:da:ac:
17:52:d7:0a:48:aa:ae:d1:5e:6d:24:4e:50:59:58:f4:47:0d:
26:f1:af:f4:cb:4a:37:1b:e7:b2:a1:7b:17:f4:e1:e7:66:d2:
50:fd:d1:27:82:29:a3:ca:bb:fc:6c:a7:0d:b8:5b:9b:d5:04:
5e:ac:3e:f6:d1:a7:09:0f:02:16:72:a2:6e:a3:98:56:34:27:
41:73:93:c4:75:21:54:0d:14:a7:54:b1:4f:2d:f6:65:ea:30:
96:b6:16:46:5f:89:03:73:1e:0a:7c:c6:51:5b:9f:a8:1a:a4:
27:42:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:45 2026 by rpki-client