
$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json)
Hash identifier: aKOmKFaSMussbKMSpsTdpZXZEadM1mixZMhVMFRp07E=
Subject key identifier: 10:22:BE:8E:87:7E:AD:8E:3C:D2:A0:4D:46:6D:69:C0:63:6F:2B:93
Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60
Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
Certificate serial: 021A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
Manifest number: 0214
Signing time: Sun 05 Apr 2026 02:26:16 +0000
Manifest this update: Sun 05 Apr 2026 02:26:16 +0000
Manifest next update: Sun 12 Apr 2026 02:26:16 +0000
Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: YxIpERahA/Ey9GUCoP/YSQ2UJXCc2F7V9dod+f/vutE=)
2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: w83Gd1qNybw8NY4qox6lPSa3DzAa4i1Y84/n9D6sf/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl
rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 02:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91889A4, serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860
Validity
Not Before: Apr 5 02:26:16 2026 GMT
Not After : Apr 12 02:26:16 2026 GMT
Subject: CN=69d1c848-fcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:f4:28:94:89:1a:fe:80:45:d5:3b:2b:7e:
a8:d0:80:46:15:46:b5:ec:a8:59:86:b1:a2:3a:7f:
a7:2f:39:02:03:6c:52:10:f0:49:00:a3:58:42:2f:
bf:23:2c:de:61:19:7e:13:36:ce:b9:b8:31:a9:13:
b6:72:37:f6:a6:a9:97:c3:43:5e:f9:8d:e0:fd:b4:
d1:62:69:1d:35:73:6a:1c:51:89:cf:71:e9:c9:12:
d2:d6:e8:ec:73:9e:5c:6d:30:00:54:91:cf:e9:96:
48:21:73:9f:61:04:96:4a:f3:71:7a:76:c5:f9:a5:
d3:0c:ab:36:f1:4f:45:4d:11:59:09:1a:43:cf:34:
2e:0e:a2:8a:55:86:9d:d4:b8:bc:10:14:84:f9:20:
84:e3:a7:65:b0:55:ea:14:42:79:b8:e3:b6:82:4f:
02:fa:8d:f9:ce:f7:db:7b:2b:37:04:dd:ff:3d:5a:
59:6b:3c:3f:1e:f9:8f:f7:49:e1:32:71:c5:71:c5:
64:a6:71:08:50:45:d2:ea:78:b5:47:de:24:19:6b:
5e:d3:a2:8d:ac:a0:02:84:cd:e8:36:5d:db:d6:6e:
4a:e6:56:4f:1c:cb:a6:13:32:d5:c4:9b:93:d9:b4:
fd:81:2b:5e:59:e1:03:ae:78:c6:72:04:63:6b:07:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:BE:8E:87:7E:AD:8E:3C:D2:A0:4D:46:6D:69:C0:63:6F:2B:93
X509v3 Authority Key Identifier:
keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:e7:85:94:4a:50:32:3e:ae:a9:0b:5f:3a:6f:9a:bc:d7:d5:
e1:19:a8:93:6b:eb:93:be:ff:cb:30:15:f2:2b:41:62:53:14:
c3:00:bb:a8:8a:21:46:82:0d:8a:80:d1:bf:04:5f:5e:3a:e7:
5a:c6:7f:5a:15:fb:60:8c:d7:42:50:4b:ba:20:7e:12:d2:29:
78:29:60:8a:53:73:84:21:45:ae:e1:80:42:9c:02:6b:3f:62:
12:d3:4a:16:77:be:fd:a3:5d:1d:c6:91:14:5c:27:82:07:6a:
5b:b5:08:2c:f6:39:58:a4:26:f0:41:4d:fd:88:0a:b0:52:53:
ea:4c:d9:b3:33:10:48:8b:73:b3:86:bb:0c:ac:0c:67:65:0d:
6e:58:34:01:f2:f2:76:aa:6f:a7:e4:83:01:36:54:80:17:d2:
76:78:c5:46:88:40:08:ca:d9:7b:b7:b9:85:0a:f8:0d:f3:35:
fe:05:2e:01:3f:cf:57:e4:e8:17:71:f9:21:ab:e3:c8:ef:6d:
32:d5:3f:99:1b:fa:66:94:c6:77:b8:d6:0f:b5:1c:17:4e:37:
32:91:95:0d:4a:14:ef:a7:8f:33:bf:14:4a:c7:b1:98:c8:65:
fe:cd:6f:32:f7:52:a3:16:99:91:c3:48:60:0a:0f:fb:b1:ed:
34:d0:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:46 2026 by rpki-client