
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: X8jGlZlAPY29FQp0DlW5XtNgJRQieBx29MZEguFxPCI=
Subject key identifier: 30:E3:88:99:84:9E:82:77:55:56:C3:46:24:98:CF:B2:AE:B9:C9:2C
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 02B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 0291
Signing time: Sun 05 Apr 2026 01:26:30 +0000
Manifest this update: Sun 05 Apr 2026 01:26:29 +0000
Manifest next update: Sun 12 Apr 2026 01:26:29 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: JKTaU9GocnyBS+s+dwSQRYEJTGoJgA5pQt8+kccmNFs=)
2: 455D199EE38B11EE84566164C4F9AE02.roa (hash: gOV5rPqQrYO4YVfNAWomUe0MtcUzLHbDhM46sP91PRA=)
3: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: IUtOdJiE9Ch7kGLlPuHyU4+jmWHwHE+NOWpak4vAtYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Apr 5 01:26:29 2026 GMT
Not After : Apr 12 01:26:29 2026 GMT
Subject: CN=69d1ba46-c3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:81:72:bc:6f:16:80:28:28:d1:91:82:12:
7f:ec:c8:5f:2a:13:10:dd:71:d4:67:c8:56:5e:dd:
d7:ad:22:a2:77:20:30:87:21:99:c4:cb:a8:a5:a4:
7f:31:ff:88:b1:67:da:9a:b9:c4:d7:4e:c2:83:10:
42:1d:c8:1f:bb:ba:f9:95:d8:ee:00:c6:ea:fd:52:
46:4e:e2:69:cf:50:96:c3:ab:a5:83:a4:c1:0c:31:
8a:fb:ca:cf:23:60:90:44:18:55:35:92:99:10:1e:
e0:78:f1:f6:70:f9:51:c0:23:4a:4f:d3:d1:11:98:
22:9a:4c:17:a3:07:7c:c8:7b:cd:ba:7b:9a:f7:b4:
80:2c:95:08:4e:a2:74:bb:e5:66:6d:0a:f4:c4:e8:
63:05:21:5e:06:d3:3c:43:63:2d:99:89:f9:9b:8d:
4d:11:f1:4e:f9:dc:e0:a4:4a:fb:e3:bb:5a:df:40:
85:a2:9d:d8:bc:5a:89:4c:f7:34:9f:41:9b:06:6e:
e1:72:c2:d5:67:cd:3c:ab:31:dc:04:86:5b:69:ed:
94:69:e1:ef:3d:ee:28:36:ac:38:03:01:ef:23:2b:
73:29:b3:12:e7:76:d3:11:6f:89:c2:58:db:4d:d5:
0a:e2:a6:f7:f6:1c:2c:16:ff:a8:55:39:a3:2d:a3:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E3:88:99:84:9E:82:77:55:56:C3:46:24:98:CF:B2:AE:B9:C9:2C
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:07:60:e0:4a:62:8c:93:ab:eb:48:bd:75:0b:da:80:4f:46:
a7:88:c5:21:0f:83:18:51:e0:7d:f9:fd:1d:b1:89:68:09:3b:
ac:6a:46:50:27:38:56:8b:af:3d:67:a8:d0:4e:8b:81:63:04:
6b:f4:fa:9e:90:34:91:c7:99:9f:76:b8:c9:82:88:e0:c5:69:
18:70:67:8b:d7:d7:17:69:16:6b:09:21:d8:94:47:b6:de:f5:
5b:05:3e:40:c0:82:a8:98:f4:a5:40:e3:93:2b:10:6f:1e:5a:
7c:71:8e:68:7a:ff:ef:8a:61:92:8c:f6:36:fa:33:8e:35:90:
88:9c:8e:24:bc:b3:b9:96:dd:b4:c7:90:ae:d0:83:c3:7d:5f:
c7:95:5e:c8:09:e1:ee:9b:4c:4e:4e:f7:2b:93:fc:2f:4c:5e:
c0:f1:9c:07:ef:5a:f2:a2:e6:85:b5:aa:32:b0:0f:62:95:4d:
31:42:87:a0:5a:88:4f:45:31:9e:17:ea:36:8f:be:5b:9d:d1:
8c:e8:26:76:14:7c:7c:20:ea:44:87:67:ff:03:db:e2:fe:ae:
48:c3:d6:f4:d8:3e:3b:dd:ed:67:5f:e2:5f:1c:4f:aa:ea:f5:
7b:6d:2e:ce:2c:e0:d9:32:82:c3:2c:8b:be:dd:43:00:3c:7b:
f3:ee:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:35 2026 by rpki-client