
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft
File: 089k1dsXYfy2pVLwaAkTMMW19Ts.mft (raw, json)
Hash identifier: rglYNMTCkKSIDPukEwx2KMKYNPr3vK9182CYKYjOAjA=
Subject key identifier: F5:9E:52:94:ED:75:15:7C:AC:84:25:59:9B:C4:97:33:5D:FA:6B:97
Authority key identifier: D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B
Certificate issuer: /CN=A91A25DF/serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft
Manifest number: 92
Signing time: Fri 17 Apr 2026 07:12:21 +0000
Manifest this update: Fri 17 Apr 2026 07:12:20 +0000
Manifest next update: Fri 24 Apr 2026 07:12:20 +0000
Files and hashes: 1: 089k1dsXYfy2pVLwaAkTMMW19Ts.crl (hash: +oy+tHJolGvOwJBee6GntjR6aO0zSMaEYcgLAN9xK+I=)
2: C54DD1F45EDA11F0A5EAB579C4F9AE02.roa (hash: Hc8ozT9yDfNYsIpquS99Gm4q+mTiTQ1cphIlHACdz5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl
rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A25DF, serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B
Validity
Not Before: Apr 17 07:12:20 2026 GMT
Not After : Apr 24 07:12:20 2026 GMT
Subject: CN=69e1dd55-8999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:f1:af:85:03:b8:0e:e1:9a:6d:ee:db:8a:
88:42:55:bf:5b:39:5d:04:0e:9e:54:70:f2:42:2d:
97:01:8b:d1:da:62:47:b1:f5:78:4a:4e:72:68:a3:
6d:7f:3a:d7:68:9c:af:b0:f9:ec:c4:58:cd:5e:e7:
ef:c4:fb:38:a7:01:96:5f:8f:1d:91:94:e0:80:03:
16:50:7e:c1:81:0e:80:8c:5c:de:84:a2:33:6a:4d:
c2:e2:68:2d:e9:94:71:0c:0c:b4:a5:51:e5:79:c8:
98:96:83:1f:10:40:dc:d9:bf:24:26:30:fe:ed:3a:
60:92:8b:73:95:0f:f5:5c:c7:ed:17:80:9f:a8:ee:
b2:7c:d2:ee:c2:84:be:92:d5:c2:24:28:dc:38:a0:
8f:48:d0:74:69:30:db:c1:d7:1b:cb:f3:3c:3e:68:
f1:39:ce:d7:e5:8b:3f:a3:48:41:59:25:b9:04:04:
6e:cb:ff:91:57:7f:49:2c:db:3a:0c:2d:69:e8:be:
92:5a:ed:86:34:80:b0:2e:76:57:f8:43:af:19:4f:
64:a9:20:a4:06:90:16:88:4f:16:70:74:c8:97:f9:
88:f5:30:be:2f:cd:00:3f:bd:8c:79:f3:b9:93:51:
6d:c1:67:77:b4:ce:98:32:58:7c:15:8b:4d:96:29:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9E:52:94:ED:75:15:7C:AC:84:25:59:9B:C4:97:33:5D:FA:6B:97
X509v3 Authority Key Identifier:
keyid:D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:51:4e:92:a0:06:b3:1a:03:47:b3:83:e7:de:81:f3:26:20:
55:6f:06:f2:d1:06:2c:12:8c:f6:e4:ab:ce:69:4c:28:8a:27:
46:74:a4:0f:b3:da:27:2d:3e:ba:af:17:99:7f:90:73:de:25:
29:d2:99:f4:80:ce:e1:4d:f0:0a:a3:86:89:10:67:ca:0b:83:
76:9c:aa:3e:12:09:b8:85:09:8a:94:42:0c:95:db:a6:b1:25:
77:76:51:03:92:48:21:bc:16:74:b7:9f:eb:ef:42:4d:ad:90:
94:9b:16:eb:d5:96:3c:4a:d7:f2:6d:0d:12:57:7e:6f:96:f2:
4e:79:5b:fd:a6:27:b8:d2:7d:73:d6:b3:81:84:fd:60:c6:e5:
8f:6e:33:19:52:0c:ec:49:6e:0d:a3:0c:02:c6:2c:47:3e:65:
ff:05:79:f7:4a:d6:d6:69:e8:c4:c3:9d:0b:9b:3c:f7:08:ec:
ea:a8:28:c2:ea:9d:34:ef:45:b8:fe:2c:de:33:7c:f8:fd:0d:
3d:96:8a:8b:2b:66:cb:c6:a3:7f:42:78:61:e1:5f:73:e8:62:
dd:14:ba:30:8a:a0:d4:58:68:7f:93:a5:c5:c8:df:d1:a1:77:
47:3a:4f:ce:c7:fd:51:20:2c:84:4e:46:4a:f5:6a:45:f6:b0:
f9:6b:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:30:50 2026 by rpki-client