
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier: 0OBjQfJ36Ch3qYqqnfwT4ZNQOxv/sSIqvEpZgg0cRgY=
Subject key identifier: 2F:CA:71:EB:20:98:77:B1:4A:71:D3:8A:29:08:95:C1:E0:D4:97:3B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0D63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number: 0C8F
Signing time: Tue 21 Apr 2026 07:57:27 +0000
Manifest this update: Tue 21 Apr 2026 07:57:27 +0000
Manifest next update: Tue 28 Apr 2026 07:57:27 +0000
Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: MpiJyRRgT+EPsWXnl1zb1364Pk78o/l0IjSe2EU5l8E=)
2: 5164F13EDBD811F0A0A88CE756641951.roa (hash: S+wwMGadgYhMS5OREKeaPh6PDBaoFk4/7hdgf2PBnsw=)
3: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
4: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
5: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: gHvNsWly8Kw30Typ48MzQXoDCYERYi0RW34Z6gmffVg=)
6: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: RcYolDaRAN1Hi//EmOTv5sFW3I9hLGGajXq2gFlI3o8=)
7: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
8: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: rx1Mf7ylLJlz5TrZQMaxu72qnNGJnnaZIoeFSJobN+E=)
9: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
10: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
11: E3903588DA3311F082FD85DA8AD3641D.roa (hash: MfOj3lbGuO/G5TuCaMkDAViR5jscnY+4WI5jIiqpGsA=)
12: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
13: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
14: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: nu+mFZ9ymR0HVXSsVwuPPrVYbneUu3zo5gmJP5Qb5xc=)
15: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
16: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: bq9TzRhG0YcuxnkwLOhAfWs5GL/Qvk3+Q63cN6+9Ro4=)
17: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: s+8+Ay/MDWEzNmYQjEi8P9yXENJTqx4r4dR7RY92skY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 07:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3427 (0xd63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Apr 21 07:57:27 2026 GMT
Not After : Apr 28 07:57:27 2026 GMT
Subject: CN=69e72de7-9505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:38:51:da:44:5f:b5:49:f1:db:cb:53:be:
6b:87:37:dc:5b:8b:88:dd:86:93:fa:d8:38:52:75:
8d:3c:87:fb:09:23:c1:3d:db:c8:cf:88:77:9e:2e:
f4:98:1b:5c:ce:a4:56:f7:70:9f:c6:d1:19:23:6f:
eb:72:38:32:b8:1e:e1:7e:f9:d4:5f:e0:d6:f1:a9:
09:21:45:0e:b0:ee:93:c7:27:26:31:32:1c:36:60:
99:f5:d4:f4:4a:e9:8b:6e:ea:cb:f1:98:ba:8c:38:
ac:d8:0a:e9:ed:9e:ac:26:a0:ab:63:b8:84:e8:69:
98:35:1d:ef:9c:81:e8:56:f8:df:c6:4f:76:f1:44:
99:85:b1:44:f2:b1:25:df:fe:3c:29:ac:d6:50:fc:
e6:f2:c5:53:f9:4f:ed:05:15:32:32:01:7c:de:7b:
a1:16:84:7a:ab:7b:a7:7c:9b:ba:69:06:e3:15:f8:
22:14:da:c6:4b:7b:5d:08:75:ef:39:7b:1a:30:a7:
c9:71:35:e6:f6:41:58:01:74:dd:30:71:59:01:c1:
7a:ea:3b:c7:c5:cd:a7:b7:04:05:9b:83:86:4e:d8:
9e:a6:64:7f:df:41:04:ae:82:91:f5:e5:9a:13:48:
15:36:a1:ce:a1:20:1c:bd:ce:17:cc:88:b4:0e:58:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:71:EB:20:98:77:B1:4A:71:D3:8A:29:08:95:C1:E0:D4:97:3B
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:e6:e4:1d:ac:aa:32:44:ee:9d:e6:f3:f3:bd:57:76:76:b7:
e5:a0:d4:35:d4:a8:d3:d6:37:d3:81:3e:80:9c:f6:66:b4:57:
9e:fc:68:3e:bb:ec:a0:3e:5f:e0:39:86:02:5c:b1:67:7f:01:
de:d5:44:c9:3f:9b:c9:23:2f:cb:01:34:48:1d:0a:55:ee:f7:
6b:85:4e:7f:fc:3d:d2:97:4a:16:90:21:3c:c7:b4:31:fe:ce:
e9:2d:4b:20:d7:1f:a2:4a:c5:dc:1e:90:ed:61:c2:8b:f0:19:
09:a0:29:2a:c4:69:f5:20:74:36:ed:e3:01:24:76:b3:bb:0c:
e9:53:b2:8f:77:1d:5d:00:e2:2d:d0:1c:d7:0c:99:9a:d9:2e:
5d:82:57:5a:34:ed:82:f5:4e:bf:6c:0a:d8:9b:c1:4e:7b:9f:
e5:b1:ea:82:61:c5:94:2e:2e:23:87:fb:d9:50:c8:4a:bb:0a:
8f:4f:b9:b1:08:a8:33:fe:28:0e:f4:ca:83:c5:69:63:10:08:
63:a4:c7:6f:8a:f0:29:0c:3b:f9:1c:2a:5e:26:f5:5b:2a:b9:
d9:8d:b6:81:3c:0a:c7:21:68:bb:ab:e7:78:dd:2f:01:53:31:
03:e7:1e:88:01:3d:0f:f9:d8:9f:02:1d:0f:52:8d:0a:74:7b:
57:cd:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:04:02 2026 by rpki-client