
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json)
Hash identifier: L0YKkf5jGsTqH3swnXxbWd3lzurWaMC0QB3d/LRYtjI=
Subject key identifier: 19:7A:68:51:BD:1E:85:81:75:58:8F:E5:CD:49:B8:F0:BF:DA:63:AB
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
Manifest number: B3
Signing time: Sun 05 Apr 2026 06:27:47 +0000
Manifest this update: Sun 05 Apr 2026 06:27:46 +0000
Manifest next update: Sun 12 Apr 2026 06:27:46 +0000
Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: THE7rjIqOOWpzGP15yRrwrLS0uRx+X5J2aG9Ex7zvdY=)
2: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: vsIGVvlGCJQuRvbSj+mUc0cTXNJknUlsD/Soxx53ucA=)
3: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: 2Zw4KOVcRPZL7NToz0OAHJZCRTk4ni0giRlBSLkkuak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Validity
Not Before: Apr 5 06:27:46 2026 GMT
Not After : Apr 12 06:27:46 2026 GMT
Subject: CN=69d200e3-50de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:98:9d:20:28:94:81:a7:21:9e:a5:df:d9:
9a:31:07:82:69:70:6e:a4:5e:c2:6e:36:e1:19:8a:
19:a1:c5:31:ee:c0:26:8b:55:12:a0:9c:45:30:9b:
b3:63:38:02:5c:8d:e7:18:78:65:e8:e6:19:4a:d0:
96:9e:79:d0:ff:7c:5c:e7:85:a7:42:48:3d:a9:f4:
f4:ec:23:ce:ef:56:c3:10:4c:b4:95:8f:b8:8b:89:
86:b7:16:71:ac:4f:d4:2a:af:55:01:eb:07:fc:c3:
39:82:c2:fb:48:2e:19:c2:69:0d:bf:37:4b:27:5b:
3e:ea:2b:37:ef:ea:f0:e5:1e:56:60:44:f8:01:e5:
75:b1:d2:a5:66:01:19:48:c1:3c:77:2c:20:77:9a:
61:b6:7e:35:2a:f7:23:90:c7:7c:8b:6c:75:5a:36:
15:14:af:0d:84:5c:43:29:6c:8d:2f:a4:80:e2:9e:
a1:06:4e:65:a8:90:03:a2:01:f0:5e:46:01:ea:14:
b7:b4:b2:d1:3c:4d:4d:5c:1d:0d:e3:1b:c8:04:c8:
80:17:f2:2c:8f:46:87:f0:13:f0:20:c0:cc:42:21:
75:8c:16:2d:89:91:a3:ac:57:9d:89:14:a0:6b:5d:
5a:fe:ab:e5:a7:39:56:12:46:11:7a:88:6c:f4:45:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:68:51:BD:1E:85:81:75:58:8F:E5:CD:49:B8:F0:BF:DA:63:AB
X509v3 Authority Key Identifier:
keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f1:44:ca:6e:5b:c7:b2:7c:8d:5f:54:b6:4d:6d:da:59:8d:
7c:fa:d2:22:c4:b2:38:1a:5f:95:4f:0c:3d:0e:c1:67:df:0e:
22:6d:65:eb:db:f7:7f:82:24:1c:71:72:a0:27:6d:a9:0e:9e:
86:20:e3:51:74:93:a0:26:6a:61:89:83:90:fd:4a:29:8e:25:
73:34:2e:62:23:b4:fb:51:dd:3f:23:8f:56:ea:46:5e:e1:d3:
3d:97:bd:8a:b2:2d:2e:b4:82:61:c0:5b:45:03:b4:ad:82:fb:
2a:40:de:c5:68:f1:6c:c7:44:f5:b2:78:c2:cb:60:3e:fd:7e:
9b:82:05:dd:39:84:97:6b:19:50:b8:de:05:1c:d2:6c:3b:37:
25:aa:ee:ce:6c:f4:42:a9:53:c5:ea:67:f4:b3:de:c5:e1:54:
ff:44:88:f4:2b:9e:fe:51:77:6c:69:50:13:d3:b5:1c:23:4e:
3c:2d:38:11:77:67:a1:35:d3:a4:83:cb:c8:c0:6b:19:38:f7:
d5:04:03:f7:44:36:b0:b5:13:9f:c2:8f:c5:4e:fc:38:6e:6b:
74:e6:aa:52:71:c7:e1:ec:65:bb:e1:3e:73:78:45:99:ae:a0:
9a:5e:0c:e3:5c:e4:3a:8a:de:74:43:54:a8:48:7d:d0:f6:77:
11:ed:71:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:33:56 2026 by rpki-client