
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json)
Hash identifier: i93bNpO0sTFUGte8pfUhtHzvuU9H+DkschYiEp/vSwE=
Subject key identifier: 1F:49:F1:66:AE:5C:2A:43:88:C3:8B:7A:95:03:59:59:52:BB:BD:9E
Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
Manifest number: 0296
Signing time: Sun 05 Apr 2026 01:20:06 +0000
Manifest this update: Sun 05 Apr 2026 01:20:05 +0000
Manifest next update: Sun 12 Apr 2026 01:20:05 +0000
Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: hdfJJQRsbEjYWcRx9FZXYk4Q8++yKd1aKbL6AKdc/LI=)
2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: UoPSD/sB882BUptuBl7wMhpHSR5jbx5b49dtZHebnaw=)
3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 10T57IR+PMdmV6j2kmrAkG4ca6NjWj+tRvDyWCCrDmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Validity
Not Before: Apr 5 01:20:05 2026 GMT
Not After : Apr 12 01:20:05 2026 GMT
Subject: CN=69d1b8c5-cb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:ba:66:a9:eb:db:8b:98:85:c5:bd:96:59:
8a:21:d2:35:ca:9e:64:d0:48:9f:21:93:ec:07:f1:
27:9d:32:4d:d4:82:86:40:55:a7:f3:6d:92:73:4f:
e8:cb:50:98:5a:ec:c0:d1:dd:00:33:e3:63:48:5d:
0e:5e:b6:f3:04:54:31:da:21:ff:5c:80:39:cf:80:
4c:2a:8a:fe:0d:ea:72:fb:93:b9:0d:63:cc:43:95:
2c:96:44:7b:46:2e:85:7a:d4:ab:44:ca:3f:a2:a3:
d9:9d:0e:13:52:5a:30:95:f0:36:97:4d:1e:ff:df:
8e:11:fb:8a:d2:a6:47:d1:58:77:25:2e:85:58:cc:
7a:03:06:2e:83:db:c6:7a:5c:f0:d6:00:b3:f1:f6:
81:9c:63:80:b8:c0:57:20:15:2d:ce:61:ab:67:7b:
00:b8:5b:d4:7f:da:fd:13:10:d5:83:2a:a7:2c:c5:
31:5e:7a:fd:c4:7b:7e:08:3c:60:f0:85:c7:c9:c2:
c4:9d:df:f8:48:21:14:33:61:c3:7b:03:bb:9e:77:
7f:30:d0:35:49:95:98:75:61:e0:14:a8:21:e5:d9:
f1:e1:33:5a:48:f0:b1:d5:e5:3c:45:9d:c1:56:60:
04:32:07:88:1b:34:2a:24:23:24:ed:a9:49:38:32:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:F1:66:AE:5C:2A:43:88:C3:8B:7A:95:03:59:59:52:BB:BD:9E
X509v3 Authority Key Identifier:
keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:9b:57:48:2d:89:24:84:3a:fe:39:31:71:07:be:40:f5:9e:
3e:75:0f:9d:8a:5a:bb:3d:b5:cb:ed:43:60:17:dd:51:8e:25:
ae:48:89:4d:07:6b:ed:b1:00:18:61:f5:cd:1e:ee:8c:13:24:
e2:07:2d:c7:55:74:41:4e:1e:2f:48:d2:b1:2e:ad:ab:d6:df:
2f:6c:a2:d8:52:d3:e1:07:1e:61:1d:bb:42:60:16:51:db:a4:
95:9b:35:21:55:e5:aa:f3:c2:eb:f9:80:80:f3:ba:40:95:1e:
fd:17:48:33:59:14:59:61:fa:6d:dd:64:f3:64:30:3a:30:9c:
11:c5:fb:c9:8b:33:dd:a0:f6:b1:c5:90:26:9c:94:7f:98:5b:
a3:c5:88:83:43:a2:eb:9f:98:66:89:12:56:ff:a1:dd:18:61:
85:21:0f:b5:a5:66:8f:58:ef:9c:80:88:6c:21:e7:42:5e:c8:
35:d4:2e:88:ca:5d:0b:ea:78:78:7f:c6:df:19:4f:4a:d8:de:
10:4d:aa:21:08:6f:3a:a9:10:3e:cf:cc:11:24:d1:f3:b6:61:
fc:16:f4:13:ed:e4:68:81:5b:c9:8b:19:fc:f4:79:97:46:c9:
b2:c8:52:98:54:33:86:ce:f2:e5:36:37:7d:8d:18:23:7e:f2:
9c:c6:9f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:18 2026 by rpki-client