
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier: 9/4KZ4mC6+PXYBpoXYg91Q7DbhcPqEgTS/Ujd1Z6aaY=
Subject key identifier: 17:BB:8B:DD:EC:EF:B7:15:F8:84:F6:09:68:B0:92:9B:31:65:EB:90
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number: 0268
Signing time: Sun 05 Apr 2026 01:41:00 +0000
Manifest this update: Sun 05 Apr 2026 01:40:59 +0000
Manifest next update: Sun 12 Apr 2026 01:40:59 +0000
Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: LHrnHgNjnJSH6ofIP+MeyekGYy5vrklGlWEj7Z/rCb8=)
2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: slVc2MAuomJ1lVCpaSZf3MYFxy+QIrbxktNgNNmSdu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Validity
Not Before: Apr 5 01:40:59 2026 GMT
Not After : Apr 12 01:40:59 2026 GMT
Subject: CN=69d1bdac-c825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:61:34:27:80:af:38:20:30:d3:12:76:63:
60:0f:13:98:d1:b1:6c:32:26:35:25:0e:d7:89:17:
ef:85:3f:60:a8:73:8e:a7:26:3e:86:cf:d3:ba:2e:
1a:25:ca:6c:0d:2e:da:1b:2f:02:74:83:e5:b9:38:
e0:7d:1b:1d:aa:83:65:db:ab:e9:18:0f:32:c4:53:
b3:71:19:90:d1:63:b1:1b:a1:b6:2f:91:9c:f2:c2:
d3:14:7b:43:d9:e3:cd:e7:29:77:c9:cc:04:78:1b:
9a:ea:74:ea:ed:f6:6a:12:16:62:86:6b:2b:45:92:
01:80:49:6b:fc:f9:6f:21:ac:8b:a6:c1:2a:a5:da:
ce:48:ec:b3:7d:a2:85:12:39:92:0c:5c:2d:ae:37:
75:47:6e:7f:4d:74:f2:a0:bc:61:3c:68:9b:38:be:
51:8d:65:a0:1b:b0:9f:84:b2:c8:56:fd:26:a3:d6:
50:06:29:59:0c:3e:a0:4e:3a:a4:08:4d:d4:d3:14:
a4:3c:3e:43:a1:a4:cd:46:c3:c8:0a:c4:17:df:10:
bb:f2:8e:7d:64:1d:c6:7c:84:5f:a7:4f:94:37:38:
87:b1:44:5c:34:f3:2a:fc:bd:71:5a:61:21:b1:b4:
38:5d:d7:00:eb:54:15:de:3b:19:08:fc:5f:d0:b1:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:8B:DD:EC:EF:B7:15:F8:84:F6:09:68:B0:92:9B:31:65:EB:90
X509v3 Authority Key Identifier:
keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:30:d5:89:2a:34:f5:2f:0b:c3:6b:b2:9b:ad:18:68:fa:9f:
cd:5c:9c:52:9e:cd:09:d5:a0:c3:52:64:4b:f6:a0:09:20:dc:
57:e5:ba:16:cf:f8:70:41:8d:36:60:09:e4:52:46:fe:bb:9f:
e2:63:a9:02:59:f5:d8:df:e7:71:31:83:87:37:c4:71:d4:c0:
2a:f6:d9:d1:04:45:e3:85:78:67:42:06:c7:66:22:52:2b:ec:
9d:0f:0d:cc:cf:11:f3:52:75:2a:00:bd:db:6f:e5:5b:e3:9b:
06:12:90:72:fa:89:89:f7:03:85:20:d5:86:7b:88:a5:a3:00:
06:44:4f:2e:3b:52:05:a0:9f:e6:1a:7a:6d:03:50:a0:14:7d:
7b:40:2f:ea:e7:e7:7f:cf:20:2f:bc:16:5f:52:df:76:58:2c:
3f:6f:aa:dd:2f:d6:e6:7d:a7:de:1b:bb:d8:0c:10:60:b8:d1:
4e:85:a2:94:01:e7:f9:be:5a:9c:d4:b9:30:99:34:41:f6:3f:
53:ed:af:bc:a3:df:e1:bc:8f:82:55:7d:75:11:7c:97:4f:4c:
a7:fe:bd:d7:59:ef:99:a7:a0:8a:19:4e:92:ad:80:f2:bd:37:
f3:41:9c:5d:b0:bb:e4:88:d9:ec:e0:35:2b:6b:94:6f:17:1c:
77:97:5e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:04 2026 by rpki-client