
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File: ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier: bNFyOBG5Jldqipm1CdYzS8/ZnL1NGkwSFOO7vIIhdGU=
Subject key identifier: AC:53:6E:D4:D9:A0:6B:7A:B9:30:34:C5:3A:33:C3:11:CA:2B:DB:ED
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number: B9
Signing time: Sun 05 Apr 2026 06:33:48 +0000
Manifest this update: Sun 05 Apr 2026 06:33:48 +0000
Manifest next update: Sun 12 Apr 2026 06:33:48 +0000
Files and hashes: 1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: ETHnduOblj81GpoNZpBlD7ljk3CY7HYYW+F82TP40/A=)
2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: Wv3Hw56ZpmiR46v0hXlQur/T4NvoJ9rmr1BmJ2RxWtU=)
3: 7020A3F6FB6411F0B417A8544B6F56BC.roa (hash: 0uJQxDpAOHaABeJ25wfn3VTH/VdzhDmcRhWseG4IhVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Validity
Not Before: Apr 5 06:33:48 2026 GMT
Not After : Apr 12 06:33:48 2026 GMT
Subject: CN=69d2024c-78be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:1c:69:82:ee:c8:d4:2f:e8:9c:f8:f5:aa:
b9:4f:d0:0f:ff:06:2c:b3:2f:c1:a1:18:12:da:96:
fd:9b:f0:c4:41:34:26:73:a0:bc:e1:63:9a:b9:98:
91:ea:16:25:73:16:6a:40:dc:5a:84:24:d4:13:86:
43:70:82:cc:91:ff:e8:0d:fe:e3:f0:e9:76:2a:5f:
f6:49:e4:52:92:61:01:0c:90:ad:6a:30:c0:ce:67:
50:f1:70:5d:be:3b:c9:8c:7b:ef:62:9b:0b:96:05:
fa:6c:02:b2:18:96:4d:2e:e2:67:d8:9d:03:e5:c5:
11:7d:6d:a0:5e:4c:ba:1c:8a:ad:57:57:c7:9f:8e:
ac:e3:86:f0:88:91:e0:1c:a8:58:5f:61:09:10:df:
b2:37:1f:01:13:08:1a:49:53:1e:f1:c9:c9:00:7c:
ec:95:2e:d8:ff:87:60:fa:e8:53:bd:4d:d4:6a:17:
36:14:ae:55:15:3e:c0:82:d2:6c:d0:63:e3:47:14:
0b:74:06:46:f5:b1:3a:89:47:6e:de:b0:0b:f0:41:
45:8e:95:a0:12:d7:02:9f:8a:c9:d2:fe:42:9d:f2:
f0:76:11:3e:86:7f:78:14:0d:39:5f:ce:e0:90:91:
2d:96:7e:47:e4:b0:e8:d7:13:2f:08:ed:a1:8c:09:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:53:6E:D4:D9:A0:6B:7A:B9:30:34:C5:3A:33:C3:11:CA:2B:DB:ED
X509v3 Authority Key Identifier:
keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:8f:eb:38:85:6a:d9:91:5b:6d:db:1c:83:cc:6a:4b:62:ce:
2e:b8:3b:4a:9e:7a:06:00:9f:55:96:31:1f:fa:b0:b5:51:57:
73:d5:f8:62:4f:4d:7c:20:9c:17:af:5e:e3:5c:d5:2c:f5:d9:
11:85:28:e1:ee:2b:46:a7:5e:a1:3d:72:cd:be:a6:37:cb:9a:
a9:15:a3:40:9a:aa:b1:fa:eb:51:f9:3a:1c:1d:91:a1:7c:cf:
6c:17:c5:bf:11:cf:f4:60:60:af:9c:f7:0b:5d:da:96:e1:48:
5d:fe:8e:50:25:96:3c:62:ef:16:0b:f3:4a:9f:25:42:3a:76:
c0:58:b1:23:a0:dc:ae:2e:3e:fc:86:42:c6:50:00:b3:23:0e:
a4:92:eb:02:33:10:32:2c:ad:de:9f:5b:a3:0d:eb:4f:d1:19:
6b:19:60:61:9b:4a:d1:08:26:3d:35:2d:c1:82:d5:21:07:25:
04:04:28:bc:58:68:98:c9:79:f4:2f:ce:3d:24:11:00:65:d1:
93:53:f5:f1:0a:b9:e2:2f:51:31:7d:83:b4:79:0d:59:0e:dc:
ff:05:76:ef:d8:23:a3:4a:94:82:51:b8:14:43:2e:f9:73:3a:
63:7b:1f:ad:e2:9c:e4:7c:ba:3d:34:82:e9:a3:87:cd:13:d3:
bb:df:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:15 2026 by rpki-client