
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
File: X45P1KbdY15DeC5aBVYiyrJlSjc.mft (raw, json)
Hash identifier: +ygk5hr1/TQsfCdFXucJagRwVgzbInJMC8KSEdmXp2Y=
Subject key identifier: 16:CB:24:44:7C:D0:CC:97:C1:A7:E1:4F:55:1F:38:19:17:E1:24:59
Authority key identifier: 5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
Certificate issuer: /CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Certificate serial: 09A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
Manifest number: 099B
Signing time: Sat 04 Apr 2026 19:47:40 +0000
Manifest this update: Sat 04 Apr 2026 19:47:40 +0000
Manifest next update: Sat 11 Apr 2026 19:47:40 +0000
Files and hashes: 1: X45P1KbdY15DeC5aBVYiyrJlSjc.crl (hash: AtXqk3hYcxx0STAWs5TpZNd9SyBBvlWdDVQrjY3Hr5E=)
2: B757FF4EAB8311EA9983D717C4F9AE02.roa (hash: +2jTblD+/4omeCEhDlwqOghx+nNjjgIJKr1/zmP67Lo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469 (0x9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCF31, serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37
Validity
Not Before: Apr 4 19:47:40 2026 GMT
Not After : Apr 11 19:47:40 2026 GMT
Subject: CN=69d16adc-d722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:cc:e8:67:48:2a:86:a1:e4:a8:eb:ae:8c:
13:04:31:ac:c9:bb:22:39:7d:7a:ef:db:25:a2:55:
0e:e3:3c:9e:53:e7:49:60:1c:50:ef:b0:f2:5f:de:
52:05:f6:75:89:4d:6f:65:67:73:eb:73:d7:0c:67:
82:fb:cb:bd:45:5f:0b:cc:99:f1:16:fb:66:0f:cf:
0e:dd:b1:50:88:63:a2:75:f1:63:6e:e1:62:d8:2b:
25:3e:21:e5:e2:fc:24:7c:a9:e3:9b:e8:c0:38:20:
81:58:c1:cc:d6:b2:3c:af:57:70:71:9b:f3:b0:e7:
be:74:f7:02:29:2e:03:1f:3f:d8:8f:c2:3e:01:db:
60:63:01:9a:e4:86:d6:8c:9b:73:7e:76:8d:1c:81:
52:4d:d0:d8:ac:1c:70:7d:51:2d:6d:fa:61:38:6e:
e8:af:c9:d0:d9:4b:b2:a9:c7:1c:a5:2c:fb:71:ec:
f8:f5:8b:e0:30:24:51:1c:d1:a0:1a:c4:28:52:bc:
55:4b:63:c9:81:ce:00:9d:96:d7:25:bd:d8:f8:c7:
e1:b1:ac:76:23:2c:4f:80:c9:54:bc:b7:a9:9f:2d:
4c:6f:2b:45:98:85:7a:86:39:7a:5e:2d:d8:68:ad:
d4:92:9b:c5:b0:8f:9e:c1:23:b8:9e:2c:7c:df:8e:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:24:44:7C:D0:CC:97:C1:A7:E1:4F:55:1F:38:19:17:E1:24:59
X509v3 Authority Key Identifier:
keyid:5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a7:b0:cd:65:bd:9a:b3:ee:83:a2:1c:06:0b:e7:c8:8e:38:
c1:1e:ed:c2:61:76:38:36:07:f3:ce:93:8a:98:ce:ea:28:32:
af:42:e0:43:7f:69:60:59:f8:0e:41:87:1b:3f:db:a5:3c:07:
90:4d:20:6d:af:8a:1e:8f:dd:f2:6f:43:5d:1f:79:3c:65:eb:
b3:50:da:ba:42:9d:97:8d:2e:3c:5f:5c:70:8c:68:3d:cd:e8:
47:b8:c8:e6:1f:89:67:fe:d0:18:fa:04:50:87:1e:9b:51:03:
70:7e:f6:c8:56:24:b8:2e:76:b6:d4:3f:df:f7:b6:b6:ae:7f:
98:41:35:e0:be:38:e6:d5:ab:f4:72:5b:d7:d0:20:39:03:8a:
fa:8a:16:95:39:d0:d3:1a:f0:37:f5:af:4f:4f:4e:a6:ff:3e:
12:d0:ef:59:64:e2:46:42:30:02:f2:e5:f9:ce:da:b1:f3:59:
32:d9:13:fe:d4:9d:01:d5:bb:25:34:17:b8:ab:a4:4b:52:95:
70:43:de:d1:c9:c0:1d:95:f7:d5:29:53:7a:6c:a6:bc:56:42:
9b:dc:52:8d:01:b9:c2:1d:ee:dd:ab:d4:b7:5f:5e:42:5b:96:
04:91:47:49:ff:c9:d1:cb:bf:c0:28:c6:8b:be:8a:00:0a:54:
19:4d:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:45 2026 by rpki-client