
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier: rx6UnmESUzynJJlPJpw5UEeQhjeH5WXy9cNsOWdCwh4=
Subject key identifier: B4:59:31:EF:57:32:DD:49:76:58:FD:11:B7:A8:50:08:79:7F:B2:6F
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 0A19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number: 09C2
Signing time: Fri 24 Apr 2026 19:57:25 +0000
Manifest this update: Fri 24 Apr 2026 19:57:24 +0000
Manifest next update: Fri 01 May 2026 19:57:24 +0000
Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: igVF37eeMHuWbCuyGIMLp6x1LZ4zUfD1iBx3PJYlx7E=)
2: 6B7D02AEB4A111F08515F713C4F9AE02.roa (hash: KSjOH0qSpAK/DBNETg1G0TL4OaIKzJinGTqF6Z++SO4=)
3: 2857F2E4111A11EF86332415C4F9AE02.roa (hash: OcTJGmV3ruCByOlEEfhn4J37GE6D+EDW5cjJYcZ4n2I=)
4: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: ktr77GGT9fUMH7Uwa9KLHv2apdlBRjzWDQ3Us8CVMz4=)
5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: /AqzGVP/RU7VivZQf679uLu1hQ4PEwap68JYs68UOUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 01 May 2026 19:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2585 (0xa19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Apr 24 19:57:24 2026 GMT
Not After : May 1 19:57:24 2026 GMT
Subject: CN=69ebcb25-0aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:2c:0b:e1:3c:e3:6f:55:3e:7f:73:36:18:
26:f8:e4:aa:ac:60:10:ab:b1:14:64:c6:80:c7:ba:
bf:9d:10:40:92:46:ba:e1:e2:d7:93:fe:24:10:8d:
13:7c:7e:cb:a9:af:40:51:19:60:d8:8a:4c:3f:b0:
56:81:04:28:d5:c2:09:a5:a2:49:f8:59:e2:90:88:
28:e2:6e:66:aa:38:77:f7:b4:69:d7:02:1c:dd:0c:
1b:ef:3a:b2:6a:16:e7:71:16:4f:18:d1:43:4a:0a:
05:61:fb:1d:13:de:6f:1d:ff:8c:92:38:a0:a4:97:
67:f9:65:c1:5a:73:9d:27:0a:4a:6d:a3:bd:97:da:
0f:b6:05:03:12:27:35:b5:bd:ef:7d:74:6c:49:33:
c7:29:bf:19:6b:ac:10:a2:c2:92:99:0f:a1:75:b7:
07:17:2f:7a:99:ec:06:09:e8:a6:d0:04:9d:4d:33:
80:a4:3d:3b:6c:a4:a8:70:46:48:b2:b2:28:1c:3b:
97:fe:a9:d4:cc:01:9b:97:bd:57:5e:53:35:22:a3:
99:6c:cf:61:e6:dc:ce:a8:1b:e0:12:81:0c:76:cc:
4d:ab:2b:75:01:6e:26:97:a4:3a:13:49:a0:0c:ea:
6b:ab:54:4b:44:46:b2:88:2f:fa:a0:7a:77:a4:72:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:31:EF:57:32:DD:49:76:58:FD:11:B7:A8:50:08:79:7F:B2:6F
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:16:15:ec:12:39:75:3d:98:7b:79:a0:05:1e:bb:5f:76:52:
e8:19:f3:22:81:b9:f2:50:5e:d8:ba:f6:bf:b6:91:25:56:3a:
f0:12:f5:a3:c4:c1:c3:3c:13:2d:97:f9:d1:ab:04:cb:be:d5:
10:70:b7:6c:30:19:b5:fa:5e:f2:39:8c:36:74:4f:1d:29:58:
29:48:cf:8c:be:67:e2:de:6a:f8:64:1b:5f:98:ed:ee:34:ce:
ab:fb:b7:88:29:ae:97:1a:54:1e:4e:1b:35:77:c4:3c:fb:67:
11:a9:42:48:a4:a6:d1:2c:c9:28:40:88:fc:a9:d6:9a:6a:b3:
88:81:a4:b9:8d:ad:7d:90:50:8f:31:68:a3:e7:ca:b2:a1:91:
1f:6b:51:35:ba:19:88:71:37:2f:6d:1d:02:cd:3f:a6:74:a1:
5e:f8:a2:b5:ec:9f:1e:53:8b:9c:ec:ca:f4:31:61:02:d1:c1:
ce:df:c6:cc:86:9e:0c:20:3f:36:79:e7:ec:38:d7:df:39:7d:
a6:15:01:65:e9:bb:79:a0:b3:6a:57:78:99:39:74:26:f3:fe:
e3:d0:7e:4d:24:15:0d:48:fa:bb:89:0c:10:fb:b5:e6:86:62:
42:ab:cd:a5:8e:5e:1f:74:3a:b2:81:87:dd:1e:27:f2:5e:22:
98:0f:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 00:34:33 2026 by rpki-client