
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json)
Hash identifier: 0ermthPLaU5gSfNM+2md+9EMpSnZql818kop6tEY/T0=
Subject key identifier: 2C:11:6B:E0:83:4C:DF:E5:8F:16:B0:F3:7C:1D:01:2A:B0:2D:26:F4
Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Certificate serial: 0956
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
Manifest number: 094B
Signing time: Sat 04 Apr 2026 19:57:09 +0000
Manifest this update: Sat 04 Apr 2026 19:57:09 +0000
Manifest next update: Sat 11 Apr 2026 19:57:09 +0000
Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: CBhh0D+0ATET6SYwMBmIXV4BOz9GdnI5xID2J/EUgdQ=)
2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: K8ifKpf1OxSentj2ShFOfGXT/u0aCJtaC2BhvsjDEzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Validity
Not Before: Apr 4 19:57:09 2026 GMT
Not After : Apr 11 19:57:09 2026 GMT
Subject: CN=69d16d15-51e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:24:61:ec:ad:0f:b4:6b:46:2e:ed:32:18:
e9:d7:52:5e:f6:fa:e7:2f:c9:b5:00:b3:22:c0:96:
ee:7c:94:20:64:52:46:bf:db:b9:8a:7d:f2:08:33:
21:f0:59:4a:9f:90:97:bf:62:9f:e9:9e:74:d7:51:
b3:7d:0f:2e:03:b1:8f:21:ba:a7:f7:69:78:f1:e2:
e1:e4:c1:79:f8:61:c6:31:f9:6d:8f:56:01:42:ba:
44:76:e5:0a:eb:18:c1:15:b5:4c:fb:f6:ec:2d:12:
e0:30:45:1e:4d:c0:c5:e3:d3:54:e0:ae:92:4f:6f:
9c:d7:45:88:75:5a:00:11:35:48:59:19:1f:d2:9a:
fa:76:ab:f4:62:2d:6e:98:2c:ff:c8:a0:15:2d:ee:
cf:00:44:8b:8a:ff:49:c5:7c:78:2e:55:ca:b4:8f:
a6:4f:0b:69:80:f3:ac:67:eb:98:9b:4a:76:6c:29:
b3:c0:bf:07:23:91:41:aa:54:91:ab:81:ea:33:15:
e8:34:3e:8d:59:7f:cb:59:17:0f:d4:db:8d:db:01:
a5:8f:dc:c0:54:0f:15:14:27:8d:20:26:0b:84:f8:
db:e5:45:5c:3c:30:c1:d9:49:b0:cf:34:45:5d:a6:
32:bc:a5:f8:ce:78:2c:75:eb:f8:3c:de:e8:62:ca:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:6B:E0:83:4C:DF:E5:8F:16:B0:F3:7C:1D:01:2A:B0:2D:26:F4
X509v3 Authority Key Identifier:
keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:36:11:be:c8:c4:0b:14:94:b1:eb:5e:f0:1f:b6:ee:0f:6a:
95:29:3b:0b:20:1f:aa:c2:7a:cb:c4:3f:f9:7b:97:0d:ff:b4:
76:2f:06:23:ed:41:2f:91:5d:d0:ff:29:d8:98:aa:07:a2:cc:
12:fc:12:3e:84:e4:52:a0:e1:11:af:d1:56:34:ea:d4:e8:0d:
c3:75:cc:1a:0c:ea:fb:9c:30:5a:23:32:91:03:91:25:2f:39:
1f:ab:9e:ff:2a:3e:98:4d:59:64:cc:db:b9:f9:7b:a3:69:d8:
ba:fe:0c:45:9b:d7:66:41:9a:30:21:7d:0d:08:21:e3:93:fa:
b4:79:22:f1:77:bc:d9:06:06:f0:8c:c0:f3:70:a2:84:d9:f8:
00:72:5e:a0:ac:b9:7b:90:a8:3a:c9:3b:cd:00:08:3e:61:61:
f6:2e:df:72:3d:a2:db:2b:82:fb:be:fa:71:b8:a9:d2:15:84:
8d:a9:cf:f2:ee:e6:05:45:a4:2d:82:75:c4:90:ad:9c:93:c9:
0e:47:36:6b:16:bb:33:a2:63:c6:91:b9:f1:bc:7f:53:cc:09:
23:59:50:7f:4d:9c:a6:45:b4:00:31:0f:74:fd:a4:9a:3b:fb:
78:0a:0a:99:32:c8:00:3f:e1:c3:21:42:b0:59:2a:1c:12:20:
a6:01:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:42:27 2026 by rpki-client