
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json)
Hash identifier: x4tgzmIK8HuRsVVwb/2JaIE1EXxNT0gmf+6FH7uDWYk=
Subject key identifier: 6B:BC:75:24:26:DC:2A:06:82:C3:97:91:A9:03:D0:F4:95:91:87:7D
Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Certificate serial: 050C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
Manifest number: 050C
Signing time: Sat 18 Apr 2026 23:33:14 +0000
Manifest this update: Sat 18 Apr 2026 23:33:14 +0000
Manifest next update: Sat 25 Apr 2026 23:33:14 +0000
Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: IwZUPLKoDb3yELudiiCeAfXNIFA9qWUKqkGVaNxqHHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC
Validity
Not Before: Apr 18 23:33:14 2026 GMT
Not After : Apr 25 23:33:14 2026 GMT
Subject: CN=69e414ba-e998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:10:b9:ee:d0:78:c8:a4:bb:56:b1:2f:ee:
ba:c9:0d:4d:44:28:04:8d:49:d7:be:04:5c:51:9d:
8f:be:7e:2e:2c:d1:dc:4f:50:a6:1e:06:2d:cb:95:
a8:42:19:23:e0:4e:b1:db:19:f5:0c:b2:e8:df:6a:
04:fb:ff:dc:7f:e6:af:87:2f:1b:31:ba:3b:5f:39:
31:c9:27:d2:62:ef:f5:e2:2e:12:3b:ac:f8:01:e6:
07:81:1f:7b:55:5f:fc:db:bc:cf:91:eb:fa:30:25:
bf:d8:f9:c1:94:45:ed:5f:3b:52:f9:fe:3f:28:75:
63:06:c3:c0:f8:da:e9:14:25:51:18:88:a8:dd:70:
f7:7b:68:d0:e9:1d:65:ed:6d:5a:de:97:6a:0f:db:
01:74:7f:22:e8:dd:6d:99:1e:ff:83:f0:e2:2b:9c:
fb:c2:cd:34:41:c1:fb:8f:ac:d9:07:ff:e3:0f:7b:
15:79:74:8c:6f:05:61:e9:79:71:b3:e5:5d:c0:cf:
7a:75:73:d6:0e:4d:46:d5:e1:0e:f4:17:58:42:77:
3c:2b:9d:12:85:9f:af:0a:51:c4:8b:cf:97:93:31:
16:e6:d0:93:4a:20:b5:e5:2e:5b:6e:b5:57:c5:12:
35:41:1d:d5:fd:5b:a4:88:3e:3d:9e:fc:19:16:ac:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BC:75:24:26:DC:2A:06:82:C3:97:91:A9:03:D0:F4:95:91:87:7D
X509v3 Authority Key Identifier:
keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:03:af:8e:52:e5:85:36:c6:1c:5d:7e:e0:47:72:90:6c:
af:53:ae:b4:9e:96:52:e7:7b:6c:c4:33:f6:4a:b2:2e:7c:da:
3a:b7:04:62:e7:66:76:86:29:7b:3a:93:03:a1:8c:cd:52:b3:
0d:c1:58:53:d8:cb:4f:48:f3:fe:41:b5:46:04:8b:7c:6b:d4:
b8:6d:62:c8:b1:9e:5c:fe:6f:b6:36:59:c2:41:7f:a8:39:53:
46:3e:b3:22:5d:ba:be:d9:b2:f5:c2:8f:bb:31:45:f7:36:4c:
24:57:21:51:49:a9:7d:ff:a8:b6:a2:56:d8:2f:da:ef:eb:84:
05:0e:de:b6:fa:78:1d:9a:41:92:52:e5:3f:2b:f6:87:6a:e4:
ed:b2:19:fe:1f:3b:9e:32:db:54:99:74:9a:63:1a:19:4f:b3:
34:ad:a3:b2:64:e3:7f:36:3e:34:f9:37:b6:fc:53:06:c1:5e:
c9:48:c5:55:28:f6:b4:de:13:72:bf:6d:f2:9b:ab:d2:a4:d5:
e3:81:38:46:50:45:51:3f:a9:8d:09:3d:90:32:3d:e7:28:e9:
07:e9:d7:04:62:1b:ba:76:14:be:d8:f9:f9:66:13:e4:6c:b5:
43:08:89:34:73:08:01:c2:22:eb:57:63:ad:d6:27:d0:20:bf:
17:e7:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:27:16 2026 by rpki-client