
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json)
Hash identifier: LrE2WYuaWSqHxwF0VFT4JpT9pkzcNlG+zke/WYX8kmg=
Subject key identifier: EA:97:A6:FB:1B:15:1E:25:B7:44:95:02:E1:A6:5B:9B:1A:DB:C9:9E
Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Certificate serial: 0F44
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
Manifest number: 0F24
Signing time: Sat 18 Apr 2026 17:30:03 +0000
Manifest this update: Sat 18 Apr 2026 17:30:03 +0000
Manifest next update: Sat 25 Apr 2026 17:30:03 +0000
Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: c+orf6ZDNbo9rTI6sBTuTlfDVB9yhNN7WUQKpWzfCP0=)
2: 5C154406988911E991B10838C4F9AE02.roa (hash: tQrQ6Cd+gUF5DxrjyCWytmMItl98qXXXMjLohZ6qa3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3908 (0xf44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Validity
Not Before: Apr 18 17:30:03 2026 GMT
Not After : Apr 25 17:30:03 2026 GMT
Subject: CN=69e3bf9b-eb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:8e:45:08:70:61:81:75:6a:d1:fe:b9:c1:
8f:bb:69:1f:36:25:b1:57:24:90:d8:27:64:96:91:
14:ad:56:80:7c:71:71:5d:7c:e2:b5:4b:02:56:e7:
78:99:9c:36:63:48:b6:78:81:e2:4b:fa:5a:4e:38:
91:93:bb:f7:fc:35:a4:63:66:09:ce:0c:bd:a2:cd:
8f:b7:60:f3:c1:fe:d8:2e:3d:7d:7a:e6:39:ea:e8:
c4:82:d1:5b:e6:ea:c0:4f:a2:e7:63:57:d9:75:a8:
62:cf:2a:86:23:0a:7b:13:30:08:0c:3f:4b:7b:b5:
4f:1e:f9:17:3e:5d:ab:80:dc:d6:9b:81:87:fe:fb:
13:68:1e:e2:76:68:6d:38:e5:99:7c:2a:4e:20:e4:
0d:1e:fc:5d:b4:98:af:2b:e7:a8:01:8f:99:88:86:
8b:de:6d:45:66:a6:c3:46:5a:52:15:74:69:7b:85:
31:fa:3b:af:2a:83:5c:b8:08:80:8f:00:18:f3:2c:
ff:67:98:72:85:8b:c7:12:e9:50:76:96:cc:01:48:
4b:92:87:47:82:ca:4e:4e:7d:42:a6:1c:2a:c3:76:
5b:4a:cd:a5:1f:94:14:f2:f7:be:6f:6a:d8:06:2d:
6b:a1:ee:d9:10:5d:a6:d8:6e:da:85:31:01:e5:d3:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:97:A6:FB:1B:15:1E:25:B7:44:95:02:E1:A6:5B:9B:1A:DB:C9:9E
X509v3 Authority Key Identifier:
keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1d:4a:89:58:3c:a7:00:be:fb:65:e2:55:49:6a:46:8b:99:
48:ed:97:4e:47:1f:70:48:91:55:da:04:9f:e4:f9:17:98:00:
be:08:41:33:f7:08:18:e1:93:cb:e8:d6:5c:93:71:91:4e:e4:
e7:49:ef:75:ae:26:74:d8:a1:51:85:6d:0c:17:ae:67:b4:d0:
d2:80:12:81:fc:3d:22:31:17:b7:fb:cf:7c:b8:15:43:12:a4:
06:64:5e:a6:0c:98:54:90:0b:39:f8:80:00:14:52:e8:19:85:
b7:fa:ec:66:cd:8b:04:43:51:b2:87:82:c1:8e:de:09:fd:a3:
39:52:79:12:ab:75:0e:5f:55:43:f0:e4:8f:56:20:e9:51:53:
97:28:bd:3e:24:9e:f6:3d:5a:8f:ac:2f:36:35:f9:5e:ca:71:
6c:e4:54:e1:2a:ef:39:c5:29:06:b3:25:a6:f3:62:a3:36:c8:
8a:82:f0:9a:0b:18:42:6d:8c:4f:12:e1:b9:3b:87:68:04:57:
b0:c7:65:75:44:d6:8a:74:0b:f7:fe:3e:78:11:8e:12:4d:3e:
ab:a4:2d:48:c8:8d:55:7c:9c:5a:22:e1:de:b7:93:20:a0:86:
51:3f:fc:f7:e7:cc:39:dc:54:c3:12:85:a9:2a:c8:46:47:b4:
8d:73:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:27 2026 by rpki-client