
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json)
Hash identifier: +KlcLsry4tnBB3Iha7L7ntNAYrz8xQHDIvM8Wz9RvVw=
Subject key identifier: E5:32:34:D4:4A:57:21:7C:33:E1:4B:08:8D:93:DD:8A:33:0E:8D:DD
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial: 0958
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
Manifest number: 14DF
Signing time: Sat 04 Apr 2026 18:50:25 +0000
Manifest this update: Sat 04 Apr 2026 18:50:24 +0000
Manifest next update: Sat 11 Apr 2026 18:50:24 +0000
Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: AuOAp4EREOkgdyb+jEWgygWGTizL6h4h8wpwDoJYTvg=)
2: 306CD346148D11F19BFA55B13D3D8C67.roa (hash: BAr/qgF2MLGt0IoB1WIa6SNFChHO0/OxfFvIz9Ta+q4=)
3: A856E7621BBC11F182440C5A133D8C67.roa (hash: KdW7HmM/QsPtpcnFpMg/Q8r0PDiCC8P4N0obd527mv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392 (0x958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Validity
Not Before: Apr 4 18:50:24 2026 GMT
Not After : Apr 11 18:50:24 2026 GMT
Subject: CN=69d15d71-5de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:98:bf:fd:3a:a8:2e:7f:ff:95:47:19:26:
50:5e:dd:2a:b9:db:23:4f:c1:2d:33:74:ef:8c:2f:
64:43:94:30:57:cc:5a:3e:80:fa:fb:d7:4a:18:09:
3b:f3:14:19:31:6a:e0:de:39:28:ba:45:8b:0a:1b:
45:72:3e:74:06:cf:c9:40:b4:20:e2:ab:bf:ad:3b:
78:07:db:cd:9f:f4:5d:bd:c2:a6:25:50:8a:d3:3f:
51:8f:97:1a:67:d1:e9:d3:99:5d:5a:3e:76:46:0a:
0b:48:25:b6:ac:a5:38:3b:1f:47:8c:c1:58:82:57:
8f:3b:40:24:ff:ed:04:01:2e:ad:68:03:50:74:09:
0d:d1:e2:e2:af:88:7a:5a:3f:5f:7b:01:68:1b:c0:
63:e6:58:86:97:d5:45:15:45:7d:bd:38:94:47:90:
09:b6:27:50:48:41:98:86:6f:74:98:6b:b1:6f:21:
ea:bd:8e:14:08:ed:b3:73:d4:9a:9b:9b:a7:53:f3:
e2:00:c8:28:03:cd:7d:92:6b:a4:74:a9:77:6f:50:
46:f5:37:98:5a:18:ef:f0:4e:a3:16:31:42:24:0b:
6c:44:d6:b2:4a:88:05:ab:fc:6a:86:b0:f9:2f:72:
35:1a:15:45:d8:e9:8e:05:9f:aa:09:04:5c:ea:72:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:32:34:D4:4A:57:21:7C:33:E1:4B:08:8D:93:DD:8A:33:0E:8D:DD
X509v3 Authority Key Identifier:
keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:a8:42:b0:54:64:4f:b7:2f:be:c7:f2:44:0c:82:d2:d5:23:
01:a2:61:9a:88:59:e2:af:92:e7:e9:f1:cc:8f:4a:02:48:1f:
d5:3e:de:24:39:e3:e3:10:43:19:11:d1:2f:00:6b:a3:d3:9e:
2f:33:6f:75:41:2e:8e:3e:e7:61:62:23:b2:54:73:f0:96:8f:
0e:04:d2:8b:b3:c3:d8:28:2f:69:dc:e8:ab:fa:cf:ad:2f:72:
f7:92:08:ed:9b:f6:69:53:b5:69:59:1d:04:38:a5:61:de:fe:
42:fb:01:18:54:48:5a:b7:b8:9b:21:29:fc:5d:d9:91:36:1a:
06:c0:3f:de:09:7d:f0:9e:54:ac:23:20:ef:1a:84:f2:a7:05:
20:3c:4b:1d:72:05:8f:15:74:57:d3:16:ac:08:0e:0d:7c:b8:
94:6e:c1:ef:b8:54:01:0c:48:b6:33:0b:aa:62:e8:d4:a5:3b:
c0:c6:81:6d:64:30:ca:8e:44:d5:4d:92:42:2b:5e:80:49:f2:
74:77:dc:84:a3:47:83:76:c0:34:70:aa:b8:9b:93:02:ee:ac:
9e:e2:2c:9e:6f:e0:99:aa:4d:f9:48:52:f2:7e:1d:3f:92:5b:
1d:af:09:12:c3:17:5c:eb:39:cb:0c:29:fe:e6:98:04:23:19:
02:7e:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:05 2026 by rpki-client