
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json)
Hash identifier: RgppDjw7KTmNKZ679cloTPobaL0lXdjvJ6IdmVdxD9E=
Subject key identifier: C5:C5:FC:D5:C4:B5:F7:1A:D8:5B:7F:FC:6B:7B:DE:76:D3:80:5A:D1
Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Certificate serial: 0948
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
Manifest number: 093D
Signing time: Sat 04 Apr 2026 19:58:25 +0000
Manifest this update: Sat 04 Apr 2026 19:58:25 +0000
Manifest next update: Sat 11 Apr 2026 19:58:25 +0000
Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: D5oFOrRlYP7hjC19naXdSDVQuefv6rzrQtDy2Yj8SlM=)
2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: IdJiVEfXkz53fxZJhHT8GQYKhlPRXuo9bgGTxNlpUbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517
Validity
Not Before: Apr 4 19:58:25 2026 GMT
Not After : Apr 11 19:58:25 2026 GMT
Subject: CN=69d16d61-aa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:24:92:a5:8b:88:80:be:61:8b:9a:7e:0e:
27:41:74:75:76:1c:e2:91:b6:12:d4:a6:50:1e:56:
e4:20:83:13:10:cd:5a:bf:49:17:9f:9e:c3:26:d3:
b1:64:1a:0f:df:d9:f5:58:fa:e9:3d:ba:75:e0:b8:
81:8c:f0:b0:46:8a:5f:cd:f4:5f:50:81:7d:33:e5:
0a:14:b4:7c:a4:44:82:eb:f1:10:5e:66:4e:1c:30:
13:ad:2c:ac:98:81:a1:72:98:18:76:f9:61:e2:11:
f7:f1:a7:af:91:5c:3a:f0:f5:be:df:88:51:1f:bc:
e9:ff:de:85:ae:00:17:38:c6:ec:21:ea:bf:19:a5:
dc:b2:eb:8b:a0:86:9f:d9:6f:da:0f:69:d2:01:f0:
02:92:20:85:ae:47:0d:fc:60:7a:b1:75:fc:c6:3b:
c3:f2:8e:25:9c:ba:25:46:eb:dc:8f:96:2e:3c:b7:
4a:71:82:e2:6a:93:1e:fd:d0:84:23:d7:e6:f6:39:
54:f5:f1:cf:39:20:fa:69:8d:87:39:bc:c3:43:6f:
c9:5b:99:c8:cf:6c:38:cc:e5:e8:be:11:cf:6a:13:
a3:a8:07:67:48:49:81:1f:6f:79:3d:22:3d:54:d2:
d5:d4:55:db:83:23:27:c8:e3:3a:67:66:16:04:37:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C5:FC:D5:C4:B5:F7:1A:D8:5B:7F:FC:6B:7B:DE:76:D3:80:5A:D1
X509v3 Authority Key Identifier:
keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:ad:6c:2d:c0:da:a8:72:0e:96:46:6f:0a:5c:2e:bb:c8:cf:
8b:16:7b:e2:23:1e:1b:9f:ac:be:82:27:aa:6a:dd:5b:b1:75:
36:32:4e:6c:53:5b:53:df:22:44:7a:d6:4a:c6:70:43:72:ff:
99:7e:21:a1:40:b8:00:8a:5c:4e:a0:48:bc:c7:e0:41:41:1b:
84:f9:8e:93:75:d1:38:35:3f:7d:4f:3f:2d:8d:3f:fe:e6:90:
b1:f1:c9:2a:01:e6:6f:a8:96:7e:f9:e5:4e:a5:c8:fd:05:61:
2f:4f:a6:0e:63:3b:83:26:18:37:30:bb:ad:6f:0d:1a:d0:59:
7f:db:9c:ac:a7:9c:18:82:0f:17:ab:20:50:ed:c8:70:2d:cf:
99:3c:e0:50:06:6d:37:e5:24:88:28:74:43:75:f4:82:38:8a:
78:4d:fa:4a:ac:78:9a:fa:77:f2:17:33:af:83:c2:c2:f6:84:
42:ea:ba:df:24:c6:59:fc:03:d1:00:82:1b:7f:0e:67:4b:0e:
07:c1:b7:e2:ce:29:16:8f:e7:fc:90:b9:d9:72:9b:ec:7b:1c:
fa:06:08:61:e7:3f:a2:18:78:d6:5f:92:7a:7c:d4:35:6b:c7:
5c:50:9e:b0:02:80:7a:a8:99:6d:9b:83:26:3e:5a:2a:98:3c:
f6:d4:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:23:43 2026 by rpki-client