
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json)
Hash identifier: 38TRueJc2GQDaJuTEEz0yMWCqL2FuCap2o5mCej6MUQ=
Subject key identifier: 68:A9:54:EB:A1:DB:6D:A5:69:5B:AE:4A:0D:75:8E:37:F3:5A:81:A6
Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Certificate serial: 025D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
Manifest number: 0257
Signing time: Sun 05 Apr 2026 01:50:30 +0000
Manifest this update: Sun 05 Apr 2026 01:50:30 +0000
Manifest next update: Sun 12 Apr 2026 01:50:30 +0000
Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: vbJxcxgLYRFNvcDJKwPNaEOPwVR45+Ij1vZsEpd9Vxs=)
2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 6qNNz/jU6Jc8rG9yGhVLuObMTM5ias6oQqU63sjwttY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605 (0x25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5
Validity
Not Before: Apr 5 01:50:30 2026 GMT
Not After : Apr 12 01:50:30 2026 GMT
Subject: CN=69d1bfe6-7ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:e7:1a:af:9b:a0:e7:aa:98:36:f0:46:18:
0b:93:02:08:d0:f2:3a:81:23:fd:37:60:c0:cf:b9:
3d:a3:ab:d0:a1:b8:51:ac:2f:30:92:51:90:8b:77:
c1:4d:e5:14:3d:a0:09:81:f2:b8:32:2e:0d:24:04:
f7:82:6e:d8:f6:ba:11:39:c9:59:bf:5d:8f:ce:f6:
d9:2c:f8:fa:6d:d3:dd:ce:40:a2:e3:c0:e8:14:4c:
54:90:b3:72:7d:7b:5c:48:c3:90:4e:f7:96:f4:e0:
e3:c9:c7:f5:79:06:25:13:e8:de:ee:5d:83:2a:74:
0a:b9:0b:fb:60:a9:97:da:84:f7:8d:9d:48:e1:1c:
65:ac:46:64:25:f5:14:18:c6:12:61:4a:73:d8:f8:
21:d1:bb:1a:db:02:74:2d:92:ae:f1:3b:69:ca:69:
95:fe:a4:78:64:c2:3b:4d:ec:43:8b:b6:18:a2:89:
d9:d3:66:7d:f2:1a:c8:e0:08:3d:ea:e7:d6:03:20:
ed:69:0f:c6:8f:47:50:98:2c:b5:18:5b:7c:58:da:
02:3f:6b:23:98:f9:cd:1c:ec:f6:d1:1e:4e:00:af:
b9:7c:5a:75:c3:3f:19:f9:c3:09:eb:f6:c7:e7:0a:
28:63:85:ba:9b:e4:a1:ab:5e:c0:68:f0:4f:3b:62:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:54:EB:A1:DB:6D:A5:69:5B:AE:4A:0D:75:8E:37:F3:5A:81:A6
X509v3 Authority Key Identifier:
keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:61:80:e6:a5:c2:55:c7:a2:08:df:a4:bf:36:35:9f:f3:43:
b5:0e:ee:bc:e9:e4:99:39:31:63:27:1c:41:d9:33:2d:74:10:
15:70:23:b4:dc:d7:f3:95:14:b3:43:16:89:e7:19:7a:72:eb:
f9:1b:73:86:36:79:b4:3b:12:90:c9:48:21:40:e0:21:a1:1e:
36:aa:37:9d:72:bc:62:b1:66:2c:97:f2:67:60:5e:eb:cb:8d:
57:e5:67:f4:ae:04:b0:e7:b5:3a:80:b6:de:d8:37:87:b7:49:
e9:5a:a2:f9:21:84:77:76:ef:40:db:04:b6:44:19:46:bf:b2:
73:3d:c5:8e:d0:fd:62:9a:c9:c6:df:11:fa:86:5a:16:97:1f:
b1:73:bb:a2:1c:98:52:66:d7:6e:30:96:ac:d2:c7:1b:7a:b0:
ce:6f:4e:22:0e:4b:c2:2d:87:38:3e:96:3f:04:e5:45:4f:00:
55:58:99:c6:97:35:2e:ee:9a:03:1f:36:73:cb:75:c9:1e:92:
a4:4d:42:fb:f5:e8:42:15:d2:7c:f9:68:b5:c1:08:65:ea:b5:
54:38:a0:b1:de:9f:c0:d5:49:df:37:6a:c0:ee:97:0c:cc:84:
f4:66:fb:72:bf:41:0f:5c:0b:35:1e:89:53:a8:b1:cf:56:0a:
ec:bc:b7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:09 2026 by rpki-client