
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
File: ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json)
Hash identifier: UVn0cn1FzMKv+UHMSt0Y0Ph9avuOUxZw32zDbCQSVOc=
Subject key identifier: FC:06:1C:AF:C7:DA:38:52:47:D5:C9:F2:96:65:B7:31:9C:18:2D:95
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial: 04C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
Manifest number: 04B1
Signing time: Sun 26 Apr 2026 23:54:18 +0000
Manifest this update: Sun 26 Apr 2026 23:54:18 +0000
Manifest next update: Sun 03 May 2026 23:54:18 +0000
Files and hashes: 1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: 5WdefeNvy1dcIVgzeSpd6tb/6ykqvEZ/SLA31RMIZns=)
2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: jtPs82NLVd21ee8+NCk8Ufzq1PTdaAHag74elLulFv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 23:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Validity
Not Before: Apr 26 23:54:18 2026 GMT
Not After : May 3 23:54:18 2026 GMT
Subject: CN=69eea5aa-514a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:e4:e1:7d:3a:49:92:35:98:26:50:41:ba:
3b:a1:16:77:01:4a:7c:1d:0c:ef:41:ae:7d:c2:d8:
c0:c3:cb:5b:08:91:d7:ec:94:ba:c5:a4:be:95:28:
f1:a4:ab:a6:2b:50:9e:03:8b:16:fc:53:3f:a0:9f:
90:de:43:67:a8:26:7a:53:dd:50:ef:c4:09:ea:1d:
c4:7a:19:cc:c3:bc:c8:f1:d7:ca:06:53:4d:40:ae:
ad:04:a9:8d:d8:05:bb:a7:85:ba:12:01:93:18:ee:
2a:68:16:68:f2:25:96:97:75:cd:2c:68:db:dc:7e:
ff:99:f5:ff:4f:45:9f:68:33:d3:71:dd:ae:9e:42:
77:6e:26:e5:3b:7f:a4:70:d9:0b:42:da:1c:55:a5:
b9:0a:8c:fb:a9:63:48:2c:4d:1c:10:23:94:6e:51:
d7:5d:90:5e:f3:20:d7:dd:7a:47:cb:49:c8:02:94:
35:84:23:dc:88:c5:3f:85:b7:cb:ed:ae:28:76:85:
e8:7f:ec:fe:ae:53:43:8f:63:e0:fa:32:69:b8:0a:
42:65:b4:79:45:49:a1:43:e0:30:de:a0:46:7f:0e:
2b:a7:58:3c:67:a1:8d:3d:b7:43:8a:c7:cc:9a:54:
5b:c5:85:7f:8b:d0:a2:9d:5e:44:78:5c:35:86:d2:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:06:1C:AF:C7:DA:38:52:47:D5:C9:F2:96:65:B7:31:9C:18:2D:95
X509v3 Authority Key Identifier:
keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:50:3f:c1:54:2b:37:61:1b:90:8a:a9:92:96:66:53:24:
6e:8f:26:d1:aa:4d:d0:79:0f:b7:db:a7:f8:83:91:d8:f3:e8:
c8:e8:13:f0:74:c7:73:8b:89:a6:f2:54:e3:7a:00:6f:32:cd:
e1:d1:db:52:21:09:b6:38:30:69:33:2b:d1:56:d7:ff:5d:9d:
c1:08:b8:ba:91:89:ec:30:05:d1:f3:28:c1:49:3b:aa:b5:1c:
88:1f:b1:74:3a:44:bf:07:0c:48:43:6a:87:f6:5b:55:fc:df:
de:54:84:f6:fe:26:e2:a6:9d:b0:10:55:16:0e:16:e8:30:b8:
82:d2:33:f9:9e:78:bf:2c:5b:f6:6b:cc:f2:d3:36:10:2b:a9:
99:50:28:f1:46:9a:1c:f1:07:5d:1e:f1:d8:0a:79:c3:3a:38:
d1:7c:85:17:cf:be:fd:6a:32:e9:80:64:65:b8:94:19:6e:95:
20:98:59:39:54:db:3b:59:10:48:a6:2a:49:15:6e:cf:7f:90:
9d:ae:8a:fe:9c:cf:ae:4e:3c:d2:7a:74:56:0d:16:f7:cb:d0:
f0:46:43:06:59:0f:8d:38:3f:72:fa:cc:77:dd:a1:04:f8:1d:
05:64:2d:c3:88:07:94:3d:20:b9:11:c4:b1:6f:d8:00:f6:88:
75:2c:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 13:09:32 2026 by rpki-client