
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json)
Hash identifier: eKfQgPAIsS5bYL7OWbnbElUlE6VklmWN/st2weIwYWE=
Subject key identifier: A4:39:4E:EF:B8:E0:83:D4:8A:06:29:6C:7C:BD:2C:74:02:7E:F1:49
Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Certificate serial: 06F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
Manifest number: 06EA
Signing time: Sat 04 Apr 2026 21:53:43 +0000
Manifest this update: Sat 04 Apr 2026 21:53:42 +0000
Manifest next update: Sat 11 Apr 2026 21:53:42 +0000
Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: CKyASWMRJNBVOtrjQS4DNoWg0EUlgjMH8FqVnqAunlg=)
2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: GFVauPq5fJh/s7MjoQc/i7d6D36WUmsf38yMr3GXmuA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl
rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778 (0x6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Validity
Not Before: Apr 4 21:53:42 2026 GMT
Not After : Apr 11 21:53:42 2026 GMT
Subject: CN=69d18866-4090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:d9:37:d8:bb:83:19:9e:b3:55:76:38:01:
4c:ca:a4:06:af:c8:54:18:ff:54:db:9c:2d:42:25:
c7:4e:0c:80:2d:08:07:2e:15:5f:25:b1:2f:d2:23:
c4:97:ce:80:74:bc:59:aa:a5:48:62:40:ec:c9:48:
f8:aa:dc:5c:ff:b0:c0:4f:0f:d4:11:2f:22:20:01:
1d:b1:36:ca:1e:f7:ed:53:50:45:c2:d3:b8:8f:0b:
b0:23:b4:61:88:89:57:08:d2:b8:c0:65:39:34:2d:
10:4f:0d:65:37:f8:19:6a:d9:a2:45:a1:52:2d:1d:
b0:ea:e9:3b:a3:71:b6:ba:00:31:98:0e:b5:dd:67:
5b:5f:f9:aa:db:9e:af:71:b3:29:e3:db:4c:d8:aa:
fa:9e:2f:1f:8a:3b:7f:03:b1:9e:0a:76:c6:70:e8:
a6:2e:1f:09:fe:85:4b:cb:e9:87:0b:21:d3:07:18:
ec:b4:b4:f5:45:bc:d5:92:40:26:a7:f8:83:da:d5:
2e:5f:c1:9a:59:e0:0b:16:28:a4:ac:53:ad:00:bc:
9c:6c:5b:1b:f8:f5:f7:d8:f1:fc:ee:50:5e:7b:b0:
7c:75:5c:05:7f:d9:90:78:9c:8f:c1:3b:f4:ec:14:
8d:17:8b:9c:30:50:52:6f:af:e5:40:4f:7b:20:50:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:39:4E:EF:B8:E0:83:D4:8A:06:29:6C:7C:BD:2C:74:02:7E:F1:49
X509v3 Authority Key Identifier:
keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b5:23:eb:45:09:15:cd:48:44:77:17:24:d7:ab:0a:e9:79:
5a:26:20:cf:49:a7:71:f4:28:05:41:3a:87:e4:09:69:ae:76:
bb:f9:62:23:62:03:e0:5f:1a:74:ea:da:f9:82:72:93:09:f0:
58:7c:82:70:f2:ae:76:fa:3f:ec:10:c4:bb:b1:45:35:93:55:
f1:7e:96:87:64:5d:6b:92:1f:f3:f4:37:46:e6:ec:0d:12:1c:
24:51:ce:9d:fa:b5:f0:30:d5:2c:fa:19:d3:f8:2a:d3:04:50:
18:b7:c2:c1:20:27:a3:19:dd:70:3b:31:75:06:16:8e:dc:aa:
73:ce:a8:97:29:7a:e0:c4:a4:e9:46:d8:b2:2b:1b:11:1e:c5:
e3:64:b8:91:79:9d:aa:22:4a:94:44:ef:67:2a:c1:99:b1:34:
87:cd:71:0c:59:75:47:dd:52:0f:e9:10:7c:7c:3c:43:b8:5b:
3e:68:1b:b5:41:92:a7:57:45:33:8a:cf:66:f8:01:a3:37:a6:
bf:94:c4:a2:8c:04:c7:6c:73:5a:13:5c:03:74:ce:8b:4d:b7:
fe:b0:de:80:50:69:59:ae:f6:d2:5a:98:15:c5:6a:90:99:d6:
73:aa:63:f4:15:d9:f7:f1:62:5d:89:8e:17:99:71:23:fa:ff:
24:5d:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:22 2026 by rpki-client