
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json)
Hash identifier: +GmtG55vyUGloPyp2dPRvKw7SDCpKErOFBA8ZQ1zo+4=
Subject key identifier: 65:2B:97:BD:9F:8E:05:DA:02:E8:86:09:AB:81:20:A4:B1:E8:A2:BF
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial: 0D16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
Manifest number: 0CDB
Signing time: Mon 20 Apr 2026 18:27:32 +0000
Manifest this update: Mon 20 Apr 2026 18:27:32 +0000
Manifest next update: Mon 27 Apr 2026 18:27:32 +0000
Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: PX3KmqqHWpwJhbgvZhxGPzpfVWw2ivqQNpfJ51jBzHc=)
2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: T30sMzZH4Abydwi4UNKY0/Wj2XuOOa+/JM841poURBU=)
3: C1C279D6997C11F0BDB1853FC4F9AE02.roa (hash: DQkRppQNbZeDMwk1/8d30BRcsAk9mGpTFMUfz2amNfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 18:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Validity
Not Before: Apr 20 18:27:32 2026 GMT
Not After : Apr 27 18:27:32 2026 GMT
Subject: CN=69e67014-947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:26:83:58:09:ad:3b:c3:21:c3:90:ba:72:
00:92:dc:eb:b3:6c:e4:42:e3:6c:09:7f:c0:6f:19:
18:f8:b4:b6:98:70:cf:70:34:7a:90:82:ce:a0:2b:
f1:63:45:27:44:dc:7b:8a:a8:0c:a5:8b:de:5e:cd:
ee:a7:1f:18:10:fd:1b:0f:99:24:39:ee:60:64:06:
1f:c6:3e:71:2e:5d:2e:fd:a2:ee:23:78:97:2b:96:
34:c1:2b:e5:a3:47:02:e4:30:ce:6f:a3:71:08:5f:
d1:be:81:94:7f:7c:e4:30:67:f2:ff:86:c2:71:f1:
23:0e:95:74:35:3e:0f:14:99:4e:6b:c4:16:99:94:
8c:58:7c:fa:97:c5:fc:a0:ed:b5:95:f8:bf:d3:fd:
92:5e:5e:2b:ba:5c:d0:65:29:1e:44:66:3e:6e:65:
2a:89:e8:7f:15:a1:cf:a3:bf:b9:fb:b9:72:1e:e1:
ba:ed:ce:62:9f:a6:d7:2f:b6:de:0d:df:6e:84:34:
68:f0:63:44:27:d5:04:62:9f:7a:81:b8:f6:7b:2d:
33:82:b7:87:73:62:02:40:b5:a2:87:7a:0d:eb:d1:
05:1f:7e:e3:a1:5a:32:ac:8a:73:f6:fc:40:50:ee:
f6:6c:20:27:a1:c9:85:f3:32:5a:99:29:54:78:fd:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2B:97:BD:9F:8E:05:DA:02:E8:86:09:AB:81:20:A4:B1:E8:A2:BF
X509v3 Authority Key Identifier:
keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a0:47:1e:5d:79:9a:9f:7d:86:c4:17:9a:3c:2f:33:67:1e:
bb:81:1e:2e:06:90:93:c4:65:a7:b5:3b:8a:6e:72:33:ad:9a:
f5:18:8c:fc:90:b3:06:61:47:01:e1:f7:e4:9c:e0:e4:47:00:
d8:fb:4c:0d:9a:58:b3:cf:b6:03:e1:fe:dd:e6:79:52:98:2b:
d3:f1:1e:5a:cd:6b:a6:a6:89:36:af:c4:10:78:b4:4d:2f:ed:
4a:9c:85:09:cd:b8:ce:7d:64:16:da:68:87:6d:1a:ad:0f:73:
ea:46:e8:d7:e2:25:af:56:98:69:84:67:cb:f2:67:b6:af:8a:
52:8a:91:8e:dd:6a:6c:99:26:bb:dd:37:d1:ad:5e:db:26:a2:
9f:3a:d0:86:99:3a:bb:d0:14:6a:97:c0:3e:20:5d:eb:57:cf:
38:a3:b0:fb:2d:ed:38:b5:ea:86:4a:1d:6c:f9:65:ad:7c:9e:
e4:f8:98:51:82:32:3a:b6:6c:2e:ee:07:80:6a:c3:09:37:bc:
2a:1e:0e:fd:2d:c3:7e:ef:26:a7:37:99:c2:9f:1a:9a:fd:86:
30:9e:a9:68:20:3c:75:09:c1:b4:66:0a:41:38:a7:21:22:1e:
ea:9b:75:5f:5a:eb:1b:a8:64:2d:5e:69:db:cb:7f:e8:97:d6:
0d:11:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 10:27:00 2026 by rpki-client