
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json)
Hash identifier: 3iAkbAhN8/9TU3+8Y4culYoT/XVPP1cljsnztxo/PG4=
Subject key identifier: 29:41:03:02:AF:2F:C4:30:26:6F:4E:13:92:6F:85:FB:DD:28:04:4B
Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Certificate serial: 0A34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
Manifest number: 0A29
Signing time: Sun 26 Apr 2026 19:40:22 +0000
Manifest this update: Sun 26 Apr 2026 19:40:22 +0000
Manifest next update: Sun 03 May 2026 19:40:22 +0000
Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: XBoQ1yeajq523bhOsnhmC2v0MB3DWt5U0/98iYS9nUY=)
2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: ouYBwpfCXuAbXe6I0vrvzKSbU872/FUx3W+kR5PDwWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 19:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Validity
Not Before: Apr 26 19:40:22 2026 GMT
Not After : May 3 19:40:22 2026 GMT
Subject: CN=69ee6a26-8bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:88:2b:63:90:69:dc:de:e8:a6:36:df:21:
56:f6:d2:06:9d:f3:b2:01:34:72:59:02:fa:4b:0b:
92:8d:fb:42:12:39:9d:31:40:1d:d7:fe:4a:1f:3d:
d4:03:8c:e8:23:e8:89:9b:bb:bd:43:30:ec:f0:1f:
bf:a3:b4:03:3b:68:a4:08:99:ed:1a:66:33:0c:ca:
69:95:e1:fd:84:d2:4e:36:a1:e4:8a:35:72:0d:d5:
b9:f9:a1:8b:55:c5:ff:6b:3b:5a:a8:06:a1:cd:74:
4c:7d:6f:34:89:03:ef:88:33:63:87:c6:ee:a8:b4:
2c:90:4e:ff:ae:ca:0c:5d:83:25:25:b6:51:29:b3:
26:c7:6d:47:cb:d8:c2:cd:08:59:21:a4:d5:16:10:
fc:70:9d:7b:85:4f:81:2a:96:af:44:4f:77:38:cc:
74:5b:b5:4e:5d:fd:81:14:a9:52:04:33:ff:73:ab:
cb:0b:ed:e8:58:a3:0c:31:74:ac:c9:b0:b6:c6:8c:
22:d9:d1:a5:e9:87:da:f7:61:e3:4d:8f:db:f5:5b:
cf:89:5f:a3:2d:ef:94:9b:70:6c:0a:9c:6f:10:9f:
8a:63:ea:6e:1e:5b:38:38:33:e2:b5:7d:78:dd:a1:
eb:e4:d9:d7:64:90:9c:e6:8f:4a:95:ef:86:89:4d:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:03:02:AF:2F:C4:30:26:6F:4E:13:92:6F:85:FB:DD:28:04:4B
X509v3 Authority Key Identifier:
keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:2b:5d:dc:c1:61:f6:a2:09:f4:c5:8e:c1:dd:40:58:38:08:
54:af:5c:1b:1e:38:74:92:c0:8c:b8:17:17:c3:b9:2b:ef:fd:
83:e3:87:c7:47:c0:90:62:e9:81:44:99:16:bc:83:63:2c:c0:
bd:dc:fd:2f:04:69:bf:42:14:80:ab:ff:e4:23:8a:ee:49:6d:
d2:72:25:26:85:65:24:c5:0b:9a:35:27:98:d7:c9:fb:d2:6d:
d6:bd:6a:fc:96:8a:ae:39:39:45:f3:b7:73:1c:32:9e:5f:c6:
ed:5d:38:7b:62:bf:2e:52:a2:09:f1:bf:a0:c9:ec:27:9a:4a:
47:a4:3f:59:4b:4a:b8:1e:28:b5:33:b7:f0:88:29:3a:b2:d5:
8c:c5:de:9e:5e:3c:59:dd:51:bb:9d:73:8d:c7:de:00:e5:7f:
42:79:ca:58:f2:ec:47:a4:0b:29:2e:e8:17:95:6a:a9:97:1f:
a5:bf:37:c8:4e:e1:d2:d0:a9:44:d7:ef:d7:23:23:d9:bc:57:
20:97:89:22:b9:05:e3:a1:6d:84:9b:ab:cb:4d:58:0c:a0:19:
89:ac:bd:98:8c:e4:3e:67:cb:dc:a7:a2:4f:37:b0:33:a6:6d:
be:a8:62:52:43:d5:33:9e:a1:78:fe:4d:ff:72:0e:f9:39:e6:
f6:da:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:08:52 2026 by rpki-client